Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File:                     OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier:          G470yVsz0aA1k8XH0qFkIJFuZOSxlGaHDtkr/CLKpi4=
Subject key identifier:   E2:71:38:4A:B6:89:EA:79:4E:2D:66:BE:75:2B:42:A9:09:9E:46:5E
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer:       /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial:       0198D6298E832CE38232EC5A91F0FCBF8A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number:          0607
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: meyG09G6MTCS8Y1qzHW/YX89ifBaLIjdb5e9UJ1dpG4=)
                          2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8e:83:2c:e3:82:32:ec:5a:91:f0:fc:bf:8a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=e271384ab689ea794e2d66be752b42a9099e465e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:7a:4a:a7:78:06:35:4b:96:c9:b4:12:58:
                    26:0b:95:9d:a1:c4:94:1a:56:c8:ca:4b:43:a7:0e:
                    88:29:df:85:04:70:e8:9d:19:db:47:e0:6b:14:69:
                    10:a8:28:84:ba:b7:d9:05:b3:0f:c6:f0:1f:99:e5:
                    cd:4f:03:cf:e1:9c:86:9e:f7:3b:1f:a6:32:ba:1f:
                    fb:fe:2e:d2:f3:90:e3:9b:57:44:40:24:01:81:f8:
                    19:75:e4:94:23:53:91:3d:30:e6:40:8f:bb:8e:40:
                    b1:23:68:bb:62:11:61:21:c0:81:03:3b:8f:1b:93:
                    e6:74:62:a6:b3:55:28:ed:71:b8:a7:4b:97:0b:11:
                    10:c7:2d:5d:9d:15:b1:f4:53:fb:39:60:b6:a2:61:
                    cf:65:5c:1b:0e:ac:cb:45:0e:c4:f8:45:5a:7c:ee:
                    b4:c5:9e:8f:0e:d1:39:29:7e:99:af:0e:c1:b5:2b:
                    f2:1f:b8:3e:78:a8:21:f6:32:55:e8:21:59:1b:c0:
                    b2:d6:3b:c5:a1:f4:bd:f9:08:12:c3:aa:88:fe:c6:
                    7e:70:70:83:98:9a:ee:45:34:05:75:e0:1b:35:25:
                    33:fa:54:94:1c:e8:56:03:a7:39:98:fc:6b:35:37:
                    f1:4f:13:48:cc:e2:82:7e:43:66:8a:68:59:40:67:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:38:4A:B6:89:EA:79:4E:2D:66:BE:75:2B:42:A9:09:9E:46:5E
            X509v3 Authority Key Identifier:
                keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:11:c6:3c:d5:90:b7:bf:e8:c3:5d:28:7a:5b:e7:c6:93:
         fb:de:cf:f6:c8:ad:cb:04:09:f7:94:87:27:af:e0:50:60:cc:
         15:8b:40:8e:1c:f5:29:f7:51:22:de:75:38:e4:ea:dc:b4:30:
         96:39:32:71:3e:28:f2:c9:e8:c1:d7:99:96:c0:be:7e:69:2b:
         d6:cd:1f:57:f6:af:f7:bd:b9:2e:03:6c:c9:ff:5e:e3:c1:98:
         dd:0a:f6:8f:ac:33:ca:b5:18:ee:2e:fe:53:a6:2b:2f:d3:06:
         77:31:88:52:ce:46:60:96:94:d2:f7:11:cf:ca:d0:a9:ea:d1:
         d6:a6:d3:40:55:23:62:87:08:b7:1a:b1:f5:18:3b:55:0b:4c:
         aa:9f:83:ec:5c:fe:d7:07:e7:1b:2e:53:2a:2b:a2:ca:07:88:
         15:49:f7:9c:33:10:95:5d:99:fd:d3:cb:e2:46:d3:bc:b0:31:
         d7:dd:54:58:e2:51:46:d1:87:9b:f7:23:6b:28:f3:63:ee:cb:
         f5:63:a7:b0:20:a5:55:3d:6b:3d:c5:07:21:a5:e9:78:66:17:
         63:79:1d:d5:8d:d3:95:a1:53:8f:c9:03:db:fe:67:27:10:ac:
         f5:14:12:dc:2c:21:6c:54:d2:08:5e:73:a6:70:99:8a:88:8c:
         94:05:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:54 2025 by rpki-client