Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File:                     OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier:          FAJw+6rXLTwTqB1m5PhViHti61Heb98LMod1iwmEOMw=
Subject key identifier:   D0:65:5F:A4:FC:32:1A:BE:79:B1:E3:02:85:F7:CC:EB:8B:B0:66:E7
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer:       /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial:       019888444B56C986C0DFF4A04A802923AAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number:          0F32
Signing time:             Fri 08 Aug 2025 06:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 06:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 06:00:33 +0000
Files and hashes:         1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=)
                          2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=)
                          3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: sr/6J4e1bzczs3vyfu2/HTe8mA7bVHUbOOCPApHlrRk=)
                          4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:44:4b:56:c9:86:c0:df:f4:a0:4a:80:29:23:aa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
        Validity
            Not Before: Aug  8 06:00:33 2025 GMT
            Not After : Aug  9 06:00:33 2025 GMT
        Subject: CN=d0655fa4fc321abe79b1e30285f7cceb8bb066e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:1c:fa:5e:41:f3:c9:11:13:6c:62:b6:b8:
                    aa:b1:89:bc:6e:5c:2f:70:08:d1:1c:ee:9a:29:b5:
                    5a:35:c2:be:c0:58:a1:85:6c:26:fa:f4:c1:34:b1:
                    4f:6b:ce:0d:d8:b1:3a:ab:ef:ef:2a:bf:4c:08:ae:
                    13:03:29:4c:dc:cb:10:34:0a:62:96:1e:74:62:9a:
                    eb:6a:85:ff:93:25:fc:ad:3c:fa:af:d1:1e:24:39:
                    c1:19:14:83:cc:9b:b4:af:fd:bb:05:e3:6d:24:3f:
                    2d:77:3f:bb:0a:f4:25:4e:64:b5:46:c3:0e:42:81:
                    00:69:47:05:2f:07:43:41:29:cc:e3:66:32:87:b4:
                    0d:7f:7e:06:eb:c1:28:af:a3:c6:d6:2d:0a:f0:24:
                    f0:5c:0a:ee:0a:e2:1d:c3:32:2e:ba:0a:ca:bd:ef:
                    12:a5:c3:b7:b9:21:ab:fb:61:b7:c4:4d:69:32:a2:
                    39:05:29:c3:eb:16:35:9b:6f:de:43:84:93:59:bf:
                    85:81:69:39:96:5c:0f:68:a2:16:52:98:82:30:a2:
                    bf:c9:94:f7:9b:ee:10:d6:18:c1:84:32:cf:83:b0:
                    2a:ce:33:43:d2:df:13:1a:cb:3e:58:a1:ef:95:8f:
                    1a:cd:69:c2:35:88:ff:e2:7e:ca:0e:c8:2c:5a:91:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:65:5F:A4:FC:32:1A:BE:79:B1:E3:02:85:F7:CC:EB:8B:B0:66:E7
            X509v3 Authority Key Identifier:
                keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:8a:75:ed:42:d5:24:0a:be:05:cd:17:cc:87:78:66:19:
         9e:1e:f2:1c:c8:08:fb:d1:3b:6a:e1:d4:e0:ab:7f:f4:fd:6b:
         75:46:b2:8c:04:ac:37:25:71:5f:58:7d:ff:fb:2f:e5:18:eb:
         1e:ad:55:33:ae:fa:ee:15:60:5a:66:cb:92:4d:ae:89:39:21:
         eb:19:12:9f:9c:ad:4c:ed:a7:2d:74:65:f6:51:20:9f:04:e0:
         51:1c:e0:89:b7:f6:a7:0b:38:61:ad:5e:05:86:54:3a:97:72:
         32:5e:05:d9:18:4e:fc:33:b6:63:f3:7b:23:5e:63:50:25:82:
         63:a0:40:52:a0:cf:70:de:0f:70:a0:2e:af:a5:c7:72:79:a8:
         9d:9d:58:22:ff:6c:d6:b6:6d:60:12:b7:20:d2:58:3d:ab:f1:
         9d:24:f2:11:7a:93:16:93:db:b8:0d:70:6d:9a:9f:5b:1a:08:
         6c:ff:00:6f:e9:5e:c0:1f:19:bf:b8:3d:41:a6:b5:45:48:f9:
         a8:66:d5:d5:90:21:a5:e5:15:0a:81:a7:46:8f:08:30:b1:83:
         44:75:6e:25:31:5f:70:7b:19:07:5f:7b:0c:41:fd:5d:e2:ce:
         c1:ad:f8:b2:39:44:7f:6a:c4:a4:d5:f6:92:91:76:8f:db:ed:
         95:c5:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:54 2025 by rpki-client