Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File:                     Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier:          HNp6XFuGKPS8dLUZ3i0cHwt2KmCLWPm6WpNK3FFylzI=
Subject key identifier:   97:8E:19:48:CC:EF:5C:6F:04:3E:C2:70:E4:51:C3:8B:9E:25:3E:8A
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer:       /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial:       01987562D74FE9D839E637F67782ADD4F243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number:          1624
Signing time:             Mon 04 Aug 2025 14:01:08 +0000
Manifest this update:     Mon 04 Aug 2025 14:01:08 +0000
Manifest next update:     Tue 05 Aug 2025 14:01:08 +0000
Files and hashes:         1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
                          2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: znmQzdn0XMvEsy8vR8u6/h+lso3coerMVi28OlpO5Fw=)
                          3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:d7:4f:e9:d8:39:e6:37:f6:77:82:ad:d4:f2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
        Validity
            Not Before: Aug  4 14:01:08 2025 GMT
            Not After : Aug  5 14:01:08 2025 GMT
        Subject: CN=978e1948ccef5c6f043ec270e451c38b9e253e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:42:64:b9:d4:04:f3:7d:c8:da:f1:90:d4:
                    a3:81:c2:3d:5f:a8:f9:12:2e:8d:f1:d8:87:85:a6:
                    f2:d1:7f:ef:32:1f:f5:ad:cf:45:72:d7:8d:5c:a7:
                    e3:2b:32:39:47:16:77:ac:84:01:0b:ae:65:e0:be:
                    05:98:1b:bb:d7:1a:b5:b6:9b:24:55:80:8a:c2:0d:
                    c5:e9:f2:87:ef:04:47:10:a3:a7:d0:b4:c4:e4:6a:
                    3b:00:8e:f8:23:0b:d0:90:b5:cd:99:96:37:63:a8:
                    11:61:89:cc:0c:08:58:96:b2:1e:47:fe:91:1f:ae:
                    b3:3c:61:1d:47:ac:b2:19:b0:99:f2:a2:cb:ae:c9:
                    e7:46:cd:dd:15:43:f8:37:1c:d1:83:63:95:7d:9e:
                    01:0a:70:a7:9c:6e:a3:94:61:ec:92:31:aa:86:a3:
                    cf:87:04:6b:74:93:3d:0c:37:2d:4a:fa:23:f9:9d:
                    9c:e5:a7:df:62:ca:10:ce:ca:9b:fb:cc:32:f2:f9:
                    c1:9e:a0:e3:de:6c:39:09:e6:cb:d0:33:f5:2c:74:
                    da:9c:70:32:f2:72:2d:8c:55:79:8d:7e:36:af:53:
                    39:0e:8b:8e:0b:9b:35:a2:2b:3f:71:2d:2a:d6:05:
                    29:5c:f2:19:40:69:0f:b0:ab:35:37:d0:d4:4d:87:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:19:48:CC:EF:5C:6F:04:3E:C2:70:E4:51:C3:8B:9E:25:3E:8A
            X509v3 Authority Key Identifier:
                keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:32:45:76:61:40:e8:e0:37:ad:c5:36:06:3b:f0:24:e3:96:
         2b:e8:ff:95:c1:78:41:14:4d:25:34:b2:39:8a:cd:32:c7:ac:
         3a:db:09:6b:c1:1e:8c:56:aa:18:e6:31:46:c2:d5:45:b7:f7:
         10:02:9d:9f:e9:af:33:ef:01:a2:73:2a:f2:d0:88:51:4f:c6:
         c3:f3:c8:b7:ec:2a:f3:d6:35:79:76:bd:22:ce:65:e2:c8:68:
         38:64:14:21:f9:8d:03:a1:c3:c8:2d:de:4b:50:20:7e:81:b7:
         0c:77:3b:45:d5:77:1d:ab:c5:ae:56:5f:d9:72:b7:17:9f:14:
         b7:ac:a2:fd:e2:bc:cd:bc:b2:ed:75:8e:33:4a:fd:40:6c:31:
         bd:96:3c:c4:3a:3d:19:9a:e8:77:fd:8a:68:6b:ac:68:38:a6:
         8b:7b:53:20:ba:43:29:67:5c:6f:cb:4b:90:b0:6d:35:86:f0:
         97:97:e1:66:f7:c2:9c:25:4a:ac:98:f5:f5:6c:d5:e5:7f:4a:
         45:96:36:73:c3:a5:26:fb:c0:7d:09:e7:00:79:d4:8a:bf:26:
         da:0c:e1:ef:17:98:fc:3f:26:f3:19:52:34:ed:8e:7f:06:22:
         e2:d1:50:22:88:5d:4d:9c:d4:37:5e:53:8f:b5:dc:4f:1d:05:
         40:67:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:55 2025 by rpki-client