Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File:                     0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier:          qDky2AejUYOH2kj6ul5enGy/rX+Q+pTPC4S+VP3E6pQ=
Subject key identifier:   2A:63:E9:3A:46:BE:FF:F2:D6:36:51:B2:DC:39:3C:0C:AC:0F:1D:70
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer:       /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial:       01988B0F50261E77221DB59F8A226EC0374D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number:          12BB
Signing time:             Fri 08 Aug 2025 19:01:33 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:33 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:33 +0000
Files and hashes:         1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: dv9LjrMMLhtWNSNFdAp/pQeTbsqCyvE+qWkKVdw7Omk=)
                          2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
                          3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:50:26:1e:77:22:1d:b5:9f:8a:22:6e:c0:37:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
        Validity
            Not Before: Aug  8 19:01:33 2025 GMT
            Not After : Aug  9 19:01:33 2025 GMT
        Subject: CN=2a63e93a46befff2d63651b2dc393c0cac0f1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:5b:c0:6f:f0:16:9a:ab:9a:d1:97:26:ce:
                    de:c5:4f:37:f6:82:ff:ae:7d:d7:ef:d6:57:db:2a:
                    e7:cb:5b:9c:c4:6a:d9:48:b3:b5:35:0d:f2:63:88:
                    59:08:af:00:17:07:9c:b2:85:dd:da:a1:e7:d6:69:
                    0d:cd:7c:53:ce:f4:57:f3:db:90:54:17:2d:33:e4:
                    1f:15:3e:a7:e4:f3:06:e4:3f:71:dc:38:0f:05:24:
                    e8:fe:7c:95:e7:bf:7c:97:54:b6:04:52:0f:f3:18:
                    3e:b1:10:17:d2:27:ba:41:b1:d9:60:56:f3:db:cf:
                    07:95:4f:1e:8d:c6:15:56:99:24:92:2d:7c:18:cc:
                    2a:99:22:0b:21:1e:5d:c8:dd:89:ca:cc:4d:39:4c:
                    72:d0:9b:df:49:66:52:42:8e:af:6a:07:a8:58:42:
                    a6:97:d4:59:b9:35:cf:c7:f5:9f:ea:c3:5d:af:40:
                    b4:ec:00:63:85:84:69:83:3e:2f:fa:59:72:7e:32:
                    69:6f:9a:75:f0:1c:c9:e7:a2:88:7f:8f:56:05:a9:
                    eb:56:fd:43:7c:e7:b0:c8:dc:a2:b6:c3:ee:13:32:
                    75:15:29:87:b2:c2:42:32:61:2a:a0:98:41:22:4a:
                    ad:8f:a5:ea:e0:1f:ba:e8:8e:db:7c:e4:5f:97:89:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:63:E9:3A:46:BE:FF:F2:D6:36:51:B2:DC:39:3C:0C:AC:0F:1D:70
            X509v3 Authority Key Identifier:
                keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:b8:37:76:37:ee:d9:ba:5f:61:e1:7b:43:9a:22:3f:f9:
         05:58:c7:fe:52:06:6e:d5:78:4d:1a:40:da:a8:47:28:2a:ba:
         01:72:4d:fd:63:65:b1:d7:df:b3:ef:1c:4b:1e:74:22:e4:da:
         ed:78:8f:25:ff:a0:9d:61:e8:ed:d0:86:54:01:fa:0b:11:1e:
         8b:0e:d0:a8:42:84:fa:d8:a9:2f:0a:85:c1:3c:d4:55:c8:af:
         e4:03:f2:70:ef:20:bf:ee:70:27:2a:25:c4:4c:ef:7c:2c:16:
         b5:ba:7f:d9:88:dc:d0:07:f5:ba:06:8a:08:3b:2c:cc:2a:9d:
         0e:19:83:a7:cd:f3:03:78:dd:56:2c:04:4c:f0:71:b4:18:22:
         f5:ac:0f:db:dc:a7:63:e0:5d:76:41:15:f0:3d:14:c6:55:85:
         30:42:69:a8:ca:90:72:21:64:05:61:36:87:78:f0:67:cf:1a:
         55:e3:3d:9e:00:1e:ad:2b:70:dd:7c:c8:3e:ec:51:1f:9d:38:
         63:94:61:53:4c:d0:fd:e6:04:8d:e6:55:35:86:c3:46:7c:00:
         a8:75:e5:2c:27:bd:e0:3a:4b:d3:4b:c3:71:58:f9:10:42:29:
         9e:eb:31:10:77:d4:8f:de:69:ab:9e:15:a1:12:15:25:64:06:
         8e:8e:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:48 2025 by rpki-client