Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File:                     oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier:          z72szu9FeK8qZoJrRRX+t6ANN1ARiN0rQUDBeeltzSY=
Subject key identifier:   64:63:EE:33:98:80:86:FD:28:A9:43:49:F8:FA:FD:09:2D:07:3F:D2
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer:       /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial:       01989F716CC412B660B0D695494525FB2AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number:          1029
Signing time:             Tue 12 Aug 2025 18:01:07 +0000
Manifest this update:     Tue 12 Aug 2025 18:01:07 +0000
Manifest next update:     Wed 13 Aug 2025 18:01:07 +0000
Files and hashes:         1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: 2lPdkKjLwhhJbUga1WGT1y2GiMSesZ0lhaoyV+69qe4=)
                          2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:71:6c:c4:12:b6:60:b0:d6:95:49:45:25:fb:2a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
        Validity
            Not Before: Aug 12 18:01:07 2025 GMT
            Not After : Aug 13 18:01:07 2025 GMT
        Subject: CN=6463ee33988086fd28a94349f8fafd092d073fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:3f:87:b0:b0:17:da:1f:93:aa:c9:7a:6d:
                    a6:f3:13:63:d6:ba:fa:1e:5b:c0:5f:5e:2a:74:87:
                    fc:c3:f6:07:fe:c2:c4:6b:b7:3c:9f:79:1b:c8:16:
                    98:2a:68:27:61:b8:b7:9c:bc:bf:1b:44:47:49:0f:
                    33:03:9b:6a:a6:90:97:ea:19:7e:0c:99:d5:9c:0f:
                    c7:c4:22:21:4b:49:fe:5b:73:15:7c:52:e8:da:e2:
                    33:0c:55:2b:9b:e6:e2:96:48:38:97:24:97:23:c4:
                    2f:84:59:a6:0c:cc:a9:8c:a9:7b:aa:9a:68:48:af:
                    ee:05:5c:81:ed:f2:c0:12:d1:23:25:9c:cf:9d:b1:
                    65:61:f0:c5:ff:1d:bf:b6:e3:b9:d4:b9:e4:a4:e9:
                    57:24:56:0e:1f:e9:65:e1:af:cd:86:7f:9d:ab:e2:
                    1e:09:f3:ec:a0:c8:be:88:ae:2d:f4:9b:aa:28:72:
                    84:30:7e:58:64:db:e9:fe:c7:52:17:64:28:bb:e9:
                    76:10:65:03:9e:c7:31:7c:7a:03:47:51:92:62:51:
                    80:11:5d:bf:2a:f8:4c:0d:3c:60:8a:cc:f9:88:8e:
                    78:f6:9b:97:ce:cb:15:80:c2:aa:f0:11:6f:87:81:
                    e8:47:80:3c:36:5c:28:e4:1b:1b:a9:d5:bf:63:31:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:EE:33:98:80:86:FD:28:A9:43:49:F8:FA:FD:09:2D:07:3F:D2
            X509v3 Authority Key Identifier:
                keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fb:c5:19:b0:38:0b:a3:7e:8e:1d:bf:74:a8:01:d2:0d:75:
         f3:f2:fe:8d:2e:5b:c3:bc:05:c7:22:33:fb:12:49:f6:b9:9c:
         76:85:e7:62:f4:37:32:45:c4:ca:dc:03:14:5e:02:09:b0:f0:
         6f:44:5d:99:f0:70:58:50:c1:1c:17:90:4c:b0:26:35:e0:59:
         4c:1c:66:80:a1:fd:4d:c4:6b:ed:84:a8:a8:a2:e8:48:c1:1b:
         87:cb:75:2f:47:8d:b5:43:a8:c8:7f:0f:cf:e2:ae:c5:76:8d:
         1d:4f:8f:9b:32:aa:18:ab:d8:44:78:fd:0f:0e:83:15:43:a4:
         c5:f2:eb:ec:de:57:38:11:98:66:d2:ea:c4:92:5d:80:c7:f4:
         51:ce:6d:25:e4:9a:c0:c0:59:02:ce:1a:03:7f:6c:77:44:3e:
         0d:59:66:a0:c0:69:90:ac:c4:00:ca:b1:98:c0:4c:59:1c:2c:
         7c:24:66:3b:6c:66:93:2a:51:f0:9d:77:b8:c9:03:2e:0d:20:
         12:c7:25:7d:b2:b2:1b:81:81:da:74:f6:f0:8a:f7:b6:1f:f2:
         0b:2f:30:e6:85:d0:2a:d6:d3:aa:51:ec:d5:93:a6:0b:1d:f9:
         e0:f6:a6:49:7b:d8:6e:56:33:d4:9c:38:b4:89:a4:a1:47:98:
         37:e3:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:48 2025 by rpki-client