Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File:                     OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier:          O49e2E01FDKhs+vEUxv3v7TyTeM4n52BtW+o0hScTKg=
Subject key identifier:   EF:7D:67:6E:3D:C9:ED:36:E4:C8:A2:9F:19:AF:E9:5E:6F:3D:9E:ED
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer:       /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial:       01987ED38C98B89BC4A24DF00F5E680275EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number:          046B
Signing time:             Wed 06 Aug 2025 10:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:49 +0000
Files and hashes:         1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: BWP7lSyG/QDmq2JCiARAMVP7cAs0mBjHjwx1teMompE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:8c:98:b8:9b:c4:a2:4d:f0:0f:5e:68:02:75:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
        Validity
            Not Before: Aug  6 10:00:49 2025 GMT
            Not After : Aug  7 10:00:49 2025 GMT
        Subject: CN=ef7d676e3dc9ed36e4c8a29f19afe95e6f3d9eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:e7:97:a7:2c:e5:e8:ea:4f:91:53:0f:33:
                    7b:69:9f:01:d6:04:9d:b5:14:61:de:aa:ae:e3:91:
                    6f:8f:42:12:45:47:78:4a:84:24:03:c2:73:d4:5b:
                    ec:ac:6f:8c:d9:5b:88:15:79:43:01:6f:26:aa:34:
                    32:13:37:b6:34:16:dd:5f:84:f0:a8:54:d1:f5:c5:
                    0b:6b:e1:e6:b2:ee:24:d9:4b:7e:39:80:5a:42:0e:
                    6f:5d:28:1b:f8:2d:ac:3c:ca:1e:db:6c:a4:36:0b:
                    81:64:ec:ea:29:9f:f8:64:46:bf:eb:87:e9:0c:19:
                    b2:c3:50:e2:05:57:32:b6:17:31:a0:77:8a:80:0b:
                    de:41:bb:5b:b1:ba:ca:3e:4d:6c:50:5f:0b:2d:87:
                    3f:8d:34:60:da:ef:ba:54:81:83:7a:6a:f7:ac:c7:
                    fc:dd:71:d8:41:c7:0c:27:66:1b:94:d0:04:e4:05:
                    54:da:e8:9e:73:51:38:8e:58:27:43:23:e9:75:c7:
                    c7:74:fc:b6:c8:85:42:e5:c0:26:dd:02:ab:50:89:
                    ff:79:82:7f:06:f6:16:17:65:91:6d:db:02:6c:33:
                    49:24:23:0e:cc:f3:2c:8e:6c:a0:e0:8a:59:78:42:
                    05:5a:d6:f8:79:4c:4c:58:c0:a4:d0:4b:83:55:97:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:67:6E:3D:C9:ED:36:E4:C8:A2:9F:19:AF:E9:5E:6F:3D:9E:ED
            X509v3 Authority Key Identifier:
                keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:95:13:9d:4f:85:53:c5:2e:e4:60:90:5e:dc:18:18:5b:89:
         03:73:00:8c:de:79:26:82:ef:f8:46:a2:b2:55:0f:df:00:87:
         e3:82:c1:e8:47:bc:46:7c:26:0d:81:db:c5:8c:0c:46:77:9f:
         f1:a3:2d:7c:37:a4:d0:04:1b:76:1f:ae:2c:4b:ba:f1:34:38:
         e2:f0:32:00:e5:4e:8d:c1:a2:d2:b6:90:a2:7f:ba:4a:fc:a6:
         27:e4:fc:be:48:6d:55:b5:38:f9:e5:4d:df:d0:48:12:85:55:
         46:20:2f:d3:be:68:52:b8:d4:c3:79:fa:c1:95:99:d0:16:cb:
         d0:f1:14:3a:8e:1a:37:d2:c6:cd:ff:8a:b4:1f:6e:25:f3:fc:
         b4:7d:3d:36:dc:92:a4:ad:06:e2:24:b0:a8:c6:3f:ff:d7:88:
         ac:ab:24:41:3e:a5:c9:54:0f:0b:4e:7b:6e:01:b3:3c:ae:ed:
         27:67:f2:8d:d7:f8:fd:4a:a2:96:08:66:5f:53:4f:ee:93:ff:
         88:89:ad:d4:54:02:51:38:06:ba:6e:83:d8:9e:35:df:87:f9:
         44:75:14:fd:ef:6b:58:48:c9:d9:69:4c:71:8f:03:61:48:da:
         47:ee:de:90:e0:80:75:bd:08:01:cc:72:a0:ee:9e:d4:50:81:
         52:94:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:11 2025 by rpki-client