Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File:                     0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier:          P0476bphTgOTFFS4ljaOXReyWiSQW6wCLLAwAt2Maa4=
Subject key identifier:   5F:D1:03:27:27:3E:A4:E9:EC:BA:B2:F1:3C:81:20:C1:82:95:F9:CB
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer:       /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial:       019788EB3CAAAC650470FD8538A033F041E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number:          0771
Signing time:             Thu 19 Jun 2025 16:00:07 +0000
Manifest this update:     Thu 19 Jun 2025 16:00:07 +0000
Manifest next update:     Fri 20 Jun 2025 16:00:07 +0000
Files and hashes:         1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: /E89GfFp+u5uEO3B7d2ska0u8THgadrGfzKfSrC4qNg=)
                          2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:eb:3c:aa:ac:65:04:70:fd:85:38:a0:33:f0:41:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
        Validity
            Not Before: Jun 19 16:00:07 2025 GMT
            Not After : Jun 20 16:00:07 2025 GMT
        Subject: CN=5fd10327273ea4e9ecbab2f13c8120c18295f9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:08:2c:8a:e8:c2:87:63:48:59:75:b1:2a:
                    56:68:72:d5:86:11:89:13:7d:13:a4:16:2d:1c:8f:
                    f2:4c:90:42:b7:c8:1f:4e:e9:54:6b:34:cd:7a:e2:
                    74:df:ad:cf:54:a7:a4:e9:e7:c3:a8:d5:43:d1:a2:
                    3e:45:06:54:25:3a:a6:d6:1c:77:a4:6c:e6:f8:91:
                    9e:f0:29:8a:e4:c9:bd:4d:63:ab:8f:86:bd:9b:b9:
                    28:13:1a:cc:c1:54:53:c9:2c:93:78:22:9f:a0:e6:
                    3a:b1:5b:01:8d:f8:f5:d3:1e:3f:cc:07:88:95:8e:
                    be:d5:ac:c3:7c:17:54:b7:42:3b:b5:49:6f:2a:d5:
                    53:bc:1e:61:f2:b5:a5:83:75:59:3d:1e:f2:ab:83:
                    fc:c0:67:19:a8:82:c2:d6:73:e0:c9:6c:f5:05:03:
                    70:89:5e:4b:a4:2a:3d:33:73:9d:d8:17:c8:03:d0:
                    b3:6f:7e:ef:5f:30:e3:cd:85:6a:eb:aa:19:d5:b8:
                    d8:c1:3e:fa:1b:ba:2c:2a:25:f0:d7:ef:27:7a:20:
                    b0:0b:fa:86:55:3a:21:c0:4f:b1:50:9c:a2:89:5f:
                    ae:f4:7d:3c:3b:23:9c:12:74:ea:ba:59:a0:23:85:
                    42:63:e8:36:32:66:ea:3a:ef:10:0f:0a:33:e3:56:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D1:03:27:27:3E:A4:E9:EC:BA:B2:F1:3C:81:20:C1:82:95:F9:CB
            X509v3 Authority Key Identifier:
                keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:76:e5:96:13:b9:24:d2:be:67:6e:d2:31:8d:46:9b:f9:58:
         e3:2d:ff:e5:82:d4:29:43:8e:4f:b6:a0:bb:61:87:a5:db:c4:
         6a:aa:be:09:20:e5:b0:9b:06:23:9b:36:18:b2:6e:c9:f2:1b:
         90:84:c7:c0:80:27:ed:ef:23:ec:a0:8b:c3:fc:03:bf:3a:62:
         10:20:1a:96:cc:82:70:97:37:03:05:3f:ea:4a:83:af:a6:24:
         5c:16:1c:2a:9a:97:e0:6d:04:43:a8:bb:01:c0:ed:a3:82:9e:
         71:aa:44:23:97:38:17:6b:0b:f0:c9:3d:e4:17:01:29:7e:c4:
         07:24:d0:d2:f9:e3:ab:b6:69:d2:b2:7f:da:30:bc:a0:66:2c:
         9d:71:9a:87:dd:96:80:9f:11:c7:6e:26:dc:de:ac:cf:78:06:
         24:cf:70:a2:80:2d:16:ff:d5:60:3f:cf:0c:0a:a2:32:70:81:
         9d:7f:a2:1c:cb:f3:47:1a:db:c4:4f:86:f0:2a:76:72:d8:9e:
         69:34:1c:3a:94:d6:3c:bf:ac:86:70:c5:0d:69:e8:48:c1:b1:
         01:a5:8d:0a:e6:9f:25:bd:7a:32:9a:fe:4b:e3:96:90:66:f5:
         27:11:ed:0f:4b:8f:5f:01:88:d7:89:eb:49:47:1a:70:78:a1:
         1a:93:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:53:46 2025 by rpki-client