Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File:                     O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier:          2PvQdYWnN6vgfB+83ZPWu5yn9RLOe20tkVH/rGHiAqQ=
Subject key identifier:   D7:7F:A9:46:B7:B4:D0:99:B5:E3:F0:4C:E1:E9:91:7D:69:81:1E:AE
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer:       /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial:       01977B6715D0AE1162B2906E911A03373932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number:          1597
Signing time:             Tue 17 Jun 2025 01:00:42 +0000
Manifest this update:     Tue 17 Jun 2025 01:00:42 +0000
Manifest next update:     Wed 18 Jun 2025 01:00:42 +0000
Files and hashes:         1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: vrWM0WftKxfEK487ON2EtTgZBq0Lx/OmO1vCwGfkW8c=)
                          2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:67:15:d0:ae:11:62:b2:90:6e:91:1a:03:37:39:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
        Validity
            Not Before: Jun 17 01:00:42 2025 GMT
            Not After : Jun 18 01:00:42 2025 GMT
        Subject: CN=d77fa946b7b4d099b5e3f04ce1e9917d69811eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:6c:22:4b:1a:e3:d4:94:5d:ab:1b:37:08:
                    c2:2a:bb:82:33:09:3b:a3:64:22:29:7a:f1:2d:dc:
                    ba:c5:7b:24:74:32:26:18:f2:d4:92:8d:75:8d:72:
                    8d:87:37:b5:99:68:b9:03:fa:eb:a3:81:45:7e:70:
                    29:66:58:e0:71:97:05:88:92:c6:92:d5:05:f2:c9:
                    70:35:85:b4:ab:d4:c4:c7:1b:3a:9f:87:cc:f4:f0:
                    7a:ac:5b:63:e2:83:45:7f:b9:14:04:30:40:f1:20:
                    8b:14:fc:22:bd:a1:84:02:e9:22:d3:32:92:45:cf:
                    de:25:88:1f:6f:0e:70:40:08:fd:ad:c6:76:59:1d:
                    3f:dd:0f:e3:27:8b:85:71:55:7d:c5:d0:fa:09:02:
                    6c:f4:e1:28:bd:19:a9:9a:2c:7a:2d:c3:ad:33:e2:
                    78:65:b7:81:3b:bd:7f:b4:f1:ca:d9:54:68:1c:fc:
                    e4:e0:95:3a:99:f3:16:61:fe:35:89:41:f9:3e:3f:
                    f1:2e:1c:2e:85:1c:84:6e:dd:9e:12:5c:7b:63:6b:
                    d9:7e:04:7e:a0:dd:97:b7:74:17:7e:a5:5b:92:53:
                    27:ce:b4:88:9c:db:76:5f:84:f3:c6:ad:d7:5a:f4:
                    ee:6b:5a:c2:2f:fa:01:97:4e:1d:77:19:44:ef:1a:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:A9:46:B7:B4:D0:99:B5:E3:F0:4C:E1:E9:91:7D:69:81:1E:AE
            X509v3 Authority Key Identifier:
                keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:a5:94:3d:8f:c1:ca:34:c7:a3:91:1a:fc:ce:b7:57:fe:
         1e:4a:9e:49:88:fb:4d:45:3e:78:6c:0a:56:14:5e:91:7f:1a:
         be:d8:1e:11:16:34:dc:67:39:6b:dc:3b:3f:f0:ed:f6:b2:e5:
         8e:37:2a:47:b4:ae:3b:a1:0f:7c:cf:15:d5:65:f9:3d:9b:00:
         7d:7e:ca:14:6e:ad:b1:80:df:99:c3:0b:b2:93:0a:7d:af:af:
         ed:d0:9d:37:62:5c:5c:2a:dc:85:79:c6:65:06:89:c5:e4:12:
         66:2a:34:79:86:e0:78:b5:b5:ac:97:b0:43:4f:ad:81:60:bb:
         ec:11:64:ce:32:77:28:87:ad:d9:9f:d4:00:38:66:a5:db:ed:
         60:b4:49:6d:98:ad:a8:27:52:59:0e:32:c3:c6:63:67:7c:ea:
         87:a8:5c:ed:99:96:0d:53:52:c2:d2:62:d1:f2:2f:7b:f0:f8:
         fe:55:05:b3:27:f6:66:bd:33:1f:41:fb:0e:68:27:22:6e:0c:
         03:b9:ec:86:68:68:04:6d:f6:bc:d9:04:80:8d:f3:66:6d:8d:
         49:e9:1e:e5:45:98:95:f6:9f:dc:0c:f5:e6:d3:75:99:3a:5d:
         7a:15:0e:e2:85:f9:15:13:4c:8d:47:04:b9:70:29:5d:77:8e:
         f2:f6:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:44:18 2025 by rpki-client