Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
File:                     DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json)
Hash identifier:          0xUZDGWWi4rRYwqGdK3Osfm8aYUZRN+Qh7ptu3cFlQE=
Subject key identifier:   92:F4:15:D5:85:AE:32:09:A6:CD:E1:A4:34:55:E3:F3:BD:6E:8F:0E
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Certificate issuer:       /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial:       01987306BBBCC7B6ADAC01FB31E01F3C722A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 03:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:17 +0000
Files and hashes:         1: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: ELNL56VsBQIJGHWy4KfywnINgT1c0Vg52dBuKUKz7l0=)
                          2: zrVCLm24sPlxLqzgeyn_JvpDItw.roa (hash: /XNKRA78yIF9Dhp7x0h4gHGlf9HOKwu6T6mJ6i6aMCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:bb:bc:c7:b6:ad:ac:01:fb:31:e0:1f:3c:72:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
        Validity
            Not Before: Aug  4 03:01:17 2025 GMT
            Not After : Aug  5 03:01:17 2025 GMT
        Subject: CN=92f415d585ae3209a6cde1a43455e3f3bd6e8f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:0d:b0:60:b9:db:9a:fd:2c:5c:86:bd:a6:
                    8d:15:dc:17:f1:f9:bc:32:c1:d9:bf:7f:8c:96:22:
                    6e:b5:1a:91:1a:5e:e8:a8:5e:44:e7:22:11:70:af:
                    43:2e:bc:4c:87:17:ec:4b:e2:71:32:d0:0c:da:28:
                    84:ad:a0:de:2b:16:b9:15:30:72:76:97:14:85:0a:
                    d4:25:28:7e:09:f2:03:cd:a6:9a:72:35:30:24:d0:
                    17:07:d4:12:83:ea:8a:96:ea:d5:08:9a:b1:c1:c1:
                    1c:fb:5f:6e:0f:f2:7c:a3:c7:a5:fe:ea:73:d7:43:
                    fa:5e:f1:57:db:42:23:bf:5a:4a:6d:73:34:3b:a2:
                    e4:7f:dd:2b:5a:55:8e:fc:6f:75:a0:72:c9:2c:01:
                    19:e8:b9:a3:d2:75:83:d8:ba:89:c3:23:94:59:1a:
                    b8:d9:9b:2f:af:9c:35:9c:c7:d9:dd:b9:e2:bc:e3:
                    ac:f4:d2:b0:34:d6:65:f1:1b:b8:db:ad:41:ed:e3:
                    63:74:81:1f:a1:cd:a6:1d:c7:e5:23:53:1a:68:3f:
                    df:b9:79:71:b8:15:0f:36:ec:f9:5a:ab:9f:af:f8:
                    db:82:25:59:8b:2a:61:e6:56:1f:a8:d1:04:c6:10:
                    5b:34:9b:96:b2:c1:70:45:7c:5b:5d:ab:51:4c:26:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:15:D5:85:AE:32:09:A6:CD:E1:A4:34:55:E3:F3:BD:6E:8F:0E
            X509v3 Authority Key Identifier:
                keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:17:bf:37:eb:4d:96:f4:ad:54:af:8d:b2:67:51:e6:6c:bf:
         9f:d9:57:91:3d:32:ad:1a:04:3b:a3:92:c8:ae:02:e7:d6:ad:
         a9:82:36:8e:e5:50:a1:54:cd:84:5a:ce:e8:70:87:37:70:07:
         e5:0e:7e:25:00:a0:27:33:9d:ea:aa:40:7d:59:87:11:1c:a5:
         11:14:52:75:c5:3a:39:1f:c2:8b:1b:fe:5f:bd:c2:70:41:53:
         c7:26:6f:78:f9:04:d4:f1:ee:f0:2c:9d:9e:8e:2e:f2:1b:2e:
         f1:9e:8e:a3:05:e5:eb:80:48:18:14:2f:14:1c:63:9f:4c:c6:
         d5:d2:c9:af:34:c6:ae:c1:39:d1:36:4a:70:9f:37:b2:37:fc:
         1d:59:b9:9d:47:a4:4f:78:51:a3:13:27:86:39:6e:64:24:d1:
         77:c2:cc:a5:53:4a:f4:2e:76:49:d3:78:0c:0c:a4:56:5b:98:
         be:a2:38:4a:ae:bc:0c:8d:e3:08:7a:cc:7c:43:29:78:87:2f:
         87:2f:a9:0d:0a:9c:84:ec:5a:6e:58:ad:81:36:86:4e:5a:ec:
         16:6a:35:2e:ff:1f:c7:49:1b:2c:f6:c9:4a:c3:7c:05:14:f8:
         89:48:28:1d:a9:8d:7f:7e:fe:75:b3:7d:6c:c9:0b:e5:a7:5e:
         04:80:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:08 2025 by rpki-client