Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          FiA3WHI1Vjk1C9rzF8xpxjluOxQw4epCJgQW3A85uFs=
Subject key identifier:   98:A0:87:D4:45:49:06:C8:BD:92:C3:B0:8D:2A:9F:09:A4:D1:40:99
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       0198726253B048686BAD48EDD85D345F87A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          161D
Signing time:             Mon 04 Aug 2025 00:01:43 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:43 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:43 +0000
Files and hashes:         1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
                          2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
                          3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: /Exz3Al2sJ9c9XXpfnLrY+Ka2nG84F8YT6faYiXpFL0=)
                          4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
                          5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:62:53:b0:48:68:6b:ad:48:ed:d8:5d:34:5f:87:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: Aug  4 00:01:43 2025 GMT
            Not After : Aug  5 00:01:43 2025 GMT
        Subject: CN=98a087d4454906c8bd92c3b08d2a9f09a4d14099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:e3:30:63:20:00:7d:5e:e4:d3:1e:29:ad:
                    7b:1f:2e:a7:d9:8f:5d:26:47:d3:ec:f7:12:29:6d:
                    db:5d:f8:63:82:f7:dd:8b:e5:73:b8:07:ae:af:81:
                    81:ba:52:2b:ea:05:78:8e:15:23:3f:e7:3b:71:c8:
                    97:0a:40:e0:c7:93:f4:ed:99:8b:cc:c8:ca:74:76:
                    1e:b8:b8:da:ce:16:75:ea:47:ac:bc:d1:05:e5:f5:
                    8a:7f:02:1e:ef:95:3c:91:aa:7e:45:4a:23:cf:40:
                    5f:34:02:97:3f:00:8a:0a:7a:25:de:23:9b:85:67:
                    a1:c4:83:29:a4:54:05:3b:a3:7e:bc:38:b8:e2:e1:
                    69:b1:41:51:0d:d8:e0:48:73:65:14:23:ac:bb:69:
                    e5:e0:f7:16:63:03:4b:fc:dd:b7:80:43:6c:57:65:
                    9d:57:e6:35:99:31:8f:dd:06:ce:52:f6:cb:cb:fd:
                    cc:99:99:ca:8c:17:85:a9:6c:ea:34:14:2e:ea:c1:
                    8b:b6:1b:65:19:1e:f7:3b:4b:c1:80:b2:1e:46:a3:
                    c3:60:ae:2a:b4:38:97:83:ab:65:35:3f:21:2c:43:
                    14:5b:32:6d:93:58:04:65:9c:cf:c9:16:8e:96:ec:
                    0d:11:10:dd:2a:fc:c7:35:65:c2:5d:09:f5:57:99:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:87:D4:45:49:06:C8:BD:92:C3:B0:8D:2A:9F:09:A4:D1:40:99
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:94:86:dc:a0:f6:98:ad:b8:e9:3b:27:8b:4f:0b:9d:9b:14:
         69:e8:73:a4:fd:a1:26:f8:c7:fd:1e:87:b1:78:5f:5e:9e:b9:
         a7:84:48:c0:83:c7:ae:57:d4:ff:79:be:d1:9e:18:f3:c5:5f:
         e9:f9:43:04:64:4d:19:fc:79:d9:c0:73:94:f5:c5:ca:28:8e:
         07:df:fc:10:45:14:f5:e3:ff:ec:0e:47:e0:b1:5f:3d:b3:44:
         80:46:19:e1:f7:f3:aa:56:cf:30:47:88:7e:9a:af:f0:12:c6:
         30:14:d2:5f:ff:e0:0d:cc:cc:31:38:65:07:37:2b:a5:28:c6:
         7b:61:a0:07:07:24:d5:d9:0c:53:78:4c:f7:f2:88:89:27:79:
         82:cd:7f:cf:d0:af:a2:3d:29:b8:4d:a7:15:0e:35:27:40:be:
         1e:93:24:7a:48:d2:dd:2a:6c:11:65:fe:32:14:15:2c:1f:42:
         c9:0d:57:af:e2:6c:59:04:41:1f:94:35:41:a4:8f:7d:06:6d:
         e8:b3:15:97:f0:ea:f7:db:61:2e:5a:d9:91:d6:67:0b:74:a3:
         0c:f8:50:10:1e:60:6b:92:91:8e:fd:69:ca:f8:f6:11:87:83:
         60:3a:36:2b:27:c7:c0:58:e4:6a:22:7a:e1:86:43:b4:83:7d:
         c3:f8:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:23 2025 by rpki-client