Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File:                     O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier:          jbq7nh3Lz7ad+wKYBmjsJzWOAJSe63C42REjPE2ecWc=
Subject key identifier:   27:1E:62:D6:6B:B6:43:58:1B:AE:8A:80:FC:95:11:1E:AB:43:05:43
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       01976FD10A684EED0ADCBB51905C054EAC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number:          0A8A
Signing time:             Sat 14 Jun 2025 19:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:59 +0000
Files and hashes:         1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
                          2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: FUIDVXkKTGaFcOGYOGXMKIyAsIwOVJ2Ol5Fd6GVr2O8=)
                          3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
                          4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:0a:68:4e:ed:0a:dc:bb:51:90:5c:05:4e:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Jun 14 19:00:59 2025 GMT
            Not After : Jun 15 19:00:59 2025 GMT
        Subject: CN=271e62d66bb643581bae8a80fc95111eab430543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:9a:be:50:1f:19:5b:22:68:ef:91:62:ce:
                    3b:eb:33:9b:32:d3:75:1c:df:9a:73:da:0a:7f:a3:
                    29:a5:08:e4:9a:06:54:5c:77:f3:e2:a0:a9:1f:b4:
                    8b:d5:98:2f:86:cb:36:80:a9:48:ea:e8:f5:59:6f:
                    a4:50:a9:5d:81:40:48:03:42:d0:1f:54:ce:09:c3:
                    6e:00:47:7e:b7:01:60:e4:02:80:72:30:5c:23:6f:
                    e8:0c:f8:22:0b:a7:a1:50:00:bb:d9:87:9d:83:94:
                    57:40:01:0e:58:0c:7c:23:43:e3:3f:d8:e4:1b:77:
                    e8:5d:2b:57:5a:9d:11:8a:54:b7:76:3d:b0:da:d2:
                    57:f1:fc:13:c7:d2:d0:0a:43:ec:8e:16:18:68:93:
                    be:4f:39:11:fe:2e:e4:50:c3:b1:16:95:b7:95:ee:
                    3f:74:7a:a7:ed:55:f4:78:20:e6:93:88:55:41:bd:
                    1b:aa:36:23:d7:f4:50:11:ed:16:f4:aa:86:c8:ba:
                    fc:80:f8:8e:f9:25:db:ec:ed:84:47:37:6d:9e:c7:
                    12:aa:71:43:47:d1:a3:45:5d:0f:94:a3:85:33:5f:
                    a3:18:8c:c1:09:5e:92:40:79:86:bd:ec:38:e3:f0:
                    14:60:aa:1e:3b:92:93:30:16:89:e7:d3:42:aa:1b:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1E:62:D6:6B:B6:43:58:1B:AE:8A:80:FC:95:11:1E:AB:43:05:43
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d1:35:f8:98:f3:cc:2c:40:a2:44:34:36:1d:20:2f:8d:5b:
         e5:52:74:6e:5c:36:86:ca:43:be:bc:7a:30:05:02:a7:22:3a:
         04:2d:09:c0:ec:29:70:9f:5c:65:80:fa:d3:30:5a:ab:eb:d0:
         95:39:e1:b7:46:c2:9d:61:2f:bc:97:1b:ec:ee:96:ca:23:4f:
         63:e5:7c:d9:9d:bb:27:01:74:9f:65:9a:3c:89:26:e2:95:72:
         4b:76:1e:42:0d:76:94:ce:5f:2c:07:01:c1:03:61:6d:e4:1a:
         4a:9e:fc:e4:a6:e4:d5:b9:2f:0c:2b:41:ca:55:7c:25:cc:80:
         e3:fd:bc:7a:8a:25:f6:d6:3b:bb:96:c4:85:4d:69:b0:d1:8b:
         07:84:75:9b:d5:96:7e:b1:91:6b:65:25:15:04:a9:41:da:57:
         9e:22:c8:57:a7:2f:ca:54:2b:6c:09:cf:81:75:bc:fe:9f:06:
         b4:56:fe:9c:3d:3b:3b:22:a1:6a:c2:f5:a1:39:13:a7:cc:cf:
         26:ed:42:16:5e:a4:39:bb:41:45:80:26:9b:d8:dc:2d:e2:ca:
         7e:5e:d3:b0:55:c6:9b:ec:86:d8:bc:88:9c:5c:7c:24:15:a2:
         92:b3:e7:4e:65:2f:62:e7:50:9b:90:93:15:10:0b:84:27:66:
         5a:da:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:40:55 2025 by rpki-client