Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File:                     OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier:          jUBEnOcMtGLMlVhpFjJ2Vg/vXMSMor1CDaaQOTTLaVA=
Subject key identifier:   63:7D:CA:F0:08:78:9C:8E:D0:E4:C9:D5:2B:01:20:63:0E:EE:77:88
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer:       /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial:       01988168E3E8784F45E3E24AF7B3DC3A2DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number:          03A9
Signing time:             Wed 06 Aug 2025 22:03:11 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:11 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:11 +0000
Files and hashes:         1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=)
                          2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: zSvfWj+vjX0uBkzEY/zUUPjKl7y9qT+N5F4VerJ2ERI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:e3:e8:78:4f:45:e3:e2:4a:f7:b3:dc:3a:2d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
        Validity
            Not Before: Aug  6 22:03:11 2025 GMT
            Not After : Aug  7 22:03:11 2025 GMT
        Subject: CN=637dcaf008789c8ed0e4c9d52b0120630eee7788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:c2:5a:98:76:4c:4b:96:e2:76:61:b3:36:
                    a4:79:1f:e7:36:1a:77:a6:b4:98:90:8d:6a:57:82:
                    d2:db:67:0b:29:99:2d:72:2d:ac:03:ad:37:ee:45:
                    81:5e:7d:83:a0:16:ca:46:22:b2:9b:a8:2e:ac:57:
                    06:48:f5:15:67:e4:b4:d3:5e:21:bd:ab:5f:18:4a:
                    0a:ca:65:b9:0e:d7:67:96:22:0e:a1:2f:35:e3:94:
                    bf:56:f5:a7:a4:8c:34:1f:0e:cf:98:3f:d8:d5:81:
                    01:ae:dc:be:5b:a5:55:30:70:f5:98:2b:39:c2:09:
                    9b:7f:a9:ed:3f:82:83:5a:58:de:de:d1:d8:b6:18:
                    35:63:ec:b8:88:93:3b:b5:be:4d:b7:d6:40:57:40:
                    bf:9d:9c:fe:ba:76:93:5e:d3:56:e7:a5:66:db:dc:
                    be:66:bd:41:f2:87:7f:cd:f3:98:d4:33:e9:b7:00:
                    62:11:e3:e4:4d:03:c8:ab:75:0f:dd:b7:48:00:a5:
                    99:b5:5d:fe:fb:73:9b:a3:ab:06:2a:f2:88:b3:ec:
                    c9:73:cb:9b:99:07:f5:2e:a0:b7:d9:d2:1d:7e:00:
                    2a:36:d4:85:6d:5b:0c:bb:40:10:dd:10:af:b2:d2:
                    a6:9c:68:56:2b:45:a2:b1:89:a4:dd:28:4b:44:23:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7D:CA:F0:08:78:9C:8E:D0:E4:C9:D5:2B:01:20:63:0E:EE:77:88
            X509v3 Authority Key Identifier:
                keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ca:70:55:35:48:93:fb:84:22:13:3f:59:eb:5b:b2:cc:90:
         10:5b:b4:9d:30:82:de:3c:6f:2b:f1:c4:64:a7:07:d6:b5:87:
         48:fa:c4:4b:c1:f3:b1:25:18:75:94:1b:5a:e4:0f:2e:5c:6b:
         d1:68:48:5d:ab:3c:92:cc:10:7f:08:b1:51:3d:ff:10:08:98:
         89:50:ce:33:db:59:27:44:cd:05:74:4a:c9:58:8e:ac:bd:4a:
         ac:b8:81:ac:5b:10:15:e9:ab:33:64:56:f3:2e:48:f4:04:21:
         00:ef:28:29:bc:70:52:5d:bc:bf:77:dd:51:e5:6e:2a:23:58:
         58:d2:3e:ce:8a:41:5d:a8:27:c6:04:e0:b3:d3:a3:5b:5d:42:
         a2:5c:be:b1:96:7e:87:2b:dc:0c:69:c1:58:48:5f:95:cc:74:
         e3:28:ab:5f:6a:29:42:95:b1:16:7f:65:e1:e6:49:59:df:32:
         7f:45:46:0d:22:fb:e7:92:49:41:0e:2a:c2:26:16:de:9b:7d:
         6c:b5:87:b3:6d:4c:2a:78:74:1e:86:71:98:95:da:f7:a6:36:
         f7:02:68:61:1d:d3:82:81:11:2e:21:d2:d5:a3:db:0a:97:5e:
         b6:ea:80:c5:11:9d:e8:d0:d1:3e:dd:34:c4:17:a7:21:a2:9b:
         4f:dc:49:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaOPoeE9F4+JK97PcOi3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWViNTMyMjZhNjYwYjdjOTM4MTZjNjE2YjY2ZDhjNzY1
NTA2MDMwHhcNMjUwODA2MjIwMzExWhcNMjUwODA3MjIwMzExWjAzMTEwLwYDVQQD
Eyg2MzdkY2FmMDA4Nzg5YzhlZDBlNGM5ZDUyYjAxMjA2MzBlZWU3Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF7CWph2TEuW4nZhszakeR/nNhp3
prSYkI1qV4LS22cLKZktci2sA6037kWBXn2DoBbKRiKym6gurFcGSPUVZ+S0014h
vatfGEoKymW5DtdnliIOoS8145S/VvWnpIw0Hw7PmD/Y1YEBrty+W6VVMHD1mCs5
wgmbf6ntP4KDWlje3tHYthg1Y+y4iJM7tb5Nt9ZAV0C/nZz+unaTXtNW56Vm29y+
Zr1B8od/zfOY1DPptwBiEePkTQPIq3UP3bdIAKWZtV3++3Obo6sGKvKIs+zJc8ub
mQf1LqC32dIdfgAqNtSFbVsMu0AQ3RCvstKmnGhWK0WisYmk3ShLRCPqeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN9yvAIeJyO0OTJ1SsBIGMO7neIMB8GA1UdIwQY
MBaAFDmetTImpmC3yTgWxha2bYx2VQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQt
YWJlNTJkN2FhNzdlLzEvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQtYWJlNTJkN2FhNzdl
LzEvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtspwVTVI
k/uEIhM/WetbssyQEFu0nTCC3jxvK/HEZKcH1rWHSPrES8HzsSUYdZQbWuQPLlxr
0WhIXas8kswQfwixUT3/EAiYiVDOM9tZJ0TNBXRKyViOrL1KrLiBrFsQFemrM2RW
8y5I9AQhAO8oKbxwUl28v3fdUeVuKiNYWNI+zopBXagnxgTgs9OjW11Coly+sZZ+
hyvcDGnBWEhflcx04yirX2opQpWxFn9l4eZJWd8yf0VGDSL755JJQQ4qwiYW3pt9
bLWHs21MKnh0HoZxmJXa96Y29wJoYR3TgoERLiHS1aPbCpdetuqAxRGd6NDRPt00
xBenIaKbT9xJlw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:29 2025 by rpki-client