Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File:                     OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier:          FJ5njSQWGOzoT8XXvHzLjwdwTIROAZmX4isynIFGftQ=
Subject key identifier:   3C:73:F0:68:8A:7D:90:B4:01:98:6D:96:AD:08:29:28:EB:4C:4C:C8
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer:       /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial:       0198D54EC5615BECA9806FECA1C464245A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number:          0C86
Signing time:             Sat 23 Aug 2025 05:02:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:45 +0000
Files and hashes:         1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: S1F8TE4RYk3/n1UQT/i1Sut0EmXDNSo2tDw3YEDXEFU=)
                          2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:c5:61:5b:ec:a9:80:6f:ec:a1:c4:64:24:5a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
        Validity
            Not Before: Aug 23 05:02:45 2025 GMT
            Not After : Aug 24 05:02:45 2025 GMT
        Subject: CN=3c73f0688a7d90b401986d96ad082928eb4c4cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:0e:a2:30:80:07:b6:ac:be:5a:f8:da:f2:
                    34:e4:83:66:df:76:93:ce:e3:d4:22:7b:c6:c7:6c:
                    de:c7:3f:05:2b:87:76:0e:8d:33:00:f5:50:73:1d:
                    db:fe:85:aa:1a:a3:06:f8:43:72:c6:98:18:22:d0:
                    69:66:ae:4d:62:2f:7c:8a:0b:b7:e4:df:ec:98:0a:
                    aa:20:67:55:fe:42:95:75:3c:c8:ea:3a:4d:87:7f:
                    e0:7f:52:b2:9b:b7:ec:c2:dc:e9:e4:51:f1:3c:3e:
                    11:5b:96:91:3f:d4:1b:ce:b7:11:99:3a:3d:6b:91:
                    f3:11:8c:32:a6:20:e9:fa:38:f5:6d:f6:53:85:16:
                    4c:27:b1:7d:21:1a:4d:d5:7b:86:f5:ea:8c:a5:b0:
                    2d:c3:23:3e:a7:38:46:d4:f3:8a:f2:1e:e4:67:07:
                    ab:32:f3:a7:83:ed:89:0d:1a:19:01:7b:4b:fc:ef:
                    87:00:a3:ea:f1:2c:b4:6d:dc:8b:1d:ae:79:df:77:
                    7d:c8:1b:90:40:eb:a6:40:c1:76:e2:c7:51:e5:06:
                    2a:de:af:1d:b5:b3:8d:99:0f:ac:d9:c2:6a:d3:26:
                    6c:99:31:dd:38:f4:80:d8:89:27:7d:83:54:2f:da:
                    6e:d6:a0:5c:d2:e7:b9:28:d2:db:f4:ef:61:01:2d:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:F0:68:8A:7D:90:B4:01:98:6D:96:AD:08:29:28:EB:4C:4C:C8
            X509v3 Authority Key Identifier:
                keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:dd:1c:99:ed:ab:95:92:b5:5d:6f:5d:62:86:ef:6e:10:
         2f:69:c8:49:b4:fd:e4:ff:be:0a:f4:83:e9:ae:fb:39:43:7c:
         6c:8a:8e:40:98:f2:6b:32:06:b7:78:31:1b:f3:60:5e:bc:a5:
         dc:b3:04:b1:ec:b2:53:9d:1e:bd:1c:24:aa:6e:9d:a1:7a:e7:
         bb:b0:14:ad:19:0a:0f:1a:2f:dc:1c:f2:e6:46:cc:e8:04:d6:
         3d:02:46:5b:a9:40:ab:13:e0:9e:bb:ab:0a:16:66:6b:db:09:
         bb:4e:66:8f:05:de:df:41:c7:97:75:c5:27:d9:3c:e4:f1:2b:
         f5:4c:ca:78:52:bf:fd:8a:f4:05:a0:7d:2f:53:c8:21:84:ee:
         71:39:1b:3e:c2:c7:cc:27:72:37:4d:3b:5c:58:06:45:2b:77:
         f3:f9:9a:b5:a0:79:59:fa:d1:d5:93:cd:fd:4a:7b:9f:61:8c:
         36:09:bf:be:6d:0d:6c:7a:1e:34:4d:ed:2b:fe:75:ec:4f:34:
         36:cc:ac:4b:64:53:7f:4b:a2:2c:04:a7:c9:f7:0c:c9:c5:dc:
         30:27:5e:d0:93:90:87:38:27:53:9b:be:e3:7b:86:2b:fc:2a:
         1b:23:b3:ed:93:2d:66:46:ac:d3:6c:aa:80:4f:2d:7f:62:d9:
         51:16:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:46 2025 by rpki-client