Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File:                     oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier:          dlfxXfT1doLXee4nvgbhQcYTm5flBzYelZGa0oUussA=
Subject key identifier:   81:BE:43:6E:B5:19:3F:08:82:CA:30:94:2F:C5:CC:8C:22:D6:8F:B9
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer:       /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial:       019872D00675DAD52177E1401AB058E9F1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number:          0D03
Signing time:             Mon 04 Aug 2025 02:01:32 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:32 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:32 +0000
Files and hashes:         1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: ZaSNc+KStrueDyFkCJzfJjurt53nF4VQeMSXeMWOQF0=)
                          2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:06:75:da:d5:21:77:e1:40:1a:b0:58:e9:f1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
        Validity
            Not Before: Aug  4 02:01:32 2025 GMT
            Not After : Aug  5 02:01:32 2025 GMT
        Subject: CN=81be436eb5193f0882ca30942fc5cc8c22d68fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:fd:98:f1:74:27:ad:1c:53:a3:bd:80:52:
                    3d:2d:56:e9:39:87:8c:e3:0a:b8:be:45:04:36:33:
                    6b:0a:c6:d1:fb:33:cc:cd:f1:71:4a:c8:8c:5a:f7:
                    f7:09:48:02:81:30:03:30:d8:b1:7e:d2:60:6b:5c:
                    78:b0:43:44:e5:14:8c:1c:b6:6d:a6:41:7c:89:25:
                    c5:90:19:d7:5c:e1:a1:4c:f1:83:1a:b5:ec:20:f8:
                    43:39:88:af:cf:fa:6a:03:c7:50:24:4f:8b:0e:fe:
                    1e:8b:85:b4:28:e1:98:c3:01:3e:82:cc:6b:fe:36:
                    c4:dc:9e:9b:12:4f:5b:0c:29:d4:52:a8:bd:20:f6:
                    70:d3:1b:4c:a6:39:29:4a:32:36:d3:7b:de:9a:19:
                    13:04:35:38:75:b5:95:c8:3e:29:8c:26:cb:ad:de:
                    8b:d2:49:71:1c:9a:25:90:a4:4a:b2:00:46:b1:3a:
                    99:cf:bd:98:1b:54:a2:58:d5:da:35:87:5b:ae:22:
                    f8:da:9a:f2:e9:22:25:f0:42:11:c1:80:37:db:bd:
                    54:95:76:c9:04:08:8d:92:47:80:65:3b:b8:a7:7b:
                    46:8e:3f:af:b0:b1:98:b6:12:9e:26:7d:2c:79:da:
                    4f:08:48:81:37:f4:95:f7:19:fd:4b:74:44:4b:94:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BE:43:6E:B5:19:3F:08:82:CA:30:94:2F:C5:CC:8C:22:D6:8F:B9
            X509v3 Authority Key Identifier:
                keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:65:43:49:8d:9a:f5:cd:71:11:fe:a9:bf:c2:0f:21:ff:
         52:90:2f:5f:e7:2d:25:a9:20:45:86:e7:53:e6:55:16:0f:fa:
         4e:1a:14:cc:e3:50:8d:ee:c1:6d:90:86:d7:b1:51:16:79:35:
         0f:c5:eb:b6:5e:f5:ee:48:9c:d2:0c:8a:3e:83:9d:17:b8:6a:
         61:5c:09:ba:f9:3b:ff:ee:62:29:9b:08:e4:61:c5:2d:5f:32:
         c6:10:47:64:ca:e2:70:62:1c:75:84:7d:59:15:b7:f1:43:b1:
         ed:1e:d0:87:84:7c:e5:e6:a9:9f:12:9d:4b:9a:ca:c5:82:ab:
         a8:59:80:76:0d:ef:92:ec:4a:fd:48:f4:af:41:cc:58:5e:9a:
         1f:bd:f8:37:1f:8b:3d:ce:63:a7:0d:7d:9d:a1:0a:7c:3a:91:
         a0:b9:05:83:94:1b:04:19:69:33:da:af:98:f5:47:6a:fa:15:
         04:35:07:6d:5f:a4:7e:1f:ed:6f:62:1d:25:97:7c:8c:63:43:
         b6:5f:e9:98:23:0e:40:f5:80:ae:1a:6b:f7:36:00:56:04:3a:
         7f:c0:c0:96:c5:a6:8b:f4:13:8b:d7:7c:9c:95:1c:c4:ed:29:
         2d:88:58:85:85:96:db:a0:ad:46:da:85:13:d9:8b:d3:3c:f9:
         97:f3:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:25 2025 by rpki-client