Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          Rm5SqIITwF1G00maHfT1J7/uqe2DCx9OQ0VaObNiFh8=
Subject key identifier:   B2:AB:F7:84:0A:49:47:CD:4F:AF:2D:D0:6D:00:67:D8:8F:6E:AF:6F
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       01988B0EEDFD8AC3D7E8C9DC33E024BFCDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 19:01:07 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:07 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:07 +0000
Files and hashes:         1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: Db4DQg7/GQxjyRJVGFoT8bI6Gt+IGOv4X15jK8Ffn9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:ed:fd:8a:c3:d7:e8:c9:dc:33:e0:24:bf:cd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: Aug  8 19:01:07 2025 GMT
            Not After : Aug  9 19:01:07 2025 GMT
        Subject: CN=b2abf7840a4947cd4faf2dd06d0067d88f6eaf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:89:e2:da:c8:af:8c:86:8e:ca:bf:16:22:
                    d2:3d:01:3c:5a:38:5a:9d:03:37:20:9f:80:f2:d1:
                    44:da:50:50:fb:d5:9d:86:88:d9:65:82:90:51:e2:
                    0d:11:76:38:5d:f0:63:86:39:f9:78:25:e8:4d:b0:
                    27:9b:76:4e:17:9e:27:d2:1d:e1:fb:46:6d:e9:f6:
                    b3:6b:d3:38:85:5a:7c:df:63:14:15:a4:bb:aa:e5:
                    de:21:ba:61:19:65:cd:34:81:5e:71:3a:c8:d8:8b:
                    b0:c8:75:a0:e9:68:ff:fc:9d:41:62:2d:ec:95:58:
                    ca:f1:6a:ca:ce:15:49:16:10:ac:1a:13:90:05:e4:
                    5a:aa:d3:9a:7c:4d:67:af:f1:d4:d7:91:4b:4a:f0:
                    80:c8:25:c3:51:2a:a1:fa:82:84:e7:f1:c4:04:8e:
                    6d:95:48:36:69:60:c9:12:fc:26:b2:7a:19:8a:07:
                    4a:65:e1:a6:5b:1a:df:52:85:9b:ec:27:7e:45:94:
                    8d:de:ef:f6:d7:81:74:41:cd:73:2a:dd:d4:0d:43:
                    1e:1b:16:aa:03:91:25:39:ec:16:82:e3:29:19:67:
                    2a:65:68:3c:b8:64:2d:3c:15:0e:f8:74:0a:4e:2a:
                    ab:7a:49:cc:48:2e:7e:db:b7:19:a8:e0:8f:0f:dd:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AB:F7:84:0A:49:47:CD:4F:AF:2D:D0:6D:00:67:D8:8F:6E:AF:6F
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:6d:9a:c0:6b:cf:1c:d7:8e:7e:8d:f7:a3:ca:54:3c:a1:
         8d:b1:79:05:5d:68:7a:54:3e:06:7a:55:41:02:10:12:ae:e4:
         6d:02:b3:58:b8:58:4d:8e:ca:aa:1b:36:7b:47:c2:4f:0d:df:
         7c:c8:62:c9:78:87:ad:53:03:06:28:75:b6:fb:6c:4b:e9:dc:
         4f:c8:28:4c:85:fb:08:c2:92:fb:3f:57:5e:2a:04:22:50:0d:
         5f:6f:a7:b6:6e:58:89:68:b9:1c:df:c8:6a:f4:82:e8:bd:37:
         7f:0a:4e:a6:e7:1b:eb:ad:dc:09:69:a1:00:60:44:54:56:4a:
         1c:37:db:5f:d8:62:7f:4d:8f:d8:59:e3:2a:c1:8e:67:19:c1:
         8c:67:ab:08:66:85:9d:90:a3:09:5b:e0:62:f5:af:37:b2:7b:
         07:72:e8:93:bc:4e:3c:74:85:91:04:7f:d7:58:1a:24:50:ff:
         c0:cf:be:f1:3f:37:9b:20:57:de:f9:d8:d9:e1:c5:e7:6d:0a:
         3a:31:de:a4:45:c9:d4:18:74:73:52:1c:55:8a:76:00:b0:b8:
         20:98:cb:49:d8:f1:2f:e7:61:5f:e6:76:19:12:e7:1a:99:24:
         8d:a1:5f:bb:6e:73:c9:01:16:cd:d4:df:7f:5d:90:a2:39:2f:
         c9:ad:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:58 2025 by rpki-client