Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File:                     OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier:          oNZ4R7fIAM/BqZRCc2LoToudRcEayUMLUqx7jcjQEGk=
Subject key identifier:   10:C7:A0:F8:6D:14:E3:B0:7F:4C:12:B9:C7:17:30:27:BC:D4:D2:2F
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer:       /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial:       019880F936F8810608C03DCB692F330DD43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number:          020C
Signing time:             Wed 06 Aug 2025 20:01:12 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:12 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:12 +0000
Files and hashes:         1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
                          2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: wQQre7dMgVzQLo2b8/a2Eeg4uhyDKeyZJAiBHXkDDKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:36:f8:81:06:08:c0:3d:cb:69:2f:33:0d:d4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
        Validity
            Not Before: Aug  6 20:01:12 2025 GMT
            Not After : Aug  7 20:01:12 2025 GMT
        Subject: CN=10c7a0f86d14e3b07f4c12b9c7173027bcd4d22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:58:f9:9a:e9:dd:86:2d:5a:b5:31:c8:84:
                    93:10:27:eb:e6:11:6a:69:0d:bf:16:8b:b7:ae:1a:
                    a1:52:b7:f5:0d:82:14:09:fa:28:3e:27:f2:30:62:
                    17:55:8b:3d:66:6a:7c:bf:1e:74:15:b2:89:2a:26:
                    d7:25:31:62:e2:eb:14:48:1b:4b:62:2c:02:27:cb:
                    20:54:19:21:8f:35:48:2f:73:df:9e:42:07:6a:9b:
                    d9:46:f6:74:f7:98:fe:ec:ba:f9:cc:39:4b:68:1a:
                    02:23:03:a9:00:db:06:b7:a8:bd:e6:e3:86:39:aa:
                    a7:a9:77:b6:ca:b3:2d:bc:2b:a8:1e:7b:a9:06:84:
                    69:05:db:3c:2a:ec:01:9c:53:86:03:15:57:03:01:
                    ff:b4:d0:ba:cf:6a:45:d1:96:c2:b4:84:23:22:ae:
                    9d:10:23:21:41:b7:ce:1c:a8:2e:c7:97:48:20:49:
                    61:37:ff:50:b7:c4:95:6e:d8:ce:11:68:7f:57:1b:
                    42:02:ac:0c:10:3d:70:f7:e6:3d:35:c5:74:4b:99:
                    6e:5d:db:33:b8:87:77:8b:dd:1c:93:eb:60:bf:ba:
                    a1:cd:ff:fd:d4:b0:bb:63:7b:7b:cd:c5:95:d3:73:
                    f8:5e:25:68:2d:d1:82:a8:04:e9:9b:50:9a:f3:43:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C7:A0:F8:6D:14:E3:B0:7F:4C:12:B9:C7:17:30:27:BC:D4:D2:2F
            X509v3 Authority Key Identifier:
                keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:af:c2:5a:05:15:62:e7:6c:04:26:ca:54:36:02:ec:c4:
         9f:d8:49:71:87:34:6f:dc:d4:da:00:96:13:96:3c:24:a2:bd:
         dd:47:c6:7f:6d:06:3a:69:e8:f3:e1:82:15:4e:f6:f6:a8:64:
         4b:64:8f:3f:74:0c:dd:6f:16:cc:d4:75:25:cb:6c:47:24:11:
         87:0f:31:49:3c:c7:87:42:fe:5e:c0:e3:1b:00:cd:f3:8d:42:
         f1:aa:92:aa:4a:87:7e:4f:c2:79:47:b0:58:5c:f5:48:4b:c6:
         18:43:41:3e:b8:a3:46:40:4d:48:df:2d:8a:80:20:6a:17:b4:
         91:c1:72:cc:00:1b:ce:6a:6e:bd:27:0f:48:89:ce:8a:26:6d:
         9b:f7:cb:98:88:f8:88:2c:c6:b8:f3:c6:9f:60:d0:70:c4:96:
         02:b8:3f:74:70:d1:04:1c:3c:0f:56:de:49:16:9c:a1:ff:2f:
         39:ef:2b:e0:58:ec:3a:87:0f:a2:87:69:36:e8:70:e0:d9:f5:
         64:2a:e2:c8:cf:2a:ce:6c:4a:77:cf:a4:68:08:58:b0:b2:73:
         99:b4:64:87:eb:31:4f:a9:dc:2a:84:45:0a:2e:da:cc:3a:85:
         db:63:31:39:7b:e9:ce:aa:5a:00:75:a4:4e:6e:07:9c:f0:64:
         db:62:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:35 2025 by rpki-client