Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File:                     ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier:          vF+gB0YgswyXhMpqwp0osj8N4hAmiyjIK+1RGCgd/Eo=
Subject key identifier:   DC:B5:99:94:76:EA:7B:A4:6F:16:83:D0:78:B4:C3:02:4E:5A:94:82
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer:       /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial:       01987D1C6E4D75A9E5E98E8DD5FA24DBEABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number:          0704
Signing time:             Wed 06 Aug 2025 02:01:11 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:11 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:11 +0000
Files and hashes:         1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: aU6jYCJutSvCHsmdtamSlK96sCqCwuha69BFXIWG2x8=)
                          2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:6e:4d:75:a9:e5:e9:8e:8d:d5:fa:24:db:ea:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
        Validity
            Not Before: Aug  6 02:01:11 2025 GMT
            Not After : Aug  7 02:01:11 2025 GMT
        Subject: CN=dcb5999476ea7ba46f1683d078b4c3024e5a9482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:1e:e7:9a:86:4b:83:4e:fb:47:4a:dd:e3:
                    ac:3e:b1:db:4b:47:7b:49:99:78:b2:94:a3:4a:ae:
                    ed:9d:85:ec:f2:46:77:7d:26:d0:af:05:dc:b2:3c:
                    23:57:c3:a3:69:2c:29:8d:bd:0b:21:53:87:5a:16:
                    78:bd:39:6d:ad:bf:bb:d5:30:c7:94:13:e9:19:ae:
                    5a:4d:11:6e:ee:10:43:75:d2:b8:63:e6:54:28:66:
                    5b:91:80:a6:92:f3:d2:59:a1:0f:d4:d8:0c:26:2c:
                    e9:26:61:0b:76:b3:4d:0c:83:33:93:b4:d6:79:1f:
                    23:32:61:01:82:79:1f:6e:46:a9:25:0e:46:54:73:
                    4d:39:a5:94:20:27:e9:0f:d9:01:23:66:bc:f7:be:
                    4d:19:07:10:ab:ae:eb:f1:17:77:c4:f4:5d:d8:0f:
                    1b:e2:f6:2b:58:af:b5:f5:94:77:27:a0:b3:15:ad:
                    4d:7b:42:1b:5d:45:6b:09:8e:02:85:d3:62:84:cc:
                    35:18:a5:12:52:c3:16:76:a0:88:22:3c:bc:33:61:
                    3b:a5:8e:96:ae:7b:b2:4b:90:1c:97:85:f3:58:c0:
                    32:c3:c9:39:ea:9f:7e:95:7b:dc:68:7a:dd:90:c1:
                    e1:72:e6:f8:75:4e:6f:b7:fd:bd:8f:e5:5e:ad:62:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:99:94:76:EA:7B:A4:6F:16:83:D0:78:B4:C3:02:4E:5A:94:82
            X509v3 Authority Key Identifier:
                keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0e:ef:96:98:9f:36:d7:48:8c:28:6d:90:f9:3f:4d:63:da:
         f5:de:2f:d9:f0:11:d3:63:9d:b4:84:80:3c:15:af:6b:a2:8b:
         39:6e:53:f2:0c:f7:76:b2:92:c4:9f:6d:81:5c:e2:5f:9d:88:
         0f:35:0d:b2:92:0c:63:16:f8:60:6e:36:1e:d8:b8:6d:63:b7:
         c6:1e:c2:91:10:f4:9f:ce:0b:75:53:17:35:96:04:5e:d5:45:
         3e:4d:47:74:87:dd:5c:03:bf:03:63:6b:9d:c2:68:8d:1b:97:
         c4:90:0e:0b:a9:e9:86:e9:d4:37:fc:fb:0d:52:6d:86:e2:bc:
         ea:d2:99:d4:97:f7:38:1a:ca:19:42:a2:02:f7:cd:69:5c:1b:
         2a:4f:10:5c:52:2f:40:73:59:e8:25:a3:70:c2:cb:79:df:c5:
         4f:8a:64:60:94:d8:af:06:e8:23:6c:09:3b:34:ef:c1:14:44:
         44:a0:1a:56:70:3f:f0:b4:de:3f:8f:c7:a5:10:4d:d6:23:e0:
         38:18:5d:c5:e4:fd:80:08:3a:fb:cf:1d:cc:d9:2d:3c:b9:ca:
         33:87:ff:16:ba:7a:c5:3a:9b:69:34:f2:56:52:0c:3c:a9:40:
         62:98:7f:8a:98:ab:4d:54:63:95:10:26:39:74:ab:f2:de:4d:
         39:ec:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:04 2025 by rpki-client