Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File:                     OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier:          bd5bOWEKu1ljnWJqLWSPWJ9Jlwbb+VJIDmCDUK9aJAM=
Subject key identifier:   D1:A4:8C:ED:DF:D4:23:CD:74:7D:2D:DB:99:E2:74:BD:6E:6F:6B:CD
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer:       /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial:       01988C58A8FB92DC33D66A4E706F2E8590EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number:          0F89
Signing time:             Sat 09 Aug 2025 01:01:17 +0000
Manifest this update:     Sat 09 Aug 2025 01:01:17 +0000
Manifest next update:     Sun 10 Aug 2025 01:01:17 +0000
Files and hashes:         1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: xEsbQpGbhTUm39SjPoq9oOiB33c66SlNGBinWun1Jfc=)
                          2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:a8:fb:92:dc:33:d6:6a:4e:70:6f:2e:85:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
        Validity
            Not Before: Aug  9 01:01:17 2025 GMT
            Not After : Aug 10 01:01:17 2025 GMT
        Subject: CN=d1a48ceddfd423cd747d2ddb99e274bd6e6f6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:14:8a:a3:fe:9d:f9:ad:e5:bc:76:7e:07:
                    71:5e:5c:54:18:3c:da:62:f8:3e:3b:6d:91:0d:3c:
                    7a:06:62:43:58:f6:2e:be:b8:b8:87:f2:21:c4:06:
                    f6:7e:7a:2c:74:8c:c9:56:a5:10:c0:04:ea:9e:db:
                    1e:cf:b6:21:f2:d0:0f:9e:ea:54:c1:17:cf:cf:41:
                    19:58:5d:50:e2:69:eb:a4:b9:bd:3d:85:4a:c6:48:
                    6d:81:81:18:b0:c9:a2:cf:a0:99:79:c9:5f:0f:cf:
                    b5:3c:38:f4:da:5c:60:e6:26:bf:4a:a7:65:84:9e:
                    fb:8b:28:95:e5:0d:83:d0:83:d3:f4:4b:7f:9e:7d:
                    55:df:21:7b:5a:d8:86:b3:39:f6:fa:3f:58:05:da:
                    cc:d8:05:17:5f:94:56:79:fc:22:2d:b3:dd:bb:55:
                    75:8c:aa:d7:0a:e7:ff:0a:56:ca:3b:58:77:6d:f9:
                    0f:1d:fb:e1:04:98:c3:21:66:db:d2:45:6a:c0:7b:
                    0a:7d:1f:5f:32:58:7e:f8:5d:50:b1:5a:78:56:15:
                    b6:5b:b1:46:93:05:3e:b5:5c:9e:ef:5a:56:b5:08:
                    19:46:88:12:07:8e:f7:d0:d1:71:b0:9d:49:d7:3c:
                    ea:23:0d:65:a7:6e:35:d6:2f:c3:c1:34:3c:03:18:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A4:8C:ED:DF:D4:23:CD:74:7D:2D:DB:99:E2:74:BD:6E:6F:6B:CD
            X509v3 Authority Key Identifier:
                keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:e5:9b:05:ce:e2:d6:75:52:2c:59:ed:c3:90:f9:fc:08:
         0e:04:fc:b3:4b:0d:cc:25:e0:38:df:c2:9e:a0:94:a1:d0:6a:
         5b:c4:cc:f9:60:63:97:50:f4:6c:e1:62:f1:a0:36:ce:9a:8f:
         7f:03:22:47:b9:67:81:46:44:64:8d:83:e7:46:92:a4:e5:a7:
         8b:2d:d5:6b:b8:23:03:93:3b:6c:f5:96:0f:8a:5e:a9:5d:6e:
         00:41:68:72:47:37:c2:d9:0f:ed:93:88:28:e1:b9:a6:f0:80:
         d3:53:f9:b1:99:21:f9:45:a7:18:90:b9:4f:95:7e:46:5c:b0:
         6e:b9:b1:14:17:af:12:f8:06:ad:0a:f4:6b:ce:45:e1:d8:58:
         c3:4f:c6:90:a6:54:82:77:3f:36:30:cf:9e:dc:66:d4:c5:28:
         5b:3d:05:dd:96:ab:da:8e:0f:24:f6:e3:66:60:20:ed:23:3d:
         ec:01:4c:71:1f:3a:c4:4f:99:dd:4b:04:40:a6:4c:7a:0c:34:
         a9:59:d9:d7:3a:38:62:d6:3e:7c:a6:2c:c3:41:c2:51:77:f5:
         84:08:0a:27:cc:ab:f7:e9:f9:8d:3f:4e:38:d8:89:50:17:36:
         13:c5:db:02:67:41:33:57:de:7d:49:43:28:12:aa:07:45:74:
         dc:5c:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:23 2025 by rpki-client