Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File:                     O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier:          9S+34SedZSXGUtxbCrJZri1YFdWv4xUbQIRXls8Wmdc=
Subject key identifier:   E0:04:35:BC:08:B5:D5:95:7B:D3:80:D3:FF:B3:20:11:7F:19:9F:3D
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer:       /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial:       019770AC66AD28DCC70C46253512131B6871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number:          0990
Signing time:             Sat 14 Jun 2025 23:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:36 +0000
Files and hashes:         1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: +SGbW6L4Z/jE9g7fIIO40KzP0KxSX01qnDJx7FX4hHE=)
                          2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:66:ad:28:dc:c7:0c:46:25:35:12:13:1b:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
        Validity
            Not Before: Jun 14 23:00:36 2025 GMT
            Not After : Jun 15 23:00:36 2025 GMT
        Subject: CN=e00435bc08b5d5957bd380d3ffb320117f199f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f8:e7:8b:7f:a3:00:3d:6f:ef:f2:07:1e:db:
                    21:f2:a2:d8:c5:50:30:64:b6:a8:02:20:72:79:7b:
                    c2:4e:3d:a5:e7:21:cf:a2:f0:e1:04:07:85:16:71:
                    8e:3c:f2:de:01:22:c4:25:7e:ee:c1:94:6e:4a:1a:
                    86:a1:66:6e:c2:2f:05:44:40:da:7d:fc:66:79:c7:
                    b0:23:0c:c5:af:06:13:d2:19:4d:fe:b3:84:91:7e:
                    b2:a0:72:29:ad:4c:90:0f:ee:0d:37:8f:e8:ac:29:
                    94:35:20:62:d7:02:fe:f2:f8:cd:59:e1:74:37:44:
                    ed:41:79:a2:04:c5:c5:cb:03:85:8a:94:ff:ed:0d:
                    98:90:2b:c7:71:61:32:1e:c4:6f:ec:f1:ae:3a:90:
                    14:9e:2b:7d:40:2c:7b:2d:17:9b:2a:7c:1b:89:2e:
                    6d:40:c4:69:21:e4:6f:4e:74:8c:80:ca:ff:8b:9b:
                    ec:cd:b5:78:5a:67:fd:6d:a8:bd:5e:12:4a:31:fd:
                    37:5d:0d:69:63:f5:1f:70:5e:01:f8:e5:ed:f1:51:
                    fd:c0:db:ef:49:e2:36:5e:6a:3f:ba:44:5d:ac:e3:
                    d1:69:71:9b:1d:43:02:d4:23:07:8b:de:b8:53:71:
                    82:3e:52:04:6c:74:1b:64:80:c7:42:3e:b4:2e:2f:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:35:BC:08:B5:D5:95:7B:D3:80:D3:FF:B3:20:11:7F:19:9F:3D
            X509v3 Authority Key Identifier:
                keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:e6:a0:77:c8:c5:d8:0d:73:62:ea:46:68:c6:23:b7:eb:
         41:39:54:c6:20:21:14:7b:7f:f9:39:79:27:fa:02:88:4a:3e:
         3d:36:ae:a1:b9:e9:f1:65:28:9b:10:42:1d:ba:cf:a0:60:a9:
         7b:b4:ae:a5:2c:16:28:3d:2d:d4:e3:ae:02:64:c7:e3:23:41:
         43:b6:18:2f:f9:cf:3e:d4:b2:ed:15:d4:db:db:6b:bc:2a:4b:
         7c:89:2b:5a:fd:ea:f3:a1:87:8d:73:2b:d8:b4:f6:66:2d:19:
         28:06:91:8e:16:c2:4d:3e:b4:d8:7c:14:11:88:75:ad:95:11:
         15:a0:45:0f:b9:ba:d2:8a:6d:53:05:6e:41:15:f0:01:8d:93:
         ee:1b:d7:d5:59:51:64:41:78:0c:ff:83:7a:c7:d0:19:41:1b:
         84:95:18:c0:d4:95:d6:1c:89:dd:a6:62:4d:bf:82:4b:d9:67:
         61:08:d3:10:c3:da:9b:c0:0c:c2:3f:2f:cf:46:43:27:ed:a1:
         d7:2d:c4:5f:57:f8:23:d7:53:2b:a5:a2:11:2a:da:ce:7f:58:
         c4:73:52:37:fa:10:03:25:ee:42:1c:80:bc:19:e7:e4:f7:78:
         3c:e7:e5:32:d5:e0:0c:db:7e:22:83:cb:12:bc:06:15:2c:76:
         1e:eb:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:35 2025 by rpki-client