Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File:                     okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier:          cym5KRjuR0m5asIyo/LhWQDjC7S7IGer4hPK84FzrkI=
Subject key identifier:   2E:CF:46:D4:79:50:E9:FF:B8:53:B3:C4:F5:25:55:4C:7F:EB:A7:E5
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer:       /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial:       01988B0F6F59E28CF5BCFAE02941D9598E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number:          1626
Signing time:             Fri 08 Aug 2025 19:01:41 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:41 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:41 +0000
Files and hashes:         1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
                          2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
                          3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: jrJsJAvvRnf6P7A+ntpq/h8oH+Erj6rzVknggkAJWxg=)
                          4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:6f:59:e2:8c:f5:bc:fa:e0:29:41:d9:59:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
        Validity
            Not Before: Aug  8 19:01:41 2025 GMT
            Not After : Aug  9 19:01:41 2025 GMT
        Subject: CN=2ecf46d47950e9ffb853b3c4f525554c7feba7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:6e:c8:4b:44:96:e5:39:3b:ac:c0:53:ab:
                    f2:59:67:73:2d:80:f0:0f:ce:5a:31:60:1e:af:ea:
                    59:fd:60:c4:20:c5:a5:f4:92:ae:2c:40:62:76:40:
                    cf:6f:b0:48:3c:a3:18:94:e0:69:2f:2b:c9:47:53:
                    d8:f9:2b:c4:a4:9f:e1:94:b5:1b:c0:99:ce:ef:31:
                    6e:5f:ce:dd:cd:ae:1f:05:16:4a:e6:7f:48:62:a2:
                    f3:52:2d:52:f9:12:4a:31:7c:88:30:78:e7:fd:8b:
                    4d:b0:25:03:83:38:85:53:a4:c3:92:1d:14:bc:0b:
                    a9:68:83:e1:c4:e3:95:c1:a1:8a:81:5e:6e:01:c7:
                    f6:23:57:4f:31:99:1b:0a:d5:96:ac:c9:ee:ec:a5:
                    87:76:41:33:b5:94:ea:10:ba:0d:c4:8f:a5:19:7b:
                    5b:95:f6:c1:81:82:06:63:a9:16:62:f3:f1:99:4f:
                    9d:29:b3:ac:9f:91:a2:dc:ed:6a:5d:37:ba:52:47:
                    81:91:c7:f5:10:a3:60:65:56:6e:d9:69:cf:e6:4b:
                    f9:ea:e4:a8:e8:67:c3:e7:4e:6b:b4:79:1e:d9:98:
                    55:1f:a1:b5:b7:bc:c5:19:0e:a9:a0:96:4e:c2:f7:
                    9b:56:00:ba:38:c1:1b:d9:0f:80:dd:cc:31:aa:0e:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:46:D4:79:50:E9:FF:B8:53:B3:C4:F5:25:55:4C:7F:EB:A7:E5
            X509v3 Authority Key Identifier:
                keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:54:65:f1:22:af:ae:8e:83:aa:b0:c4:ce:63:53:12:fb:c7:
         ab:bb:e0:8a:e9:f3:57:57:c2:bc:8f:dc:e9:31:9a:26:23:ba:
         8a:e7:0c:6f:e8:f4:3d:4a:cd:e8:87:5e:c5:9e:31:b5:a8:2d:
         97:89:8b:8b:48:6e:82:61:32:60:02:d2:67:ec:94:66:85:25:
         3f:e5:4c:14:77:19:33:aa:7e:04:5d:37:f9:4e:17:5d:0c:8e:
         c8:80:10:70:a8:18:3f:5a:70:b7:49:ef:33:01:ce:be:1f:ce:
         e3:2d:e1:09:14:57:c4:e7:1b:30:94:d1:79:38:52:00:f1:0d:
         fb:72:d6:a1:12:73:0e:e3:d2:e5:39:86:4f:09:b3:ea:7f:4d:
         12:65:60:eb:5c:8d:5f:a2:95:81:d3:82:f4:c5:32:5a:12:73:
         ac:04:71:7d:c0:8a:f7:fa:e8:d1:46:7f:57:73:c2:70:b4:e5:
         c3:00:36:a4:01:63:91:35:63:7d:0d:df:99:a8:35:17:ef:cb:
         61:7c:04:17:b7:b1:c5:b7:62:74:07:76:53:b7:08:3b:17:9b:
         98:ad:8a:08:9f:69:fe:e2:b1:51:e9:ff:fe:88:54:3d:f4:f3:
         95:c8:b7:64:19:6b:a5:c1:1c:44:c9:21:5f:03:32:15:31:47:
         74:3c:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:50 2025 by rpki-client