Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File:                     OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier:          oKyz7berwAWNGvgnijLUAbpf1x8TZFgfXNkpaaRDAvg=
Subject key identifier:   54:71:ED:47:19:ED:33:6C:27:62:6A:42:93:61:7A:48:40:66:AC:14
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer:       /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial:       0198A1291833CEAAC60E531D39A5C00F00EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number:          0D8B
Signing time:             Wed 13 Aug 2025 02:01:21 +0000
Manifest this update:     Wed 13 Aug 2025 02:01:21 +0000
Manifest next update:     Thu 14 Aug 2025 02:01:21 +0000
Files and hashes:         1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: g6Z0L9ymwywPn5u/KjRQo8EZ3gVCBv/2cyFC2berzK8=)
                          2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:29:18:33:ce:aa:c6:0e:53:1d:39:a5:c0:0f:00:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
        Validity
            Not Before: Aug 13 02:01:21 2025 GMT
            Not After : Aug 14 02:01:21 2025 GMT
        Subject: CN=5471ed4719ed336c27626a4293617a484066ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:e8:24:8d:2b:72:a2:07:da:ee:0f:08:6b:
                    09:b9:e3:3d:2c:32:14:78:c4:aa:32:65:6e:8b:a2:
                    fe:12:f4:f9:76:be:90:7e:67:19:0f:37:88:fc:4b:
                    10:42:0e:63:e9:c9:b9:6e:ca:0e:30:c6:77:ce:5d:
                    c9:3a:05:8f:30:cc:bc:7f:21:f9:13:a1:2b:7c:fb:
                    75:40:d5:5f:0b:4f:f9:da:48:bc:2e:52:f6:27:f5:
                    61:3b:a7:95:f3:fd:ac:c7:09:d7:41:79:b7:6d:a9:
                    f5:be:61:e1:0a:2a:e8:7b:f7:6d:44:a9:26:a0:3f:
                    0c:51:2d:d0:cf:3e:90:35:3e:c2:8c:2d:06:e2:c0:
                    61:c7:81:2c:9f:69:3c:ba:fa:2e:94:7b:19:4b:fe:
                    4f:2a:4e:8a:8e:16:fd:91:b8:29:f0:50:11:de:17:
                    2e:d5:cc:b8:20:97:66:2c:b1:fd:52:ec:d5:63:ff:
                    4b:3d:1e:c5:fc:50:a4:a5:17:95:02:6e:65:01:b0:
                    4b:05:aa:6b:67:79:a8:27:f0:16:30:13:2f:ae:1d:
                    fb:e9:5f:e0:07:7d:21:b5:28:c4:61:3e:c5:c1:2f:
                    8b:bc:c8:f8:61:f2:15:bf:5a:cc:3b:95:40:7b:ec:
                    4d:03:1b:12:6b:95:bb:6d:1f:80:49:2b:3f:70:d2:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:ED:47:19:ED:33:6C:27:62:6A:42:93:61:7A:48:40:66:AC:14
            X509v3 Authority Key Identifier:
                keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:81:23:6e:1a:f8:8c:38:cb:10:d8:4b:1e:c1:4a:31:38:
         52:c9:62:ec:f2:5e:29:b7:dd:f3:30:92:c0:f2:a4:bd:08:cb:
         4d:33:b2:d9:b2:97:36:ea:e0:e2:33:f8:3d:9d:79:0b:74:28:
         61:8c:22:16:0e:e3:66:16:f3:69:a2:10:09:87:f7:f8:fc:30:
         46:a0:f5:63:8b:0a:8c:1e:9a:07:f8:40:e8:f8:e8:65:04:0b:
         fb:66:4f:f8:63:c9:a3:96:2b:71:55:38:9a:4d:fd:89:1f:04:
         c4:87:b0:27:0e:17:d9:57:07:c4:62:dd:42:a4:08:ec:ca:7a:
         40:45:63:e1:97:15:d4:36:ab:8a:33:bd:4b:cd:87:66:a3:3f:
         03:34:3a:42:b6:88:d4:8c:8c:c5:b5:65:56:bd:95:72:5a:cf:
         48:c6:80:a5:63:cf:3c:41:45:dc:a3:d8:04:c3:62:29:6c:48:
         76:9c:b2:c5:5c:7c:68:66:d2:5d:eb:81:0d:13:1f:94:02:ec:
         90:27:04:58:14:f1:22:2e:e2:9b:eb:98:05:81:0a:5e:07:2f:
         c9:1a:75:81:d6:76:ef:3d:a4:f2:cd:29:ac:c6:0f:c9:46:51:
         e7:5b:b4:52:39:5f:97:e6:4f:5f:3d:95:55:8a:51:5d:12:e3:
         bb:2b:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:14 2025 by rpki-client