Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File:                     o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier:          IVIpU3v9Yunc2TmA6tXoULPwV/Gb56DONLXznx3lfFQ=
Subject key identifier:   62:79:3F:52:4C:9B:1B:E9:A6:2F:9B:EA:30:FE:F6:AB:4B:FC:36:0C
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer:       /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial:       01988A32DF83B6CDED207339F697455A9E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number:          0FA1
Signing time:             Fri 08 Aug 2025 15:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 15:00:46 +0000
Manifest next update:     Sat 09 Aug 2025 15:00:46 +0000
Files and hashes:         1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
                          2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: jeEQqBVfIxCVZFYrZyKM0DyqkD0YYEjcr0rAqwRmNrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:32:df:83:b6:cd:ed:20:73:39:f6:97:45:5a:9e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
        Validity
            Not Before: Aug  8 15:00:46 2025 GMT
            Not After : Aug  9 15:00:46 2025 GMT
        Subject: CN=62793f524c9b1be9a62f9bea30fef6ab4bfc360c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:58:96:b5:01:ea:9e:50:db:65:29:79:bd:
                    1a:cd:be:a5:ef:29:4a:88:7a:ad:fb:fa:e1:c7:e1:
                    32:fa:20:11:3d:38:0d:ce:63:d1:3a:32:a0:55:60:
                    06:6e:00:19:3c:19:c0:da:ef:05:ab:e2:20:b8:bf:
                    2c:3f:84:77:e4:d2:81:50:99:74:50:14:57:4b:67:
                    96:5e:d9:66:fe:f9:df:86:ad:d0:45:88:e4:58:d8:
                    f7:75:32:9a:f4:27:e8:dc:46:df:f4:d3:8b:ef:df:
                    46:9a:08:c3:f0:64:cd:22:b6:45:2c:25:b0:f5:1a:
                    c3:c1:cc:a4:2f:a4:7c:2a:da:6f:f2:d4:a8:54:0b:
                    c5:01:fc:1f:f6:1e:26:76:37:58:df:98:a0:1d:69:
                    bd:9f:19:7c:45:7a:5c:23:55:52:18:e8:0e:e0:61:
                    1b:24:bd:85:f9:6b:6b:a1:f4:4a:55:eb:f7:23:73:
                    91:02:83:47:7c:1d:a2:53:7d:2b:01:66:f9:4a:4a:
                    32:a7:62:f5:3c:54:fe:d1:d5:cf:d2:9b:bf:c8:70:
                    e6:a8:3e:97:fa:be:e4:f9:e9:d3:36:47:2a:52:b6:
                    2e:aa:60:67:71:12:73:c3:56:9f:e6:e2:0e:aa:cf:
                    84:5c:3b:83:7c:35:bf:98:84:41:14:55:75:0b:52:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:3F:52:4C:9B:1B:E9:A6:2F:9B:EA:30:FE:F6:AB:4B:FC:36:0C
            X509v3 Authority Key Identifier:
                keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:58:8f:63:03:96:7a:96:7a:5c:19:0d:68:11:a3:74:e9:a0:
         8f:85:01:29:1f:46:5c:33:e6:58:b2:da:9b:d5:df:ac:40:94:
         05:ae:91:17:d5:fa:92:06:27:6e:d7:69:43:6a:bd:e1:40:60:
         ee:a2:8e:a8:9d:8c:5b:38:94:a6:e0:ed:49:06:6f:85:f4:e8:
         6e:42:63:ea:c1:ee:8a:d4:a7:82:cd:65:40:5b:8c:4e:9d:56:
         64:16:e2:cf:3f:8f:5d:6f:06:c5:64:f6:c2:62:3d:ae:67:34:
         a8:a3:60:2c:24:28:47:da:dd:f1:c9:6c:d8:7a:61:14:5b:eb:
         ec:06:fb:2a:ef:9e:12:3c:6b:df:91:a3:06:ba:e8:96:9d:26:
         db:4d:00:67:e2:f2:22:36:eb:0a:d0:6c:01:36:2e:1e:52:52:
         80:a7:f8:af:9a:75:93:a3:e5:9c:70:52:d4:4c:2c:c5:71:f5:
         46:99:c7:2e:20:ef:56:9a:e4:73:b3:aa:86:be:f3:88:91:cf:
         b2:c2:c0:d4:a9:e3:e8:e5:af:72:4a:ee:19:a5:c3:5e:a8:7e:
         93:ec:e1:12:ee:a3:68:f2:e6:24:9f:49:b8:0d:1f:2d:93:ef:
         6c:10:70:50:01:a1:06:51:04:f2:1d:6e:a9:06:1c:d3:2c:d9:
         6c:6f:8b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:13 2025 by rpki-client