Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File:                     0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier:          qf7SBx2/uSGthf4QjGhtO9hsxvV6eqMXhDmdUdEAOr0=
Subject key identifier:   BB:AC:CA:86:A7:70:54:EB:75:BC:51:5B:B0:C9:62:30:5E:D8:78:22
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer:       /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial:       01988B1021B8342EF6CA3AD7CCB5E3350EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number:          0F94
Signing time:             Fri 08 Aug 2025 19:02:26 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:26 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:26 +0000
Files and hashes:         1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: V9KMj5z5oczUXsm2/LuCukKjDyKMZn7gAkxeK1Gbqh8=)
                          2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:21:b8:34:2e:f6:ca:3a:d7:cc:b5:e3:35:0e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
        Validity
            Not Before: Aug  8 19:02:26 2025 GMT
            Not After : Aug  9 19:02:26 2025 GMT
        Subject: CN=bbacca86a77054eb75bc515bb0c962305ed87822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:0b:60:0b:3f:c3:2a:30:47:8c:bc:8e:c1:
                    b5:1a:19:00:d6:77:2b:e8:23:e3:bd:90:86:3b:5a:
                    4d:b2:f7:56:22:4e:ea:98:3b:71:56:57:06:b5:e2:
                    f9:e2:64:3f:27:fc:b5:f6:80:5f:54:7b:ac:93:87:
                    fd:db:68:6a:e9:80:90:12:c7:8a:3c:de:3d:51:08:
                    a7:24:a8:41:8c:2e:96:05:8a:d6:7c:97:68:d0:25:
                    3f:da:be:c4:bb:81:75:18:41:5a:f3:90:79:d3:68:
                    c2:58:87:84:98:d0:be:54:a9:83:83:d6:b4:ad:99:
                    7c:03:2d:9e:a8:73:a7:c7:ef:73:a8:94:89:aa:59:
                    a1:02:d2:5f:10:58:ea:c5:bb:de:b4:22:bd:7f:64:
                    e9:40:0b:c3:5b:3b:fb:ab:1e:63:74:e9:6f:a6:62:
                    eb:81:22:be:78:e4:a7:2b:6e:d0:b2:86:9e:02:53:
                    8c:28:c9:28:23:14:14:cd:be:51:5f:21:8a:ef:17:
                    f6:62:f6:1f:1e:43:8e:be:4c:8c:74:3a:0a:ce:64:
                    9c:7e:a9:a9:88:7c:13:d8:31:ed:cf:cb:6e:11:22:
                    f3:e1:81:58:f7:4e:64:a5:19:b5:f5:ec:07:14:ff:
                    2d:5d:e5:48:cb:0d:8b:5a:3f:ef:8a:f5:44:6f:cd:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:CA:86:A7:70:54:EB:75:BC:51:5B:B0:C9:62:30:5E:D8:78:22
            X509v3 Authority Key Identifier:
                keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:86:78:5d:02:ef:85:4a:86:08:53:e8:bc:fb:f4:6e:8e:
         54:2a:af:7c:35:4c:23:af:e9:ed:95:03:c8:9b:04:7a:6c:d9:
         90:a8:8c:23:21:a9:a6:a2:ca:60:af:95:7c:6d:c4:24:9c:a6:
         77:c2:32:48:4e:2b:6b:88:5a:20:be:a6:14:c5:c1:ca:ae:f1:
         1a:6a:e8:95:cf:54:58:7d:fc:cd:fc:57:5e:cc:de:b4:c6:7f:
         e2:6e:33:55:55:5e:4f:3e:4e:c4:6a:5a:6a:8c:a1:73:74:6f:
         6b:14:8c:38:fc:90:62:a8:9e:f9:b2:a1:ae:06:47:e6:13:0d:
         03:ee:8f:b4:82:a7:8e:d6:68:64:ba:c5:1f:5c:7a:8c:c9:d5:
         07:c6:ed:5a:87:78:b3:99:20:4e:b5:60:53:30:dc:d3:38:10:
         91:d7:bf:8c:33:30:a4:cf:43:f0:8f:24:79:b6:e9:5e:8c:70:
         eb:71:41:09:17:6f:20:d4:bf:ae:95:8d:4e:d9:3a:86:37:d0:
         70:1c:d7:bc:c9:10:93:fd:13:e7:61:00:26:b6:ec:6e:ac:81:
         47:3c:c1:c6:f0:60:0b:5a:35:28:39:ab:21:ea:0a:96:30:67:
         27:86:c8:2c:67:52:77:b9:3a:30:7e:92:a5:9b:12:24:b6:11:
         7e:a8:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:22 2025 by rpki-client