Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File:                     OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier:          aDFE3NaQhmXhRHs0fbKodWo0kMakgmkOe4CKdTlQWtA=
Subject key identifier:   1B:3A:95:81:C9:63:FD:A6:F9:F9:18:24:41:EA:20:34:8B:AF:79:42
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer:       /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial:       01987F788DD760E43673DAF0E7F5320139F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 13:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:03 +0000
Files and hashes:         1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
                          2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: /8HUtD5+VUoKeQ4IRbnHeRXsSukwq2L1i0ZHMcQlZK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:8d:d7:60:e4:36:73:da:f0:e7:f5:32:01:39:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
        Validity
            Not Before: Aug  6 13:01:03 2025 GMT
            Not After : Aug  7 13:01:03 2025 GMT
        Subject: CN=1b3a9581c963fda6f9f9182441ea20348baf7942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:5c:c5:41:26:a7:ef:03:c2:fd:f3:f9:ae:
                    0b:66:01:7d:cd:70:7c:67:2e:68:47:8d:42:e4:5f:
                    4b:f3:f4:14:4c:9f:dc:47:6d:30:77:49:4f:63:dd:
                    fe:f0:ed:e3:a8:ec:61:a1:01:51:4d:0a:22:6e:b8:
                    73:61:5b:f3:32:49:cd:32:ef:77:af:a1:3d:09:a6:
                    f0:91:5c:06:76:89:72:66:55:f9:79:d3:c1:89:3a:
                    86:a9:de:a1:5e:6e:09:26:ac:1a:82:21:f1:9e:ad:
                    4c:6a:8f:4d:e5:94:f9:3e:80:f6:85:85:65:f3:02:
                    77:c1:97:9b:83:d6:d5:ae:b6:94:ab:09:94:4a:ce:
                    79:a2:fe:dd:0c:ff:99:7e:85:35:40:07:9b:60:b9:
                    c1:0d:c5:d9:a7:22:62:ac:ae:63:59:5d:08:0b:d6:
                    db:4c:a0:50:99:0c:62:ea:32:c3:21:6b:57:1b:9f:
                    5f:dc:fd:f9:d3:0b:00:c6:06:cd:cb:54:80:f4:22:
                    c3:a8:a8:25:bc:f6:a1:26:9c:73:70:70:d4:25:31:
                    2e:a7:fe:b8:00:cc:d8:8a:ed:f8:13:57:b0:eb:ad:
                    ce:63:c2:e1:d1:71:a6:f3:d3:b7:00:18:f9:a9:c3:
                    d9:d4:4c:0d:42:59:95:49:6c:ad:cd:70:de:cc:15:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:95:81:C9:63:FD:A6:F9:F9:18:24:41:EA:20:34:8B:AF:79:42
            X509v3 Authority Key Identifier:
                keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:88:af:1a:ba:9f:48:92:08:e7:8c:67:bf:ab:67:8f:fe:
         00:dd:1c:7d:ba:06:bf:4c:2d:ac:07:50:25:55:e6:cb:ec:80:
         9c:87:96:ac:61:5a:49:32:35:f5:fa:26:4d:66:7c:22:5f:85:
         88:40:fe:b8:a6:61:2d:51:b7:3c:48:51:52:d8:e0:5c:3d:6a:
         ae:48:08:e0:08:30:9b:0f:01:fc:fd:5f:11:e9:ab:5e:fd:7e:
         4e:ec:fd:e4:00:ee:af:12:32:80:0e:a0:a3:d9:d2:6e:50:5c:
         68:0d:04:95:2a:5f:03:55:47:90:d7:55:a5:11:7b:6f:5b:d6:
         6d:25:9a:c5:63:c3:81:a2:e8:25:1b:73:86:f8:93:9d:6b:01:
         2c:ce:b2:e1:56:35:78:e9:9b:56:e5:c9:25:1f:00:1f:5a:1b:
         ef:c7:04:d6:c5:ef:82:b5:7d:bb:87:7d:8f:cc:87:78:cd:29:
         fd:fc:a6:da:3d:4a:90:58:0c:d8:1f:62:6f:96:24:6f:d2:8c:
         f2:17:c7:78:39:8c:7f:13:b0:3a:43:ba:6e:17:6a:ad:a8:4b:
         ba:0d:5d:2a:54:45:4f:22:b7:76:d9:a9:19:f3:8e:28:09:c0:
         53:7c:28:39:ad:e0:5a:5c:2f:17:fd:a3:78:8a:ef:ef:d1:ed:
         23:89:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:02 2025 by rpki-client