Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File:                     oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier:          L0PvZNVYm5mgzcWmSFD6kMbeZ793WzS1PXVMC+RSqA4=
Subject key identifier:   A2:EF:51:4A:1D:2A:AC:DA:35:87:7E:D6:C9:E9:E1:65:0D:4F:57:28
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer:       /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial:       01988B458EA71838BB740523F4005B0EB99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number:          135D
Signing time:             Fri 08 Aug 2025 20:00:48 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:48 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:48 +0000
Files and hashes:         1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
                          2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: AWQ2iZiQCYFU9sM7K3JvTmmurdJxCyokkvfI3zM2rC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:8e:a7:18:38:bb:74:05:23:f4:00:5b:0e:b9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
        Validity
            Not Before: Aug  8 20:00:48 2025 GMT
            Not After : Aug  9 20:00:48 2025 GMT
        Subject: CN=a2ef514a1d2aacda35877ed6c9e9e1650d4f5728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:44:a7:0e:5f:25:61:5a:ef:93:3a:54:7c:
                    b1:6d:42:d5:d3:25:b7:ca:b7:44:a1:f1:db:2d:5f:
                    d3:38:03:ee:3b:55:96:89:5e:2c:7e:d7:61:5f:01:
                    09:b3:e4:bf:9c:7e:41:5f:b6:fb:45:fa:74:cf:07:
                    e3:1d:f0:16:b7:68:d5:b6:63:51:62:51:a7:0f:c7:
                    4f:77:ba:c5:28:c4:ce:5f:a7:3a:af:bd:8b:83:a1:
                    c4:c6:69:1f:23:2b:cb:bb:8f:55:33:84:b9:1b:b9:
                    51:8a:c6:41:38:f3:dd:a3:a7:22:f8:d9:db:a0:45:
                    a5:10:b7:2d:c9:21:dd:dd:1a:4a:63:10:25:cf:d7:
                    1d:3c:a4:cc:d8:93:c2:b0:da:15:42:31:70:99:23:
                    85:4a:e9:7d:fd:d0:eb:5b:0c:c4:8f:0b:90:cb:7f:
                    40:4d:e3:b5:99:5b:ac:aa:ed:c6:f8:c8:a3:34:e2:
                    61:94:16:fc:18:b9:34:87:d9:49:c4:ba:64:a1:2a:
                    44:61:a9:6c:be:e0:bb:7c:18:13:ff:b6:4e:65:e3:
                    8a:13:d8:d5:df:27:24:c1:65:75:14:e9:44:0e:af:
                    a5:7c:bb:02:9d:1d:1f:d6:b3:cd:40:82:ee:46:55:
                    70:76:9a:2e:70:4b:7d:ce:2d:85:f7:ce:4c:e2:a2:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:51:4A:1D:2A:AC:DA:35:87:7E:D6:C9:E9:E1:65:0D:4F:57:28
            X509v3 Authority Key Identifier:
                keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:86:7b:7e:74:24:48:81:bd:ad:b6:7a:b2:7d:2e:7d:bd:
         44:85:2c:90:2a:9a:2e:0e:c5:97:d9:37:51:11:d7:14:9a:1c:
         e7:dc:e1:60:bf:53:73:d8:53:39:c3:4d:3d:f3:d5:99:4d:4d:
         f1:25:8a:73:6c:a1:fd:e3:c7:ad:f8:5a:fa:e1:4a:ca:a6:99:
         54:c9:8d:24:fc:85:63:07:0a:4a:ca:b9:b7:21:18:df:1c:7a:
         9c:dc:9f:41:cb:ba:c3:60:6c:fd:39:31:a7:71:f6:de:bb:1b:
         e3:0c:c9:16:40:c9:96:db:13:35:a6:fa:df:49:2b:11:0c:6a:
         44:07:8b:48:d5:29:32:2a:07:0b:bc:1a:9b:98:32:7f:c9:ef:
         47:9c:03:05:29:05:db:0c:86:aa:f6:d9:12:a1:cf:5f:51:4e:
         4b:45:ce:bb:c7:16:f2:21:fd:79:66:39:73:98:a3:79:fd:fc:
         7f:36:79:d7:bc:5b:6e:ad:9a:03:12:dd:c6:a6:62:03:0f:75:
         0b:1e:90:46:27:c0:42:a5:86:19:4c:9a:79:55:ff:d4:05:52:
         c0:0a:9b:67:93:2d:c9:d0:d7:31:f6:f2:d0:de:09:df:e5:71:
         7d:00:20:73:fd:7a:e0:aa:3e:2a:d7:a5:fd:82:0c:4d:50:41:
         0b:b8:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:52 2025 by rpki-client