Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File:                     OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier:          Hl1GU5NzuCglYbcsCnSkNcKy0z3KgxP5EvVE3vgvPeM=
Subject key identifier:   29:3E:D0:BA:FF:31:09:6A:CC:19:8E:A3:37:96:E2:9D:80:E1:E3:34
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer:       /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial:       0198D4725D3FBBC5EB5EC800AE4FB125500E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number:          165B
Signing time:             Sat 23 Aug 2025 01:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:01 +0000
Files and hashes:         1: 41o_KDQT0UQR0-pEGq6ZFFoyGEY.roa (hash: mkyU9FNe+9kldpNCWIBTUaB1xImUCSbnmtoOt1trV1c=)
                          2: EfAbE-x7JWikVYwPPlQe_vVwMQg.roa (hash: 7jN/LfmMAw7O2spCMvO+jNeJ92v1x2ZZaE7vPy60zYA=)
                          3: JKilfZrkJhllQ19r3NByhgoqTDg.roa (hash: TyGhUzaYqQpVckTL9iipsY4ZDEots8Yo4CEp0B079m4=)
                          4: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: zZQ6O4XiJGjyTPckD1+9iticUzrMo/TOvZak+ax/sXU=)
                          5: SHIdIo5QDACoW0nIIu5f5RtYZ_Y.roa (hash: Wl9sZv7NXkEqjqOeUmOOqdDlFgYyfsqwHN90exWSc1U=)
                          6: UxDrDzP2TNEJomhvUm5pptefxgA.roa (hash: /MVrUvLgefyKi9OhWDKlnZN9gJaxVmd7pmpH+GNvKAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:5d:3f:bb:c5:eb:5e:c8:00:ae:4f:b1:25:50:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
        Validity
            Not Before: Aug 23 01:02:01 2025 GMT
            Not After : Aug 24 01:02:01 2025 GMT
        Subject: CN=293ed0baff31096acc198ea33796e29d80e1e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:87:3e:3c:8e:30:8c:6b:ce:f6:94:e3:4a:
                    90:98:4e:eb:ff:6a:3b:73:89:53:49:fc:ba:43:24:
                    e1:bf:26:6b:91:e7:7d:02:4b:ea:01:42:80:d7:b4:
                    c3:e8:6e:ec:5d:65:a6:ca:83:80:8f:04:48:9d:66:
                    3b:e7:cf:15:e8:a7:9a:cd:20:d3:b0:ff:5f:b8:8e:
                    08:05:2f:2c:18:90:a9:8a:5d:4f:b4:7f:79:8e:75:
                    dc:e5:89:a5:1d:bb:d4:72:78:0d:92:8c:08:66:9f:
                    0c:79:f5:c1:0a:ca:8e:0e:f9:99:2d:de:a1:66:b7:
                    9f:86:ad:0c:73:86:8b:f7:86:65:39:20:38:f1:1e:
                    12:ef:d0:94:bb:6e:fc:b6:40:ba:7d:e3:2a:6e:02:
                    b2:d5:71:3c:d2:1c:79:c6:bf:65:fc:d4:a1:54:81:
                    67:a0:76:ff:c8:07:9b:e7:87:e1:84:a5:c6:f7:5c:
                    cd:a2:2f:ac:b7:5b:1c:38:ff:18:25:32:27:6c:91:
                    e9:e7:ca:c8:1e:47:55:f5:14:f1:53:70:17:a7:42:
                    e4:db:85:04:4c:9d:a6:a6:3c:d1:3b:2b:60:4e:f9:
                    42:4d:63:2c:6e:14:f0:b9:77:db:04:88:8c:81:8b:
                    6e:d3:ad:c7:39:f0:9b:fc:1b:6a:7b:e1:b7:0f:e1:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:D0:BA:FF:31:09:6A:CC:19:8E:A3:37:96:E2:9D:80:E1:E3:34
            X509v3 Authority Key Identifier:
                keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:d8:85:ac:37:7e:71:9e:5d:3f:18:64:01:28:62:be:79:
         33:52:14:13:e0:28:83:1b:69:48:9f:c1:f7:19:e3:e6:e7:49:
         39:dd:85:eb:53:86:83:5b:24:83:10:46:c3:98:0d:ff:96:ea:
         8c:24:44:73:91:34:18:0f:ab:72:bc:d3:ba:ab:09:21:02:4d:
         99:a9:61:2a:db:3d:e7:7b:a1:9e:96:7c:ef:ed:af:35:82:01:
         48:80:ed:4d:41:4a:bb:08:02:fd:3a:4e:57:cd:ad:b9:14:2d:
         4d:dc:00:fd:e4:79:01:e3:f8:80:05:22:24:0c:7a:4b:33:e2:
         0b:c4:3c:d9:d9:6a:6c:48:40:84:1d:37:52:8d:b3:2e:a1:26:
         51:4d:e4:53:6f:1f:bb:46:f0:68:c1:f6:06:6a:7b:56:34:c7:
         a1:f6:f8:3e:d0:b1:a5:c8:ef:4b:c2:d6:6e:90:2b:e0:44:54:
         b7:6c:7c:22:b0:14:51:65:dc:15:99:60:9a:4c:37:3e:e0:76:
         08:4c:57:c8:5b:d1:2e:55:c8:b8:23:2c:66:0a:80:7b:73:b3:
         27:28:8f:09:61:21:42:ac:60:c2:38:3c:42:a2:92:8b:58:5c:
         ae:2a:f4:00:8b:de:d3:65:f2:ba:51:5c:e9:24:a2:e6:24:9b:
         eb:fe:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:31 2025 by rpki-client