Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File:                     OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier:          StO+64g9nJ288zvUx2UtLdLIw2D2dcSlS85qYq7K2E8=
Subject key identifier:   A0:EF:BC:69:7A:4F:56:36:B6:8C:C2:E0:E5:EF:18:5B:57:A7:B2:3F
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer:       /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial:       019883C3995D8991D5B16E469DE981985544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number:          151F
Signing time:             Thu 07 Aug 2025 09:01:30 +0000
Manifest this update:     Thu 07 Aug 2025 09:01:30 +0000
Manifest next update:     Fri 08 Aug 2025 09:01:30 +0000
Files and hashes:         1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: mIE4q44pgCXZTvmxZkae97fUj14ScejmJGH5j3UjKCg=)
                          2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:c3:99:5d:89:91:d5:b1:6e:46:9d:e9:81:98:55:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
        Validity
            Not Before: Aug  7 09:01:30 2025 GMT
            Not After : Aug  8 09:01:30 2025 GMT
        Subject: CN=a0efbc697a4f5636b68cc2e0e5ef185b57a7b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:42:8e:7b:a1:06:a1:ff:58:b7:69:f3:2d:
                    4b:90:e5:09:2d:d3:bc:be:62:1a:53:b3:99:d4:29:
                    6d:e5:53:24:c3:bc:d5:46:e6:06:65:53:9c:69:00:
                    81:3c:b4:6d:16:55:42:95:f5:77:eb:01:53:84:a2:
                    27:82:84:77:56:c4:5b:85:af:72:9a:34:70:17:39:
                    de:15:f7:71:54:09:50:3f:b1:1d:66:ac:a8:cf:a7:
                    b7:87:03:5e:38:01:04:fa:5e:b7:54:80:f2:c5:d8:
                    97:27:99:4e:1a:92:79:a1:a7:47:3d:4e:aa:d0:b1:
                    0b:2b:36:7c:fa:63:ab:c9:1b:a5:8a:6b:0b:17:20:
                    7f:a1:49:03:bc:66:be:92:6e:1d:60:a5:01:4a:26:
                    8d:a8:d0:34:d2:98:7b:10:3c:83:78:3c:1c:19:c7:
                    50:be:02:4d:61:4f:d2:a5:4c:a6:77:26:9a:be:b8:
                    cc:08:e3:1d:15:73:2b:08:05:a7:d6:a4:9e:7e:e7:
                    5c:70:61:f3:99:26:0b:03:c4:a4:9a:b1:6b:60:e3:
                    86:de:5b:69:08:9b:33:b9:6a:c5:2b:42:81:b3:d2:
                    8b:fb:ac:46:ee:d6:52:3a:22:ed:da:b2:21:4c:4c:
                    b4:65:a5:61:4f:c7:c3:d1:4a:9c:72:20:fd:4c:16:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:BC:69:7A:4F:56:36:B6:8C:C2:E0:E5:EF:18:5B:57:A7:B2:3F
            X509v3 Authority Key Identifier:
                keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:13:2d:7c:7a:bc:cf:b5:ee:2c:e9:aa:07:07:df:47:f0:
         0e:7a:26:ee:67:af:d5:ec:a3:54:45:55:0f:ec:1c:c2:1a:ac:
         a9:47:46:49:04:8b:94:22:e3:42:f4:0f:45:5e:78:25:d3:37:
         23:a5:73:9d:e0:24:44:ae:e1:4f:03:9d:5e:bd:8f:75:d2:0e:
         57:c9:ff:b6:9b:20:a2:3f:d6:83:71:14:dd:e3:cd:b5:b8:70:
         33:bd:bb:02:a5:56:26:ea:58:be:a1:8f:17:74:b8:6c:7d:c0:
         58:ce:f8:34:94:4b:3b:3b:f5:08:0f:15:2d:b3:a6:ad:b1:90:
         00:bb:45:c1:2e:09:e5:d0:46:73:a7:c7:30:d2:83:40:05:15:
         6e:7c:fb:24:54:45:e7:49:60:ff:bf:63:bc:99:7c:e7:04:5d:
         69:f1:9a:4a:69:d2:60:be:68:25:a7:a9:d8:67:26:9c:56:45:
         34:67:6a:dd:94:43:a3:e9:19:70:db:43:48:e9:5b:b6:97:04:
         9f:5f:73:e9:86:6e:dc:42:cc:97:34:a9:6c:f2:ba:d6:a7:b8:
         5a:d7:79:bf:df:92:af:f7:5e:8f:30:55:a5:c2:0d:15:5d:34:
         a1:5e:c7:87:10:56:6d:c7:7b:06:08:94:11:49:af:2b:79:17:
         60:53:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:20:20 2025 by rpki-client