Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File:                     OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier:          jUl8erD3JRMXjAnowz89ZexlLlNpWIAZtXpyWhtb73Y=
Subject key identifier:   D1:B0:E3:7B:75:5C:AE:F4:0B:D6:23:64:43:AB:BB:7C:8D:1A:07:C7
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer:       /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial:       019784A1100B8E293CDD094E056AE1C383EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number:          159D
Signing time:             Wed 18 Jun 2025 20:00:37 +0000
Manifest this update:     Wed 18 Jun 2025 20:00:37 +0000
Manifest next update:     Thu 19 Jun 2025 20:00:37 +0000
Files and hashes:         1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
                          2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: eiqrW0SYlTEE0jO6S9XFfLmVscSquiU67E8Uy4l/464=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:a1:10:0b:8e:29:3c:dd:09:4e:05:6a:e1:c3:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
        Validity
            Not Before: Jun 18 20:00:37 2025 GMT
            Not After : Jun 19 20:00:37 2025 GMT
        Subject: CN=d1b0e37b755caef40bd6236443abbb7c8d1a07c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:62:6e:60:c1:b5:74:50:02:8e:a8:e4:65:
                    91:7b:dd:df:87:d2:2c:8e:fe:24:ff:be:0d:cb:9f:
                    a5:95:e2:d1:4b:15:71:12:27:e9:9f:fc:d9:ec:87:
                    d8:e7:64:e3:0a:71:d7:2b:c2:bf:b7:89:36:6a:24:
                    e9:c7:58:5a:9f:eb:4c:92:53:bd:91:8d:80:0f:28:
                    a7:84:00:e6:5d:fd:6a:fa:78:fe:83:91:9a:e3:6a:
                    15:d6:fa:a5:f9:e0:46:9d:e0:2a:f9:4c:46:61:3d:
                    c1:ad:7c:47:45:8f:05:f5:20:49:60:c7:5e:99:6e:
                    b6:63:f9:39:dd:e0:9f:ee:d3:4b:3f:38:69:75:9e:
                    55:92:62:63:92:23:9c:36:03:89:ca:8d:32:61:4b:
                    a5:b3:10:55:f7:e1:95:3d:e7:99:a9:f6:b5:6d:1f:
                    e5:5a:3d:a4:e5:b2:2e:b8:63:86:d8:e5:00:3a:5b:
                    6b:a9:af:c3:a5:02:74:b7:72:48:bc:bc:da:8a:2b:
                    a6:d8:9f:76:ca:e8:92:e6:c5:c7:5f:5a:09:39:c5:
                    84:b4:5c:18:93:b7:a6:be:c1:3f:be:c0:13:33:56:
                    fe:0a:81:4e:70:9a:3a:45:ca:ab:de:97:4b:30:a5:
                    45:fa:54:49:eb:8f:6a:c1:e3:be:b0:5a:b6:38:ac:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:E3:7B:75:5C:AE:F4:0B:D6:23:64:43:AB:BB:7C:8D:1A:07:C7
            X509v3 Authority Key Identifier:
                keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:35:9a:86:ca:f9:e4:37:60:06:c8:65:34:ea:57:85:18:7e:
         23:31:0f:e1:1c:2c:2b:50:7a:68:ed:97:28:a3:ed:bb:a5:67:
         4e:7c:cd:5a:c0:6b:7c:93:d9:a3:38:69:f2:9c:70:ef:52:b8:
         6e:e5:39:e4:f5:cd:43:c5:e1:f3:ca:1f:2e:40:07:bc:87:c3:
         fa:cd:4a:d2:1c:73:88:1d:62:09:4e:e5:48:f3:04:24:2b:9f:
         f6:1c:25:04:2a:7b:5a:7b:d6:9c:20:01:26:7d:67:e1:c3:7e:
         36:a6:e6:da:68:45:7c:59:9b:8a:ac:46:ee:79:4e:15:e0:5a:
         41:94:92:0c:87:d2:b0:a9:48:7c:95:dc:30:27:11:57:3e:4f:
         65:d7:bc:74:5f:99:4c:2c:0b:c7:20:10:2f:61:d6:72:6c:ed:
         e7:4d:94:01:b4:44:f5:99:4b:83:71:76:1a:36:24:b2:3c:47:
         5a:6f:79:1f:22:e3:e1:57:bd:91:1a:e0:f8:f5:9f:89:24:8e:
         b9:8c:12:43:83:e9:ef:c1:44:26:22:f5:f8:85:b1:c3:1c:9e:
         bd:33:0c:9b:95:1d:46:95:0a:17:a7:c7:95:15:ed:bb:46:b3:
         8e:e6:3f:c9:0f:8f:f2:ce:9c:dc:0e:66:e5:53:18:c4:ed:b8:
         50:8f:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:46:43 2025 by rpki-client