Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File:                     O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier:          FWseYWaACdsIwMb4+KznTT9H5WA7WgTXBJ7OMx0HQB0=
Subject key identifier:   B6:C8:23:6F:87:56:80:74:30:B1:C0:79:32:F0:A9:CA:0D:67:19:DA
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer:       /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial:       01988AA071A926EC5F8905E0D671C5B15542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number:          0EF3
Signing time:             Fri 08 Aug 2025 17:00:27 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:27 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:27 +0000
Files and hashes:         1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: SfyK/i8v0EW0CxsFn8lEMODIDVHS1H/Xrzi7kuwpk1I=)
                          2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:71:a9:26:ec:5f:89:05:e0:d6:71:c5:b1:55:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
        Validity
            Not Before: Aug  8 17:00:27 2025 GMT
            Not After : Aug  9 17:00:27 2025 GMT
        Subject: CN=b6c8236f8756807430b1c07932f0a9ca0d6719da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:72:2e:8b:f2:11:b6:c0:e1:0e:2a:4a:64:
                    f6:e6:a2:6d:92:71:e3:88:12:f6:44:4e:d4:63:fc:
                    82:e7:7f:87:27:52:cd:9d:87:4d:22:a7:a9:09:7b:
                    54:6a:cc:a7:e3:53:6d:18:c8:fc:dd:5c:6c:73:56:
                    b3:2b:5a:12:ea:4d:06:87:33:47:e5:d4:de:49:95:
                    c3:f1:0b:c5:bc:04:5f:1c:ad:4f:4d:3a:c5:81:3e:
                    d7:b2:35:99:53:24:fe:4b:51:72:63:15:3c:22:1e:
                    e7:04:6f:a3:a3:8f:50:ef:8f:8e:e0:ab:7f:13:81:
                    25:5d:74:0b:6f:0a:4a:49:84:cf:3e:a3:94:62:b5:
                    0b:00:93:11:22:ae:0c:3d:04:99:10:bc:a5:90:09:
                    a2:fe:bf:7a:73:f6:aa:fd:22:4e:df:94:83:3b:fd:
                    f0:57:d1:cf:94:65:53:86:84:0d:d3:10:dc:ca:6f:
                    df:a9:bc:7c:26:d6:e4:de:1c:b4:2b:19:c2:3e:fc:
                    6c:4c:95:40:11:15:00:f5:a6:93:6c:5a:c9:d7:ab:
                    eb:61:d5:0e:00:be:46:b9:7d:4a:79:67:3a:14:1c:
                    3c:96:ad:1f:8f:1c:68:82:51:ab:a8:4d:b6:33:9d:
                    e8:60:b6:d8:1c:ae:fd:99:36:0e:86:52:37:0c:44:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:23:6F:87:56:80:74:30:B1:C0:79:32:F0:A9:CA:0D:67:19:DA
            X509v3 Authority Key Identifier:
                keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:31:de:a4:2d:d0:40:e6:d7:f4:38:aa:9e:4d:1a:9a:bb:
         be:f3:8d:b2:d2:bf:6b:67:34:c1:2a:4f:e3:69:3e:cc:ee:79:
         99:4f:d9:bf:fd:81:14:31:45:d2:b0:71:4c:79:8c:43:52:f2:
         0f:ed:83:04:4f:79:c5:49:8b:b4:01:07:dd:92:06:c1:b8:a3:
         ee:8c:5e:89:95:33:f2:ab:4d:34:cb:e9:d1:95:37:b4:66:cf:
         9c:af:04:7e:92:33:5d:ed:ec:61:65:5d:a9:bc:ac:09:c9:23:
         de:ba:46:ef:24:22:20:f2:be:3f:34:d0:b0:ce:e4:4c:53:a7:
         12:83:dc:36:f3:34:d1:5e:64:ba:8b:15:67:01:be:21:29:aa:
         1d:bd:57:a0:38:9e:97:73:f9:89:d6:f3:cf:e8:a6:e0:bd:43:
         74:00:20:f5:ba:9f:a5:83:35:65:42:b1:b4:16:34:16:37:5a:
         e0:e6:2f:a2:ed:dd:25:b3:a7:8f:d1:cb:40:d3:39:39:dc:e7:
         59:52:38:20:87:ea:76:c9:17:c6:4f:7f:6f:c1:b1:08:05:ed:
         c6:00:48:95:f6:44:3b:ac:97:8e:23:34:95:a2:ca:02:49:82:
         18:ec:3f:45:53:b5:a6:a8:43:48:61:85:5a:15:1b:2f:70:c4:
         61:91:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:18 2025 by rpki-client