Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File:                     ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier:          GIARq1ATr2JNWtljGZCuRyopcbn8jaHRD1ULFNFXkv0=
Subject key identifier:   3D:1E:52:87:B6:37:45:51:48:06:33:AF:63:1F:60:D3:8A:0E:1E:5B
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer:       /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial:       0198D58341642FA4E84973B129BCD5088E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number:          0602
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
                          2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: qbGKMrNlNFm+0YCL1/rqF1js6SlF05FrnoXxQqoKERo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:41:64:2f:a4:e8:49:73:b1:29:bc:d5:08:8e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=3d1e5287b6374551480633af631f60d38a0e1e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:6b:1b:62:7c:e0:2b:2d:c2:a0:9f:b4:b8:
                    6e:c6:d9:55:28:df:b7:46:07:49:98:1e:12:c4:f0:
                    18:6d:0b:ce:08:4b:6a:ce:e3:0c:31:1b:ed:1d:9b:
                    f2:7f:f6:34:d2:eb:b3:66:f9:61:2b:20:c6:d4:b0:
                    8f:be:7b:70:eb:09:a8:6d:9f:c2:6f:7f:d0:52:8e:
                    e1:db:54:f9:33:7e:ae:cc:16:a5:b8:5b:e1:d5:c3:
                    4b:a3:cc:39:30:97:64:50:9a:d1:d8:e7:bb:68:27:
                    cc:06:d5:17:c6:62:4c:7b:2e:c0:fa:c5:76:b5:f4:
                    9f:3e:c4:78:74:14:bc:78:a3:c3:71:b2:1a:5e:e9:
                    3c:47:66:8f:5d:5b:49:b4:03:aa:1b:e4:11:ee:21:
                    4b:61:e2:c9:32:f4:4d:15:7e:63:33:76:f0:8c:21:
                    a6:00:0f:a8:6e:56:56:96:0b:ee:2b:1b:21:33:14:
                    48:66:d1:ed:83:05:45:79:b7:98:32:dd:aa:06:01:
                    70:01:86:da:54:8c:c7:52:67:ed:93:ba:22:08:10:
                    11:6c:e3:14:75:a0:b3:0e:ed:1a:86:50:33:bb:d2:
                    12:f6:3a:93:52:2e:9a:ec:ef:41:25:de:d8:89:7f:
                    3b:6b:6e:f8:0c:0b:96:0a:a2:a8:b8:6c:13:13:e3:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1E:52:87:B6:37:45:51:48:06:33:AF:63:1F:60:D3:8A:0E:1E:5B
            X509v3 Authority Key Identifier:
                keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:28:19:f8:a7:7c:34:0d:eb:0e:4d:3c:08:87:4a:ca:f6:
         da:c4:54:9f:d1:7b:0e:ae:85:1b:5d:d3:5c:b2:fc:f5:78:ec:
         08:04:79:ab:75:34:b0:eb:78:b3:c7:05:ab:44:46:72:68:71:
         48:46:0f:eb:54:42:af:5d:1b:4d:5b:2e:cb:3c:d7:f4:57:7c:
         33:e0:78:33:1c:90:f2:ec:ef:2c:72:18:49:6a:de:d5:a8:46:
         11:ba:66:91:dd:f0:52:10:89:83:61:83:ea:19:e2:2a:c4:2d:
         69:6b:08:59:2f:a5:fd:89:c3:23:0e:ca:4d:89:3e:e3:5b:07:
         76:61:1e:21:53:a6:d8:98:4d:30:e4:94:56:0d:7e:8f:d3:95:
         ac:a4:fa:37:3c:dc:de:6e:b6:dc:95:11:96:b1:b9:81:0b:a6:
         b3:27:d1:a2:c5:5a:a1:7a:01:55:1e:5f:b3:d2:06:83:30:2f:
         a0:e0:a6:da:1c:26:27:33:cd:cb:c3:6d:94:45:f4:c2:7b:b2:
         c6:a1:bd:c0:fd:a2:d9:1b:27:26:2c:1e:5a:e4:d1:bb:4d:07:
         60:35:26:d7:20:22:dd:bc:70:d8:7f:e1:ee:b6:ba:01:eb:07:
         ef:c3:03:fc:b8:8b:5c:4c:c2:4f:b9:80:14:e9:2a:bd:39:9f:
         db:22:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:54 2025 by rpki-client