Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          +PgpxRohxm7Z0xCF+WUYAimIvBdYNtETs3koOqIKX5o=
Subject key identifier:   0A:BB:4E:D6:D3:9F:67:75:04:D5:A4:91:33:0A:23:7A:B4:1C:B7:B7
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       019872D01978FEE4BE25F0368EADFEF06D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          104E
Signing time:             Mon 04 Aug 2025 02:01:37 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:37 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:37 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: 7Io9EXvshUP7VzJhYRan2tMhENbRnOfdc8Y8bUBN8BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:19:78:fe:e4:be:25:f0:36:8e:ad:fe:f0:6d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: Aug  4 02:01:37 2025 GMT
            Not After : Aug  5 02:01:37 2025 GMT
        Subject: CN=0abb4ed6d39f677504d5a491330a237ab41cb7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:9f:f5:12:2a:54:b2:4d:b8:b0:67:e7:d5:
                    37:04:6f:13:fa:ee:a9:8e:f7:b8:52:0e:11:f0:73:
                    b9:73:e8:d1:cd:a7:da:8d:11:0d:c1:0e:25:e5:dc:
                    86:9e:3a:b5:42:8d:2d:bf:d8:28:7f:cc:5d:19:6e:
                    5d:17:48:63:e9:9a:72:be:f9:92:83:56:b5:37:8b:
                    74:f7:b2:ae:43:82:81:29:39:24:c1:ac:86:2e:7d:
                    0a:7b:8f:13:67:c6:ad:4a:a4:85:c5:46:a7:77:b9:
                    0b:4c:bf:70:b8:41:3c:0e:02:17:8d:cf:98:25:16:
                    b1:ee:a0:36:3a:02:d6:47:c2:3d:f7:f0:65:77:13:
                    b8:59:3a:39:96:aa:e9:de:be:9c:0e:a6:de:c9:92:
                    bf:ad:ec:87:00:39:ae:24:74:31:38:e9:dc:71:eb:
                    e5:7e:d2:e1:d9:ef:fc:a3:34:78:31:80:39:8b:8f:
                    a8:e1:b5:ac:3b:2b:e3:75:82:ef:ff:c7:cb:4f:ae:
                    30:e9:5a:48:24:25:63:71:3e:44:b4:22:59:31:c2:
                    bb:5f:88:37:7b:20:ac:93:f9:42:b6:6a:06:d2:24:
                    76:f0:38:51:e2:24:ce:b4:f9:ea:fb:e9:db:16:5b:
                    45:96:42:34:5e:72:dc:5a:c5:3c:eb:4e:c9:c1:4a:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:4E:D6:D3:9F:67:75:04:D5:A4:91:33:0A:23:7A:B4:1C:B7:B7
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:fb:e6:02:e2:f8:5e:6a:8d:a5:95:42:15:79:c9:74:ca:
         01:09:7d:5e:21:4f:41:88:cf:31:c6:96:5d:0d:a1:27:93:a6:
         fd:f8:6f:73:9d:db:4a:95:38:46:b0:18:e3:46:0a:2f:46:1f:
         b3:42:d8:a2:17:d1:0e:85:e0:9c:5d:bf:98:eb:8c:b3:49:77:
         f9:ea:2e:3b:4e:40:ff:5a:8e:bd:c2:7c:8a:e7:5e:b6:57:1f:
         22:b8:73:ca:88:0d:f9:b7:8b:7b:36:c6:0b:e3:c4:e7:a7:f4:
         1f:b9:aa:e6:7b:ea:99:f7:b0:fe:82:31:61:fa:b5:1e:23:da:
         39:6d:31:b3:ba:4b:9a:e1:b3:3c:9f:bb:61:c5:05:20:8e:17:
         ae:0a:34:76:28:2f:2b:99:da:a1:47:ce:91:25:03:84:57:db:
         40:97:4c:5c:1e:d1:9a:fc:21:cb:a9:40:1c:6f:af:0b:8d:51:
         44:79:7f:6a:31:ca:e0:96:30:0d:75:81:5c:d5:22:75:28:82:
         f8:da:d3:aa:8f:e9:ba:16:6b:d4:32:93:f1:f9:27:cc:04:49:
         3d:d5:73:f9:fe:80:0b:73:f0:91:0f:9c:20:42:ca:41:93:27:
         24:b3:2c:bc:64:e9:cd:76:ba:eb:dd:7e:16:fa:42:16:3b:ce:
         68:55:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:14 2025 by rpki-client