Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          531ZTnLGEAmSQV44m6KsrFMpnSosJnfXiQ9Daaf1x0s=
Subject key identifier:   FD:12:21:C8:65:86:C0:79:FD:80:52:4E:F4:AD:4B:C8:4D:A0:1E:44
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019873E20076597B858FAB86C0C3A9971BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0693
Signing time:             Mon 04 Aug 2025 07:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:47 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: o/roTYYvumWPVjb5sanFI5bSZAvBUhRmqzMdLwg0N7M=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:00:76:59:7b:85:8f:ab:86:c0:c3:a9:97:1b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Aug  4 07:00:47 2025 GMT
            Not After : Aug  5 07:00:47 2025 GMT
        Subject: CN=fd1221c86586c079fd80524ef4ad4bc84da01e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:b2:61:ff:dd:ab:00:c6:a3:45:9b:f5:98:
                    50:a5:2f:f2:3e:ab:23:fc:e8:5a:43:e8:b2:a4:c0:
                    23:fb:62:42:d6:3a:14:f6:85:e1:52:47:86:72:f7:
                    67:7f:9a:c2:a5:8d:4d:db:1b:cb:5a:8b:e1:f1:03:
                    bc:4a:d4:2a:63:af:9c:93:e3:7f:8c:e6:95:bd:96:
                    5c:cc:7d:65:11:d9:c6:0a:63:90:65:11:0b:a2:6d:
                    f9:e4:a2:ac:50:2c:7f:a1:62:a1:3e:57:61:c5:d3:
                    71:e5:81:cb:e1:b3:cc:3b:ea:3e:99:33:93:b7:27:
                    6f:c2:1f:b7:0f:a2:d6:aa:bf:33:95:c6:fc:76:f2:
                    d1:2b:21:95:0a:04:6e:8e:77:7d:9c:8e:0f:70:81:
                    ec:68:b1:98:b8:b2:7d:c5:db:3b:85:12:dc:7d:8f:
                    26:cd:36:bb:5f:ca:47:11:11:7b:c0:05:30:e6:6f:
                    44:73:f2:c1:32:e2:f8:84:2e:45:a2:a8:9e:14:08:
                    40:15:71:84:e5:d2:28:e6:15:0c:da:07:ae:75:66:
                    da:96:d2:76:d4:bf:3b:3d:49:77:7e:be:24:b2:f4:
                    89:bf:2d:eb:38:da:70:25:ab:d9:8b:85:f9:d4:55:
                    92:8c:13:a2:7b:e2:b0:16:4e:66:8b:24:7d:57:ea:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:21:C8:65:86:C0:79:FD:80:52:4E:F4:AD:4B:C8:4D:A0:1E:44
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:a1:a7:39:2e:8e:a7:35:90:32:3d:31:bc:cc:c9:cf:d6:
         5a:14:6e:77:b3:82:b9:3a:b3:a9:8d:0c:9a:1d:f2:b0:88:76:
         6f:8a:71:7a:fc:a6:00:ab:20:0d:bf:d6:01:89:db:e3:03:eb:
         c0:7c:af:0d:59:cb:81:bf:49:f8:61:cd:12:ab:7f:e8:8e:9d:
         3a:56:47:63:93:eb:73:a0:6f:b5:d6:02:37:17:c0:c2:3d:89:
         d8:b0:4b:ee:a4:be:ad:e1:c9:7d:9e:9c:b9:00:30:b8:7e:6d:
         a0:5d:5f:10:3a:4d:0d:d3:f9:93:30:93:6c:d4:27:cc:57:3e:
         e8:3a:67:44:bf:ef:3b:26:0c:58:87:c7:a5:a5:74:30:ef:e3:
         3f:f9:fe:4d:8c:d0:50:1a:6c:1b:dd:eb:22:21:49:25:60:de:
         3c:8c:54:9b:d8:29:c9:ce:9b:73:12:43:f5:aa:78:44:64:fc:
         83:25:73:a4:e1:27:91:ea:52:8c:de:13:d6:87:61:5d:f5:67:
         8a:05:7c:de:b7:ba:e6:90:c5:9b:9f:ff:ef:89:9a:b1:16:19:
         e9:19:a7:61:e5:c1:5b:2a:25:38:3f:81:29:4d:b2:10:e1:bf:
         02:89:61:18:02:5b:b1:ed:c0:ac:88:1a:d0:b6:95:22:8e:17:
         3e:8a:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:59 2025 by rpki-client