Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          lvgeuavHMIX/X0L/IOJZalsFckWCZLvcuUjrLtCy6iE=
Subject key identifier:   CA:19:32:D1:55:69:F3:47:C5:62:D1:06:9D:68:2B:49:1F:79:B3:C2
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       019875D2473091D63340762800CF29B1CB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          166A
Signing time:             Mon 04 Aug 2025 16:02:51 +0000
Manifest this update:     Mon 04 Aug 2025 16:02:51 +0000
Manifest next update:     Tue 05 Aug 2025 16:02:51 +0000
Files and hashes:         1: 0TAxxPi4zjMfURtgArfTlTlJzoY.roa (hash: DkfnTLoQSnkxMFDufCf4Tzi91pyg3D/dKfjoKdkuvnc=)
                          2: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=)
                          3: MOeM4pvJ19VMTsgR_3r5c0Guzfo.roa (hash: O4JMykojMIHNUFBT5ERdOkwmTNiX1uT13DSMptHNwG0=)
                          4: T3TYQGzkIt875WMcJue8Tlu8qcE.roa (hash: zrjAaYCf4QNugLTCHzX4Z7vGYzZPktrc0+f+lzFF6qE=)
                          5: d-6pwwZF456Mo5Wgj7fFlJMHSYU.roa (hash: DDkCkICPR92v5bUo5PyuSyPMhVyRgfAZikBXPEj0nkc=)
                          6: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=)
                          7: mjwkmBYfgYlamUR-2NpRbrUlBoU.roa (hash: oOhe9AfJ6DR69OMTtpbwRW3hwy+BVcfgV3r0EOwD9Oc=)
                          8: njy0ZzE7jQ8CAv0N5IGSMS0-dL8.roa (hash: KK7BgZXmKYBrQlBIPx+WAzdhzWil1XPXeHZy3yXRGGA=)
                          9: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: Z6+kEmmvdMDnl8Ve3WsrEfzxD26yo8RBt1HONWV1ru4=)
                          10: wt3LwVWmMnxdQ_1hnrE0QvYmwGo.roa (hash: 78DCmBR5KDCiWcDQ81Kjee3QnK4jQ7nQ69rTiAmxiSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d2:47:30:91:d6:33:40:76:28:00:cf:29:b1:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Aug  4 16:02:51 2025 GMT
            Not After : Aug  5 16:02:51 2025 GMT
        Subject: CN=ca1932d15569f347c562d1069d682b491f79b3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:a7:04:80:ac:cb:07:f7:3b:52:3c:71:08:
                    16:fa:6e:84:f8:93:12:bb:0a:8c:09:cf:d6:64:79:
                    bc:aa:b9:32:c6:49:ff:5c:62:3f:fc:45:46:d0:56:
                    4c:c5:01:76:4b:b8:d2:05:72:da:b1:62:68:53:76:
                    f4:9f:b8:ed:b9:d9:8a:d1:54:cf:21:54:27:79:98:
                    6b:34:62:a1:b3:d3:01:d2:32:6a:91:50:be:44:bf:
                    0f:2e:3d:72:be:bb:98:bc:dc:86:2e:fd:42:03:df:
                    ec:4e:cc:8f:4f:02:da:d1:cf:41:72:f7:48:98:b1:
                    9a:ae:20:97:13:94:bc:fb:19:16:18:ab:78:8b:1a:
                    12:45:96:23:b4:2b:38:df:c6:ba:41:dd:2b:4a:61:
                    84:02:8a:79:0d:17:2c:98:0e:8e:7e:99:cc:33:22:
                    0e:9d:6c:69:e7:90:fe:ad:9e:a3:a7:64:48:e2:dc:
                    6e:5d:47:46:7b:c6:93:79:32:db:70:f0:c2:5b:d4:
                    ff:fa:d8:ba:c5:ca:b0:17:d4:ac:37:76:01:b2:96:
                    2f:d8:53:9b:16:63:71:bc:56:9c:a0:c0:47:32:1b:
                    ce:a0:cc:60:a0:4c:57:9a:f0:cc:02:ed:1b:6d:71:
                    38:df:69:27:ba:fb:d4:f7:0a:81:d7:f7:90:0c:45:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:32:D1:55:69:F3:47:C5:62:D1:06:9D:68:2B:49:1F:79:B3:C2
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:eb:81:a2:ef:9e:3c:55:02:dd:92:e5:dd:01:f3:25:5b:e2:
         6d:9e:96:62:3e:73:db:0a:32:70:60:95:8d:0e:fd:ed:29:9c:
         a7:5c:24:28:46:46:ae:d3:03:e0:aa:91:fa:ee:71:c9:23:b6:
         c1:db:e8:3e:ff:9f:f1:e9:7d:43:6f:7e:36:23:b3:3e:32:14:
         e4:85:c3:fd:20:b2:14:45:0d:60:1b:ba:6a:0c:04:a0:93:51:
         87:40:d9:65:84:92:57:49:54:e1:a1:c7:0d:d6:00:e3:27:d0:
         b0:89:b1:f4:2e:81:7b:c8:41:db:0d:6c:37:15:ed:c4:45:3e:
         c0:9e:03:48:5c:7e:1a:95:22:b1:26:d1:a6:9b:d3:ad:df:99:
         95:27:13:d2:2f:8f:d6:c2:ca:63:fc:35:8a:55:b9:e0:ab:79:
         e6:f2:21:61:94:19:84:58:82:a3:65:5c:74:75:1e:a3:e0:4f:
         f1:0d:90:0f:a1:c7:1b:61:b5:9d:01:6e:72:14:99:df:6a:b5:
         00:e6:8c:5d:85:5e:dd:52:f0:df:26:92:a9:8c:f3:33:72:a3:
         93:4d:2c:23:8c:ff:f5:18:56:40:52:87:86:5d:f0:ce:09:a6:
         f1:5c:df:8d:2d:21:7d:3d:bb:c6:88:39:e8:93:f2:f2:b9:bd:
         17:07:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:40 2025 by rpki-client