Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          bmRwNH0oghwpApJGavDQG/vI65xIcf0x30iVmcdPxmQ=
Subject key identifier:   C9:9F:EE:35:B6:90:C6:4E:69:70:A6:D7:FA:0E:75:8C:F1:F9:E1:92
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       0198820C037E4555E751409B365AD97B79B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          0ECB
Signing time:             Thu 07 Aug 2025 01:01:21 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:21 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:21 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: wBSSQU10jhTKLQJTwGaXFkjWg9Wzh3ru73arKLbb4rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:03:7e:45:55:e7:51:40:9b:36:5a:d9:7b:79:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Aug  7 01:01:21 2025 GMT
            Not After : Aug  8 01:01:21 2025 GMT
        Subject: CN=c99fee35b690c64e6970a6d7fa0e758cf1f9e192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:0a:9f:0d:09:27:93:db:8e:49:22:0b:ee:
                    2d:82:4c:22:e1:63:39:f4:6c:a0:2d:59:f6:0e:75:
                    a8:9f:8b:4b:56:b8:10:2d:91:78:92:27:16:01:ac:
                    90:87:31:a0:87:19:46:30:87:57:37:07:0a:57:dc:
                    17:e1:f0:8e:08:67:3d:e0:47:9e:a3:bf:58:53:4e:
                    5e:c1:68:16:e0:a0:f7:69:a9:34:c8:5f:f2:b0:04:
                    9d:33:ad:27:d8:b3:74:26:87:c6:d5:f1:84:1f:82:
                    39:da:1d:29:36:a5:45:19:32:0e:c6:91:b5:ba:6c:
                    24:bc:51:e7:fa:9e:5d:fd:d3:0e:c4:26:24:62:ec:
                    70:b5:0d:35:f6:54:eb:cc:c9:66:f6:88:be:fd:74:
                    cb:0b:92:d4:71:57:ea:f6:71:c7:1a:06:cd:c4:14:
                    0d:04:9f:75:4e:09:c7:c7:9b:27:9c:55:85:71:85:
                    83:da:cc:9d:84:9e:12:d4:1b:02:3e:bd:ae:65:80:
                    45:00:f6:dd:97:4e:3b:5e:7f:7a:84:bc:e6:12:e2:
                    46:24:a2:ab:a4:aa:61:75:a2:44:2e:27:00:75:e6:
                    52:ab:e5:db:27:7f:a4:60:1c:a3:f1:b4:27:bd:e3:
                    81:33:61:89:cc:6c:b6:5b:65:f1:ef:b1:87:a9:2e:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:EE:35:B6:90:C6:4E:69:70:A6:D7:FA:0E:75:8C:F1:F9:E1:92
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a2:d3:c7:ab:34:40:60:68:83:3b:03:c2:4b:da:0f:ac:87:
         3d:68:bd:8f:60:26:e0:9a:9c:ee:82:e9:71:c6:b3:86:73:51:
         96:33:8b:fc:79:02:b9:fb:56:88:c3:a2:21:2d:11:bd:ca:48:
         4b:84:8c:e6:0f:b6:fe:b8:6d:65:e3:15:34:2c:36:fa:f6:c1:
         62:e1:c6:53:a9:9d:b6:eb:56:f8:58:61:16:d3:3e:a3:84:59:
         b0:cd:a8:bf:de:55:07:a9:1d:d3:e1:b5:fc:0a:8d:5c:21:b2:
         ab:be:c5:e4:47:ae:1c:84:ac:61:09:2f:ea:50:f4:2b:7a:40:
         b9:0d:94:de:ec:84:ea:f3:62:19:7f:1c:c2:2e:38:99:be:97:
         47:1a:ff:21:34:2c:3b:78:04:e2:9f:da:b4:c9:b1:3b:ba:80:
         bc:84:45:20:47:57:6f:50:94:11:76:22:57:0f:ec:c8:5b:8e:
         46:4f:9f:20:34:82:35:f2:73:10:df:da:2e:b8:19:aa:78:77:
         da:8e:37:a5:61:04:64:dd:30:d2:d4:65:e3:ba:68:eb:29:31:
         83:cf:00:0c:a1:a8:81:00:d7:bd:18:77:95:55:3d:26:91:87:
         e0:6a:fd:8f:dc:2a:01:c6:df:f1:66:43:b1:df:00:26:dc:2c:
         ca:66:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:28 2025 by rpki-client