Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          qNqbMoftg7CQ0R5u2Ka4um1rXZtkkwbre4b077+7LCY=
Subject key identifier:   09:C7:8D:70:96:24:98:01:33:9E:05:C7:22:F0:13:6C:9C:92:00:8B
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       01976DAB9DD6D5104E0EA1992FE910DF895E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 09:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:52 +0000
Files and hashes:         1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
                          2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
                          3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: YLopxktFd8CAb0XN8Wap3LSXrhFmgWFYrNth4iBGIIg=)
                          4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
                          5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:9d:d6:d5:10:4e:0e:a1:99:2f:e9:10:df:89:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: Jun 14 09:00:52 2025 GMT
            Not After : Jun 15 09:00:52 2025 GMT
        Subject: CN=09c78d7096249801339e05c722f0136c9c92008b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:cd:e7:14:dc:a0:43:77:cf:63:71:9a:a2:
                    76:b2:58:02:ec:5d:38:ff:36:40:18:50:11:08:e0:
                    38:af:a1:b7:a3:b3:53:b1:3d:4e:af:91:01:f7:86:
                    dc:ef:e4:65:02:40:46:ad:78:cb:4d:14:31:f3:9b:
                    b4:f1:d6:73:2d:6e:e3:4b:61:8b:37:af:18:cd:a1:
                    63:c3:27:86:23:46:98:b9:da:17:7b:85:c2:c7:8d:
                    9e:11:36:90:27:de:03:05:4c:1f:46:b9:a9:c3:cd:
                    f7:f0:03:42:2c:dc:37:62:68:62:07:b7:4e:6a:9e:
                    75:be:91:36:5d:a7:c7:15:be:a1:3b:e3:74:8a:46:
                    62:f0:17:c8:49:d4:0a:47:05:15:64:3b:e0:68:7d:
                    f9:bd:cf:5a:ae:fd:68:76:4b:a4:f1:fa:b0:ee:53:
                    08:6a:97:50:04:56:2a:d7:37:85:a3:23:06:84:bd:
                    64:b1:d1:61:20:ce:68:39:9a:da:53:9b:07:d5:73:
                    47:de:7a:e8:35:37:83:08:84:19:0a:52:10:17:28:
                    7c:53:30:6a:d7:82:28:62:36:95:41:21:d4:9b:a3:
                    38:b2:bd:fe:74:cb:7a:1c:8e:73:c5:e3:69:99:31:
                    e9:60:3b:a0:d2:ca:84:45:f5:1a:4d:58:28:2f:8b:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:8D:70:96:24:98:01:33:9E:05:C7:22:F0:13:6C:9C:92:00:8B
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:56:33:ae:64:fd:6f:bf:62:de:51:91:48:a6:e0:d6:fa:
         e2:00:86:1e:01:97:f7:df:14:75:33:fe:8b:50:34:6c:e8:9c:
         6e:3e:de:9d:6a:e8:ac:3e:a7:df:00:ac:bd:b2:39:14:5d:26:
         e3:12:41:80:18:5e:31:79:54:e4:90:ae:0f:03:45:db:39:fb:
         e8:6d:cc:90:57:44:07:bb:e2:75:a4:33:6f:58:f8:be:be:d0:
         81:33:c9:9e:b9:fd:62:1b:e0:38:6f:b0:02:48:4b:9a:b8:27:
         d9:d0:bb:cb:a7:64:23:de:52:83:bb:db:a5:2b:ab:5d:a9:91:
         8d:ae:6a:13:2d:65:a5:f4:70:63:d2:e9:d9:cc:00:49:e6:f8:
         fc:fa:20:1e:77:13:a4:b2:d0:cd:8e:13:fc:fc:ff:18:b5:c6:
         16:b4:4d:cc:dc:af:92:58:ed:1f:66:b6:c4:c2:a5:fb:fa:6b:
         90:bc:02:23:c2:28:10:4e:e4:34:52:ca:47:43:d2:d1:14:ab:
         5f:10:ed:c9:d3:f7:15:d7:62:6b:3a:e7:e3:17:21:84:a7:be:
         e5:1d:76:23:65:c5:5e:a9:23:b4:99:20:4e:8f:e1:f3:72:58:
         aa:58:c2:9d:da:93:2f:1d:36:c3:c5:87:c0:c6:23:96:0f:6c:
         a9:95:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:36 2025 by rpki-client