Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File:                     O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier:          jqBZXRaTVVWDODZh5LMrMjtfV9Ke9xJ9J55mdgkr85Q=
Subject key identifier:   1B:02:19:DC:13:08:FC:4C:1D:16:C0:B9:00:1F:83:54:4B:6E:92:2A
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer:       /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial:       01988A69A92F1FD4417DFF67C7EED6F5D93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number:          0113
Signing time:             Fri 08 Aug 2025 16:00:37 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:37 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:37 +0000
Files and hashes:         1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
                          2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: 2qDlSJcCoLV8pOTatbSj5cFUqYiaLgGp72fcrP1TG0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:a9:2f:1f:d4:41:7d:ff:67:c7:ee:d6:f5:d9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
        Validity
            Not Before: Aug  8 16:00:37 2025 GMT
            Not After : Aug  9 16:00:37 2025 GMT
        Subject: CN=1b0219dc1308fc4c1d16c0b9001f83544b6e922a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:26:06:42:55:76:51:66:fa:52:df:50:cb:
                    1a:7f:c5:fc:e5:e1:6c:9f:6b:16:c4:19:95:bc:1b:
                    52:33:92:94:cd:1c:cc:d6:b3:18:cb:d7:ba:b1:76:
                    38:15:07:13:d8:02:92:9b:11:95:8b:d0:45:ea:2f:
                    76:86:be:33:44:60:c4:ca:6d:39:05:4a:26:56:ac:
                    e3:99:54:ca:f2:d3:81:71:6c:0a:44:ae:76:3c:50:
                    42:9d:ec:76:92:a4:49:e0:7a:ce:5b:7f:02:4c:ff:
                    1d:fd:ab:31:7d:b8:70:9c:0a:6b:ec:0d:f0:dd:61:
                    94:dd:3d:e1:00:67:cc:e3:ec:9f:02:68:d1:ea:4b:
                    24:10:92:59:7f:8f:f4:45:6e:b7:c4:df:77:f1:4d:
                    29:d4:27:a5:c5:84:ba:2c:c4:e4:a7:9f:7d:c4:0e:
                    f8:7e:5d:25:71:4a:56:a1:0d:48:23:7c:b3:72:cd:
                    94:0e:d1:2d:fe:48:7a:54:15:49:5d:7f:c4:ab:4f:
                    a6:97:cf:e0:06:de:2a:fb:a2:9d:e8:70:49:69:a2:
                    5c:3f:68:5a:ce:8b:28:d8:34:b8:98:73:6d:fe:7b:
                    4f:56:a2:28:14:e1:d5:b8:a1:f9:76:cc:bf:16:b9:
                    f3:a6:c7:55:67:af:ce:88:42:f2:26:61:20:53:79:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:02:19:DC:13:08:FC:4C:1D:16:C0:B9:00:1F:83:54:4B:6E:92:2A
            X509v3 Authority Key Identifier:
                keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:d7:cb:87:6d:fa:7b:ef:6c:14:68:c9:8d:02:5a:1a:0a:
         f0:cb:c1:95:9f:4e:df:32:4f:05:1f:92:66:ef:3e:eb:86:38:
         ce:fc:07:12:ad:25:4b:23:9d:08:19:92:33:7b:0c:4d:d8:2b:
         ec:a6:2e:c2:44:53:a7:6d:01:5e:b5:1c:81:e0:00:52:43:14:
         c2:a6:20:7c:ea:58:c0:d4:ad:39:1e:a9:a0:50:54:11:d3:7f:
         75:5f:0f:ff:60:a4:b1:26:08:7c:d7:a4:9c:b4:87:d0:c2:59:
         e1:5c:7d:30:73:b6:ae:09:ac:5c:c7:ac:31:0d:cd:ce:24:fa:
         cd:92:58:2a:eb:e7:db:ae:ec:e2:f2:0f:ae:57:c6:cc:d1:24:
         7f:a7:b3:f3:e2:69:17:5f:55:f2:03:29:80:7b:4b:1e:ad:0a:
         12:ed:b2:6c:40:1a:45:b0:79:03:fe:58:80:3b:24:02:0f:14:
         6f:e5:e7:59:d3:39:ec:05:be:cc:ce:a4:16:c8:65:fc:e3:81:
         dd:8d:98:16:c4:c5:68:34:8f:be:32:f3:ce:6f:e1:bc:8e:4a:
         4c:7f:9c:31:f4:39:fb:d8:e4:c7:69:be:19:3f:bd:20:9c:3e:
         14:cb:04:6b:76:ed:c6:43:47:8b:f1:ec:4b:70:84:b0:70:d1:
         75:ab:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:36 2025 by rpki-client