Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File:                     O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier:          /zqO6AfaoAJTrfFiwMyPS1XeYG+za4yhX/B8kvPHmD8=
Subject key identifier:   C8:A6:57:01:E2:B2:09:8B:7B:2E:9B:B8:4B:34:36:CB:75:BE:CF:74
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       0198808B1B52374C4421C24D3C197BB77D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number:          0DE3
Signing time:             Wed 06 Aug 2025 18:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:56 +0000
Files and hashes:         1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: S2TQAU2A932IHcfczk3gO2vXBbabvZUi2OLm2oKL0kg=)
                          2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:1b:52:37:4c:44:21:c2:4d:3c:19:7b:b7:7d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Aug  6 18:00:56 2025 GMT
            Not After : Aug  7 18:00:56 2025 GMT
        Subject: CN=c8a65701e2b2098b7b2e9bb84b3436cb75becf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:63:6c:cd:8e:b6:73:cc:95:e0:2d:14:6a:
                    67:4f:3f:d0:e9:ae:9f:82:3e:0e:9b:2f:9b:a8:bc:
                    cc:bd:cc:a4:c7:ac:ce:88:8f:c7:9d:aa:cc:3d:c2:
                    4e:95:53:11:5e:9d:dd:1b:74:1b:34:8f:4c:4c:6e:
                    36:58:0f:07:82:70:f4:26:46:d7:d5:59:2f:72:9d:
                    bb:85:9a:1f:d9:26:36:49:fb:b0:d4:83:a8:0a:9b:
                    26:0b:5e:5b:48:a8:72:ba:9f:c1:aa:43:d9:07:65:
                    57:7e:d9:2c:64:9e:09:6d:e8:82:fb:a8:c9:e3:f3:
                    24:b5:92:3b:f5:95:ec:de:60:48:c5:9a:22:22:71:
                    4a:bc:a9:bd:b5:f5:43:c4:7c:28:5c:82:a8:c8:cf:
                    9f:55:c4:24:11:09:9b:25:88:e0:51:2e:76:9f:b3:
                    f7:2e:e0:be:01:9f:08:79:02:5f:92:a4:ba:e3:be:
                    f0:fc:98:35:a9:b5:ec:f3:25:c0:4b:09:be:65:3e:
                    37:78:40:12:ea:2c:2c:ee:90:fb:8b:ee:50:2e:7a:
                    75:fe:43:53:e4:61:0e:20:cf:df:2b:a9:f2:37:14:
                    c6:f1:8f:90:6d:74:4e:7f:06:da:a0:37:4e:97:ee:
                    f2:c1:fb:9a:16:54:bb:68:4f:7f:59:e4:3c:cb:15:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:57:01:E2:B2:09:8B:7B:2E:9B:B8:4B:34:36:CB:75:BE:CF:74
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:06:fe:2c:cd:2c:36:e8:bd:46:3c:78:25:1f:4c:5c:74:
         7c:ab:9c:f0:3a:1e:fe:fa:f3:9a:34:be:5f:72:d4:0a:30:30:
         db:2d:40:7c:12:75:1f:8c:ae:a2:20:f5:d8:58:79:c8:53:83:
         74:8b:f2:3f:7a:c1:0e:89:e3:85:1d:ba:2e:8e:9e:ad:b2:bf:
         0e:b5:f2:b2:dc:8d:62:ee:5e:a6:46:9f:dd:69:be:c7:72:63:
         1b:27:31:5d:3b:e9:f6:42:fc:a1:73:35:77:ca:eb:ae:2d:dc:
         2b:54:ee:8d:72:2b:57:12:c9:37:50:fb:8a:fb:c7:0d:bb:24:
         7b:cf:fb:3c:ed:dd:14:ce:1e:3e:0c:ac:52:c8:11:16:d0:28:
         10:f9:08:f2:67:4a:9e:f7:b9:bf:54:07:05:45:bf:13:23:b7:
         fe:c4:7b:11:0f:38:bc:04:57:e8:cf:6c:c3:b6:07:20:1e:84:
         6b:17:e6:ed:90:ec:9f:9f:97:e3:61:e1:44:6c:62:e4:3c:67:
         ab:0e:7a:dc:72:a4:b2:a2:78:e7:02:ad:b1:38:46:b0:cc:40:
         18:ef:28:8e:79:c7:2a:5c:a7:dd:03:87:fe:71:d6:25:3c:d1:
         8f:b4:80:c1:bf:93:63:7e:27:8b:67:2c:53:16:87:10:f0:72:
         e7:04:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:11 2025 by rpki-client