Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File:                     oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier:          C2LHOZyI94JZa7vVPOL/ttFpV+D9Qrt6AmecYwelozQ=
Subject key identifier:   24:E9:0D:89:6D:90:05:FC:A3:98:F7:7F:DE:08:48:78:D7:69:E3:A4
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer:       /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial:       0198A1CD4F948281EF4651220C7D03A9B500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number:          1399
Signing time:             Wed 13 Aug 2025 05:00:43 +0000
Manifest this update:     Wed 13 Aug 2025 05:00:43 +0000
Manifest next update:     Thu 14 Aug 2025 05:00:43 +0000
Files and hashes:         1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
                          2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: s6lM/QkBQw0uw16GNSQD3qa2z8enbO7uNjaqDlWV+xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:cd:4f:94:82:81:ef:46:51:22:0c:7d:03:a9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
        Validity
            Not Before: Aug 13 05:00:43 2025 GMT
            Not After : Aug 14 05:00:43 2025 GMT
        Subject: CN=24e90d896d9005fca398f77fde084878d769e3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:56:15:3d:6a:09:87:d9:a9:44:c7:2f:88:
                    c5:93:01:e1:3f:0a:b8:9c:31:99:c3:26:2c:e9:dd:
                    98:b7:ed:3e:51:b4:1c:d9:2f:0e:9d:4b:78:0b:e3:
                    ed:99:63:74:5d:fd:3e:bf:87:8a:0e:30:84:c3:21:
                    58:c7:2d:41:9d:ae:74:1d:2c:8f:f1:27:2e:aa:e0:
                    fe:83:eb:e6:1f:28:01:f0:9e:c2:0a:99:7b:82:9a:
                    cb:ed:94:23:5e:a4:a2:62:f3:91:de:ea:6a:37:aa:
                    c1:f5:91:fe:7c:32:be:d4:c2:13:be:3e:2f:e1:4e:
                    21:07:2d:c1:18:d1:cb:6b:e6:91:7d:e5:0d:69:cc:
                    07:21:19:2a:00:32:8b:73:31:b9:f8:ce:69:3c:c0:
                    eb:f3:96:05:02:0b:df:02:cf:d5:79:6a:40:4f:7b:
                    c8:a4:ab:05:c8:06:b1:28:da:8c:22:cc:5f:bf:55:
                    87:7b:88:e9:bd:16:fb:e5:06:52:6b:22:61:c1:e2:
                    3b:34:16:6d:3c:7b:dd:a8:c8:ea:aa:6e:75:47:bf:
                    c7:49:27:8f:1a:b7:c5:4d:43:9d:d9:e3:89:b5:7c:
                    60:7a:bd:6c:37:c7:2e:95:db:e7:5b:7d:3e:ce:f7:
                    b9:9d:80:c6:6a:ed:08:7f:95:f1:62:5a:86:f1:5a:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:0D:89:6D:90:05:FC:A3:98:F7:7F:DE:08:48:78:D7:69:E3:A4
            X509v3 Authority Key Identifier:
                keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:40:63:8a:82:cf:b7:ad:9b:01:9b:a7:e8:ce:a6:89:37:
         85:c7:99:dd:d7:cb:85:05:34:97:80:75:f7:a0:c4:68:cb:c1:
         27:97:6f:ad:54:e3:d3:2e:a8:08:a6:81:f9:2b:ee:89:ba:1a:
         b6:8d:23:76:f3:88:20:87:9f:a2:ed:54:5a:d6:df:f7:8b:72:
         28:31:d6:14:22:5c:e3:86:7f:0a:3e:68:c0:32:0a:d7:d4:47:
         af:60:37:d8:c3:eb:e2:c9:80:14:ce:2e:31:75:b7:d9:a5:bb:
         67:16:03:1c:74:1b:91:87:46:c5:eb:c0:b4:98:b1:3d:c3:b9:
         67:84:1a:f1:42:0a:b4:78:07:7d:a8:1a:a9:ce:2e:e7:30:21:
         d0:fe:0f:22:43:5c:5a:38:d4:ba:e8:cb:b8:7e:ee:b4:03:d7:
         92:6e:e2:b8:f0:e7:a2:ab:12:5b:2a:93:e7:64:38:86:ec:92:
         bd:66:80:15:a7:b3:fd:8f:e6:22:29:fd:c6:9e:9c:97:72:17:
         47:14:58:dc:29:59:b4:34:a6:e7:6b:7b:b6:59:7b:9e:0c:39:
         d7:9f:2a:c0:6c:b3:d4:23:d5:e7:c9:aa:66:e9:50:a0:19:20:
         ce:88:3c:a6:c2:9b:04:12:45:e9:eb:7c:ec:61:a5:21:c2:97:
         6f:87:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:46:13 2025 by rpki-client