Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          v2/oTKcCyP16HUUNl56UP5c0LwePZRLjv5A+RpSqfC0=
Subject key identifier:   6E:BD:29:C6:EB:40:0A:60:F8:29:2C:BB:0D:DA:25:20:9C:C8:A1:A4
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       0198D51605B3B2B55982B350DBEE83C17101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          0CC3
Signing time:             Sat 23 Aug 2025 04:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:46 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: mpAnr/4bz7e5XKS8IvXqvBk5iwryO+t/YirSpxGac3Y=)
                          2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:05:b3:b2:b5:59:82:b3:50:db:ee:83:c1:71:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Aug 23 04:00:46 2025 GMT
            Not After : Aug 24 04:00:46 2025 GMT
        Subject: CN=6ebd29c6eb400a60f8292cbb0dda25209cc8a1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:72:61:09:e5:87:be:92:d1:95:28:66:52:
                    0a:f7:54:e9:81:29:66:6e:88:9b:ac:6d:1f:fa:8d:
                    36:3b:55:98:15:4e:b7:b7:37:b0:16:ca:14:36:0e:
                    fb:fb:14:5f:dd:46:38:df:3b:e3:2a:39:2a:19:2e:
                    92:f6:39:cd:78:1a:27:c1:d4:8e:20:70:0f:c2:06:
                    70:0c:0b:b9:b8:8a:33:4c:e1:54:a9:d7:66:f6:ec:
                    c8:fb:56:31:b5:64:4e:53:97:45:7f:83:8c:35:b0:
                    57:2e:2f:d4:f7:d8:12:58:52:0e:3f:b7:c7:a3:25:
                    45:45:95:e1:df:30:ea:56:4d:72:5e:6f:10:6f:b3:
                    c9:ca:06:80:a8:a7:69:98:f5:43:7b:91:04:96:a7:
                    5f:4f:e2:de:e6:1a:16:fc:3b:82:a1:a2:5f:d7:da:
                    05:5c:e6:b5:db:f8:76:d3:98:1a:b0:57:27:8d:bb:
                    4a:44:91:76:ea:89:3d:0b:5e:5c:e1:cf:e5:59:7e:
                    21:0a:c0:e0:4f:ad:5e:34:c4:4c:a8:0f:4b:5e:60:
                    1e:da:9f:46:46:8e:9d:95:2b:d8:ae:c5:51:e4:63:
                    d4:95:f0:a7:24:04:29:e3:af:57:1d:5f:4b:86:95:
                    b2:92:d9:95:31:0f:13:3b:d6:01:46:13:ab:ce:82:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:29:C6:EB:40:0A:60:F8:29:2C:BB:0D:DA:25:20:9C:C8:A1:A4
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:44:f1:a9:1f:bb:2f:af:f5:60:5e:3e:98:85:e0:2b:81:
         cd:d6:2a:42:d9:cf:8e:df:a4:d5:29:2c:0c:a6:af:07:f6:b8:
         ad:ef:85:dd:79:26:8f:f3:d4:b4:6d:01:e3:d2:4f:96:c4:7a:
         8d:92:81:55:3a:15:af:dc:49:c7:39:63:64:64:bb:d5:ca:ca:
         5d:71:69:d5:1b:ea:17:6e:33:a4:f0:47:30:2c:e8:ce:ee:58:
         ce:ec:31:b9:de:52:d6:7b:a0:c7:05:7e:2c:27:43:5f:2a:14:
         84:73:48:0d:dd:52:ed:1a:e2:6b:0b:da:43:5c:02:d7:24:75:
         0b:4b:3e:c4:98:c5:c4:de:cb:6c:80:e8:19:0c:0b:0a:0c:28:
         aa:2b:85:62:1c:5a:c6:54:70:b9:58:44:5a:48:d3:cc:8b:93:
         98:91:76:8e:16:dd:5c:b7:0f:6b:55:18:ce:43:35:d8:f2:d0:
         2c:e6:f0:25:21:ba:3b:53:23:f9:67:eb:bd:5f:70:16:d1:62:
         a3:9d:c9:4f:9d:e4:f0:9c:1a:74:68:ec:38:8d:a6:8c:e9:4b:
         06:3c:f9:31:0a:1f:3b:32:8b:b7:8c:f3:45:bd:ba:f8:d3:ea:
         d4:b4:81:57:40:9b:4a:1f:67:26:04:d2:d4:b2:11:bc:b5:eb:
         c3:4b:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:38 2025 by rpki-client