Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File:                     O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier:          CG9T7FWrP60MoQg8rWYBfd7TuVLJFDqhcyqqmOmPsgs=
Subject key identifier:   E2:A4:96:69:05:80:88:93:7C:99:49:DD:6A:24:FC:6A:54:B0:D7:86
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer:       /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial:       019892C7D2DCCB4D90CA4C45032260BA189C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number:          1376
Signing time:             Sun 10 Aug 2025 07:00:25 +0000
Manifest this update:     Sun 10 Aug 2025 07:00:25 +0000
Manifest next update:     Mon 11 Aug 2025 07:00:25 +0000
Files and hashes:         1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: pTe7TwDyHbmwo2E3XbFX4ADV+a6/BJN5J3TuMiRVnLE=)
                          2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c7:d2:dc:cb:4d:90:ca:4c:45:03:22:60:ba:18:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
        Validity
            Not Before: Aug 10 07:00:25 2025 GMT
            Not After : Aug 11 07:00:25 2025 GMT
        Subject: CN=e2a49669058088937c9949dd6a24fc6a54b0d786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:69:b2:8d:55:78:78:1d:49:e8:4b:9d:34:
                    69:a3:88:7c:8e:36:92:48:f9:ce:ac:0c:b2:44:c6:
                    27:ee:32:1a:12:44:44:8c:67:d5:4b:f6:9f:85:1e:
                    01:28:42:f4:1d:1b:62:40:a2:d9:1f:5b:8b:0d:42:
                    d9:1b:ee:56:17:30:59:ee:42:b2:de:bf:e0:14:76:
                    01:e1:b7:91:7b:0b:fc:b9:dc:75:db:29:ef:01:18:
                    be:c5:85:98:64:54:f1:08:46:1f:f9:b7:1d:72:76:
                    05:c6:50:c2:24:8f:73:09:ac:66:64:fc:41:c8:75:
                    33:c3:ef:f0:3d:3f:19:e7:ba:60:7d:7b:25:d6:aa:
                    92:fb:02:f8:28:0b:b7:dc:0a:8a:a3:73:f4:2d:b5:
                    8a:3a:cb:1b:bc:6b:58:81:d6:5c:da:40:ca:99:ac:
                    66:fe:40:15:41:ca:b1:de:c3:f9:f0:a4:5d:31:e3:
                    2d:93:8e:38:d2:0d:0c:d9:11:1c:2e:81:3b:3f:02:
                    62:2c:83:d4:3e:d5:dd:db:f6:d2:c6:2d:0c:dc:6b:
                    f6:f9:7e:75:24:33:dc:67:d0:09:a9:15:39:6c:b8:
                    54:26:7b:a2:8d:49:96:6a:7c:f7:0d:c0:49:75:75:
                    05:03:ff:64:7b:98:20:8a:b3:6c:6b:d1:9b:0d:6a:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:96:69:05:80:88:93:7C:99:49:DD:6A:24:FC:6A:54:B0:D7:86
            X509v3 Authority Key Identifier:
                keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:52:6b:28:f9:9f:78:87:f9:e4:16:ad:b2:c0:80:e4:41:35:
         2a:c5:66:c1:17:a1:b5:ab:f4:66:71:b7:75:5a:17:51:98:e8:
         e3:ec:eb:8e:cc:d8:9a:94:8f:ae:f0:9b:be:73:a3:2d:70:09:
         5e:28:25:18:18:20:f8:c7:a6:8a:fe:95:34:79:de:59:fc:b5:
         13:f8:e6:1b:2b:62:27:dc:e8:79:5f:fe:af:d6:b5:d3:9e:39:
         b8:46:b3:e6:6c:d9:a0:ef:de:57:47:f8:9d:9d:9f:3a:22:54:
         3d:ce:77:89:8c:2b:9b:ec:d1:8f:58:c1:a5:7c:68:96:39:47:
         f5:6e:6b:a4:3a:f8:86:a6:31:3e:2c:cd:77:49:98:74:65:a6:
         df:44:31:15:58:d2:80:05:6b:93:8f:10:04:88:29:5b:f8:fc:
         3a:90:05:39:b1:de:7e:fa:82:df:7d:9e:25:75:b4:17:e0:6f:
         c1:b4:e0:f6:2d:c0:2d:1a:a9:c4:f8:9e:a9:a0:78:c3:6a:6d:
         95:84:a9:55:1c:29:2b:f1:ec:a4:ec:a1:f6:99:ce:98:63:25:
         0d:94:ec:c8:55:2d:bf:f9:ac:de:4a:e0:d3:49:a3:c9:27:b7:
         6c:0b:ac:27:f0:ba:e6:35:2e:f1:38:73:5b:1b:74:78:36:5c:
         0e:2d:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:24 2025 by rpki-client