Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          4RQeSdXzAuxxAO4Pyn7MwWP+PTZrJLvicpXCe9cXYVs=
Subject key identifier:   00:F2:30:DA:24:65:47:2F:AA:F9:EE:2D:57:F9:A0:62:B1:10:05:38
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       019874BE53E3896BD071461A684BFE1E980D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0DA0
Signing time:             Mon 04 Aug 2025 11:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:27 +0000
Files and hashes:         1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: aBI2VbQzY2796gUkH7j6T04EBq4igb4+GC+33NmiWiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:53:e3:89:6b:d0:71:46:1a:68:4b:fe:1e:98:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Aug  4 11:01:27 2025 GMT
            Not After : Aug  5 11:01:27 2025 GMT
        Subject: CN=00f230da2465472faaf9ee2d57f9a062b1100538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:62:42:bb:05:0b:9b:74:2a:30:aa:7c:d1:
                    8d:a6:c7:62:6d:a9:32:10:29:9e:32:b2:15:f0:24:
                    26:83:e0:d0:b5:3e:a5:8e:e0:76:40:b0:d2:03:66:
                    06:f0:61:6a:2b:cc:57:2d:be:48:fa:2a:02:15:87:
                    1c:c4:ab:be:fb:01:c8:d9:b7:7e:38:3b:f4:27:65:
                    5c:cc:d7:40:46:10:1b:ad:57:bd:27:7f:cc:12:db:
                    21:09:f0:9d:6a:4c:13:17:ac:64:7d:ad:67:9d:1b:
                    d5:bc:e5:7b:6c:e9:3f:c7:46:b1:c5:33:94:c0:0d:
                    da:83:05:8a:af:20:16:6c:11:f6:9e:56:9d:9f:fd:
                    1e:71:8b:57:c8:cf:40:66:6e:5f:86:c6:20:9a:72:
                    18:81:03:5d:ac:76:1e:91:7d:b2:1d:7c:39:6f:51:
                    8e:9d:b3:87:bd:89:55:ed:4e:17:c8:08:7c:0f:1d:
                    3f:e9:94:f7:b3:33:1c:56:8f:95:63:7b:62:83:13:
                    18:ed:0b:3a:4c:e1:c0:cd:d4:db:b6:ac:6f:a5:dd:
                    aa:71:8d:9c:4f:c5:c7:f8:ed:3e:0b:63:37:ec:ef:
                    bd:ea:b9:60:90:cf:55:e7:c6:0d:e9:04:11:5b:70:
                    e8:91:14:d2:a0:e0:01:a4:61:dc:56:7e:21:15:0f:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:30:DA:24:65:47:2F:AA:F9:EE:2D:57:F9:A0:62:B1:10:05:38
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:99:47:09:46:30:97:04:eb:62:4c:f8:ef:7c:33:f4:44:
         e6:b2:3e:e1:48:a0:fe:3a:9e:be:4f:2b:69:85:c7:d9:f2:93:
         12:5a:4c:ce:87:92:21:ff:22:06:99:1b:c7:4b:bd:14:84:79:
         8c:52:8d:16:f7:5c:0b:31:ff:00:3a:86:2b:67:ff:d2:ea:c2:
         54:2c:82:4b:7a:89:c4:1b:53:61:b2:2b:ea:a2:ee:46:a1:d3:
         ff:e4:f4:bd:85:d2:1a:77:45:9b:36:b6:9b:a1:08:05:5e:e5:
         d0:91:d8:72:fa:aa:09:d9:31:65:6b:2f:cf:8d:7f:04:a0:99:
         99:a1:bc:10:5e:cc:49:3e:2e:76:f7:a3:93:78:73:5a:40:1b:
         60:c6:36:37:a4:6b:23:04:92:8f:75:d5:87:d3:d0:8a:b3:68:
         3d:df:39:45:fe:50:87:86:5b:83:df:85:e2:65:43:99:a4:08:
         da:bf:9a:69:26:fb:d2:7a:95:93:20:b3:92:e2:1f:ac:eb:9b:
         c0:e7:ad:14:31:74:77:d8:5b:b4:01:5e:bc:d4:a6:55:80:ff:
         34:59:65:f8:47:4e:3f:f4:d4:fb:14:04:3c:17:34:90:b4:fe:
         b5:a9:85:ce:fe:5f:da:9c:35:0a:18:63:d0:c9:4a:d7:a3:31:
         ae:da:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:20 2025 by rpki-client