Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          rCm3LUXxRG9WHQmNkek32OUl3avgVk8xxvvOYYVZd3s=
Subject key identifier:   F8:E9:73:48:02:28:AE:E0:4A:8D:E3:20:00:1C:53:B2:86:4A:80:CE
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       01988E0FB9E22BCB77EEBBB3CAB5E7BB0AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 09:00:51 +0000
Manifest this update:     Sat 09 Aug 2025 09:00:51 +0000
Manifest next update:     Sun 10 Aug 2025 09:00:51 +0000
Files and hashes:         1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: Ocj7lKUJqm64pCIMBZpU60sGCPsyI7F9TI6+LE2L61U=)
                          2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
                          3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
                          4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:0f:b9:e2:2b:cb:77:ee:bb:b3:ca:b5:e7:bb:0a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Aug  9 09:00:51 2025 GMT
            Not After : Aug 10 09:00:51 2025 GMT
        Subject: CN=f8e973480228aee04a8de320001c53b2864a80ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:ab:a2:f8:a6:91:14:e4:d1:40:a1:79:b0:
                    b0:56:02:70:11:63:0a:08:a4:67:01:02:54:10:e8:
                    dc:65:35:4d:42:42:33:ec:23:ff:c3:f0:31:3a:6e:
                    2e:7b:c7:7f:0e:41:79:46:82:5e:d8:93:ab:93:12:
                    a8:13:a4:14:24:30:fa:b8:b3:ce:0e:95:aa:a4:76:
                    64:41:26:a6:91:99:5d:6c:4a:a8:52:6b:f4:95:2b:
                    b7:a3:ef:ca:bf:06:c3:06:b3:ef:41:27:3a:1a:07:
                    f6:36:b1:35:c6:e5:e2:00:02:fb:44:33:a2:fd:b4:
                    d7:1c:0f:f7:0d:fa:65:e5:16:a7:36:59:93:72:b5:
                    18:8b:4c:8b:a2:76:5b:1a:ad:6b:e4:5c:aa:35:b2:
                    0a:3f:62:f4:6e:a2:ec:75:7a:01:6c:85:86:6c:fc:
                    4c:c5:08:62:39:1c:52:89:e3:45:2c:bd:a1:bd:23:
                    5c:0c:9f:d3:45:4a:12:0a:0f:8b:a8:9f:71:d6:56:
                    a4:ae:bc:9a:64:8f:ae:75:b7:c6:22:ed:e3:4c:89:
                    c9:7b:e2:e0:d8:af:40:c2:b6:9b:06:80:72:00:0f:
                    a6:63:3d:3f:bf:58:af:58:d6:bb:38:18:12:fb:65:
                    c2:97:7f:24:65:d1:89:05:a5:18:27:cb:19:86:d7:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:73:48:02:28:AE:E0:4A:8D:E3:20:00:1C:53:B2:86:4A:80:CE
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:26:97:aa:97:f9:82:a9:66:5d:41:43:35:06:f7:a4:17:f5:
         15:c1:b1:0e:fe:92:f4:39:7a:26:9b:af:55:36:68:6b:3d:6d:
         5a:01:c3:5f:4f:a1:69:69:2f:2d:76:76:4b:2d:56:15:35:d0:
         ce:31:90:05:09:8a:1b:f2:ed:3a:5d:6e:f8:19:56:94:a8:be:
         c8:1c:66:02:98:10:a9:c6:42:f7:6e:ad:9f:9e:a6:f2:82:02:
         d1:e7:fd:93:cb:ce:0b:96:45:c9:ce:28:7d:a4:22:b0:4b:ae:
         83:4a:a5:de:2a:43:28:3a:e6:8b:29:06:e8:69:b1:cd:b7:7f:
         b5:18:90:e1:ee:d1:5d:38:d5:11:67:62:21:b0:8a:ff:7f:41:
         2e:2e:d1:37:47:ea:3b:3b:ad:45:ad:6d:05:f6:4e:b6:91:87:
         9d:ce:23:97:3c:2b:f2:7c:4f:44:90:65:da:2f:91:f8:8e:f2:
         8e:95:90:57:63:b9:ec:41:1e:83:27:e3:c3:7a:15:ed:77:0f:
         f6:50:4b:28:86:9f:ca:39:89:05:27:3a:b3:be:9f:3b:e8:d0:
         c5:be:58:36:fb:9c:2b:54:21:ff:61:54:cf:d6:f4:53:0a:37:
         9e:b5:e8:c6:98:be:7f:2c:67:c2:05:ee:81:1b:61:d9:0b:ff:
         4e:41:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:53 2025 by rpki-client