Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File:                     OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier:          Y6YRKJ/9A2zVpHL8k6ZNy3JGBvcOX704CS51qdo10Bs=
Subject key identifier:   0E:E2:18:ED:95:CA:16:FE:46:C7:E1:EC:B6:FA:6F:CB:5F:C2:FD:56
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer:       /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial:       01987C0A198FFAE20B3DD1D8C8982C384CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number:          0E0A
Signing time:             Tue 05 Aug 2025 21:01:33 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:33 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:33 +0000
Files and hashes:         1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: fHsk1R32kSkN87omx/p5rlMK19wL0Ibqg7oMghGxF4w=)
                          2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:19:8f:fa:e2:0b:3d:d1:d8:c8:98:2c:38:4c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
        Validity
            Not Before: Aug  5 21:01:33 2025 GMT
            Not After : Aug  6 21:01:33 2025 GMT
        Subject: CN=0ee218ed95ca16fe46c7e1ecb6fa6fcb5fc2fd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:6d:98:42:e4:45:05:c4:56:f5:fa:00:1e:
                    e2:34:bc:5b:7c:b9:0a:3c:e8:f0:e8:3c:a6:c0:2f:
                    86:6e:a9:5b:aa:78:70:56:1d:c6:cd:03:61:75:9e:
                    79:56:5e:2f:a2:78:0c:0e:c9:d3:3d:97:7e:da:34:
                    d2:b6:31:e5:a1:9e:38:88:d8:c1:f5:99:e0:67:fd:
                    82:f3:4f:32:fc:5e:7f:01:c8:9b:92:dc:87:b0:fe:
                    a2:77:1b:54:01:45:fc:ef:1a:9c:25:bd:a0:f7:ed:
                    44:58:a2:f3:ec:cf:25:c7:08:d8:32:83:8f:2f:74:
                    4a:9e:25:09:cc:35:95:1e:66:11:ff:a2:26:1d:c2:
                    7f:db:ef:48:66:b1:fc:14:92:b7:52:a5:06:17:8b:
                    a6:03:f8:77:56:f8:73:0d:db:10:8e:f7:69:77:56:
                    97:3c:c8:19:a4:7c:b5:42:37:41:bc:b8:ed:90:ba:
                    de:bd:dc:74:bb:74:9c:84:d6:7e:f7:61:f0:52:5a:
                    ca:d8:77:57:0f:3a:2f:bd:7f:ef:65:fb:8c:ea:cb:
                    8a:08:39:58:e9:04:63:a3:0a:c9:2a:48:30:ef:d1:
                    77:c3:4f:39:49:70:8b:58:45:b4:bf:54:19:f8:9d:
                    5f:8d:be:ce:ba:20:08:9c:23:03:0d:6e:7f:56:33:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E2:18:ED:95:CA:16:FE:46:C7:E1:EC:B6:FA:6F:CB:5F:C2:FD:56
            X509v3 Authority Key Identifier:
                keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:1f:8f:d4:64:39:7b:06:48:76:83:eb:c1:77:8b:65:0f:
         70:b7:43:09:36:e4:31:83:ba:36:01:0f:01:92:10:9b:4e:f0:
         03:a7:0c:ad:f0:49:d1:2a:d6:2e:95:06:3f:c6:d6:94:69:80:
         0f:e8:0e:bc:12:3c:fa:a2:66:77:b3:74:d0:c3:44:fe:dd:44:
         ef:01:e7:f7:d5:09:bd:5b:ef:68:5a:b3:a2:ab:03:f5:8c:d0:
         56:74:1b:44:49:34:27:b7:1d:5f:14:b7:9e:2c:9a:21:89:a1:
         84:3a:0c:fa:ef:41:19:b2:b5:15:bc:0e:cf:91:06:cc:ea:f6:
         e6:47:8f:b2:f4:fe:9a:09:0f:2f:6e:c8:57:d5:0d:65:9a:39:
         a7:3f:31:69:f9:f9:d8:b2:6e:10:2e:dc:10:1e:be:0c:b5:54:
         52:f8:62:3f:04:71:4a:fd:5a:11:60:c4:3a:13:f8:ee:7d:2f:
         e6:b2:76:bc:92:22:3c:56:17:78:74:d3:7a:57:ff:2e:f1:f9:
         50:e5:3c:18:e8:7e:b9:4d:e3:84:e2:8d:e5:9f:3b:16:c5:76:
         ea:f5:7b:28:6d:9f:93:fd:89:2f:c6:58:e8:a2:d9:82:fc:32:
         7c:7f:26:2c:03:49:5e:1f:75:ef:3c:a3:b8:c9:e3:ee:2b:07:
         1b:09:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:27 2025 by rpki-client