Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File:                     o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier:          1RdUb66rcduZkSA/xPyJEYQ8s9IBt0F4J69pOZYgNS0=
Subject key identifier:   07:82:29:28:3E:35:A7:FB:E0:EA:83:87:17:7C:B0:48:83:7B:47:0F
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer:       /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial:       01988B7C47DE08F677BD65786C2E23A5D0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 21:00:34 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:34 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:34 +0000
Files and hashes:         1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
                          2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
                          3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: SrdmUB0XxLgh+kg56g1WrPjDP02l/XBPhlJesIQn6x0=)
                          4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:47:de:08:f6:77:bd:65:78:6c:2e:23:a5:d0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
        Validity
            Not Before: Aug  8 21:00:34 2025 GMT
            Not After : Aug  9 21:00:34 2025 GMT
        Subject: CN=078229283e35a7fbe0ea8387177cb048837b470f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:d8:43:9c:3c:61:c2:4a:b8:6f:33:cf:24:
                    65:f2:46:f5:2c:5f:54:ce:c3:4e:16:2b:a0:c1:f0:
                    41:40:60:0f:13:55:46:67:b2:39:be:e0:68:93:62:
                    f8:bf:81:0b:43:f7:16:55:55:e6:a3:2d:99:d7:f4:
                    79:56:31:3b:cb:84:e7:38:a0:b1:f5:02:e9:58:9c:
                    dd:49:a5:2d:b8:e2:22:d5:d2:b5:eb:9d:1c:32:27:
                    f0:f4:e9:91:f6:8e:f6:3e:1b:01:7a:40:fd:0f:0d:
                    6c:bf:37:21:15:f0:0f:de:94:a1:76:15:30:21:fc:
                    cb:8a:be:f4:96:d7:94:02:12:67:11:dd:53:d6:ab:
                    69:89:32:61:bd:8c:aa:17:c8:9d:07:5d:77:c4:0e:
                    5d:26:8d:74:be:84:cd:2f:d9:51:74:70:e3:d3:af:
                    0e:f9:44:b5:a6:58:47:8e:36:3f:89:bd:30:26:8b:
                    98:7e:e2:86:2c:42:e3:b4:d3:60:34:00:af:dc:ba:
                    01:1f:4a:23:32:fd:17:b4:41:59:cb:0e:3d:ae:00:
                    5b:f8:69:85:74:c3:b6:4b:f7:45:03:1f:98:4a:f7:
                    05:7a:d5:f1:e6:28:fe:80:d0:81:1f:ec:d5:e8:17:
                    a1:99:80:e1:13:29:64:ba:79:f3:1c:45:5c:5b:fe:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:82:29:28:3E:35:A7:FB:E0:EA:83:87:17:7C:B0:48:83:7B:47:0F
            X509v3 Authority Key Identifier:
                keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6b:e4:e4:a0:c7:90:b7:c1:4a:20:19:48:e7:55:85:44:6c:
         87:7e:16:b6:5c:b6:27:a1:05:50:29:34:44:5f:28:e8:61:09:
         d8:95:32:e3:69:ca:71:45:80:a0:36:b4:08:5a:3a:f6:42:2f:
         40:da:4b:85:79:d8:28:c5:b9:73:95:be:b9:b7:24:26:69:55:
         1b:c3:0b:ca:e8:bc:16:91:95:b5:b1:89:c3:c5:6b:0d:79:dd:
         90:3a:23:03:c0:2f:ba:f2:7f:a2:a9:11:48:8e:c2:38:a4:2f:
         08:e1:27:3d:a3:0c:a5:06:50:bf:ec:16:d7:77:c5:c5:e7:a2:
         6e:39:04:4d:7c:35:fc:0d:4d:22:71:e0:74:65:af:c0:50:c4:
         22:b0:4c:3d:a3:ef:21:68:c5:d8:23:b2:32:fd:6a:a9:08:06:
         16:05:03:34:b0:ed:c3:3a:9f:bb:37:b7:02:2c:93:0b:39:1e:
         b6:e6:62:f7:d7:16:d2:45:99:f1:62:5c:2c:e9:fc:76:65:14:
         95:33:c7:f5:15:13:91:47:c4:d5:21:57:76:81:80:b6:f4:5e:
         82:90:0e:97:ff:8a:22:19:d4:7b:69:7d:71:2d:99:94:da:67:
         78:f0:4b:9a:f9:95:1c:78:dc:39:84:2b:69:8b:c7:8f:e4:e3:
         0a:d2:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:50 2025 by rpki-client