Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File:                     OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier:          Jlum5yV5yGJHNlOyvpoe4ywt2AM/w/HU28Xgx49F6mE=
Subject key identifier:   4D:2B:8D:D3:8F:87:7E:A7:53:F3:B5:42:5B:0A:4E:F1:B1:66:E8:CB
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer:       /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial:       0197B6D77AEDB4F88FEB5AE894F5ABDC9231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 14:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:04 +0000
Files and hashes:         1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
                          2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: 2/7SHyTp8SakZu/ke8wTdVGhtCP+vzKBgCNVXAM8m2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:7a:ed:b4:f8:8f:eb:5a:e8:94:f5:ab:dc:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
        Validity
            Not Before: Jun 28 14:01:04 2025 GMT
            Not After : Jun 29 14:01:04 2025 GMT
        Subject: CN=4d2b8dd38f877ea753f3b5425b0a4ef1b166e8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:f9:54:66:bc:47:e8:2a:f9:d2:e4:83:d7:
                    48:ea:fc:d2:cc:f6:0e:13:c9:19:77:cc:61:1e:6a:
                    e3:e2:97:ff:c7:cf:e4:d7:d0:70:33:ed:19:fb:66:
                    ad:52:a8:96:95:fb:a3:39:50:40:d0:d9:28:1d:02:
                    fe:e7:4b:06:50:f2:ee:be:f6:ea:c4:29:35:b9:0a:
                    3f:40:6e:d5:e3:22:19:fa:0a:88:95:01:6e:21:88:
                    44:84:9b:b4:f5:c4:b9:c4:6b:a0:91:26:85:74:6b:
                    13:4e:30:61:d3:a4:de:77:3b:d5:13:2c:e2:8d:18:
                    21:9f:2b:9a:52:73:42:07:6a:cb:10:7c:65:41:c8:
                    11:96:e4:38:8f:c0:bd:29:3e:cd:c2:30:4f:bb:d9:
                    22:7a:39:44:a0:24:f8:23:2a:0a:72:38:70:a3:d4:
                    2a:ef:65:a7:0a:fe:38:3f:b7:ce:cf:1f:e0:f7:99:
                    de:fd:04:99:a8:34:96:8f:37:96:87:8d:11:a0:2d:
                    8c:83:76:22:c2:76:a1:ed:b2:c3:cf:00:49:43:37:
                    f0:61:a6:b7:34:0f:ca:b8:fe:5a:46:97:66:a2:13:
                    be:e7:c5:44:bd:54:a2:d1:d1:2b:69:b6:96:62:c1:
                    c3:46:a5:23:81:8a:33:2e:cd:c3:9c:c6:ae:32:75:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:8D:D3:8F:87:7E:A7:53:F3:B5:42:5B:0A:4E:F1:B1:66:E8:CB
            X509v3 Authority Key Identifier:
                keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:36:37:a3:1d:42:96:ad:db:b4:3b:01:d5:4d:b8:1c:c6:28:
         81:01:cd:ba:51:16:f4:b2:38:70:b9:ee:fd:ab:72:6d:2c:79:
         52:e1:fc:93:8c:06:47:3e:82:db:fa:5a:35:9b:50:44:2c:f7:
         a4:0a:d1:c7:fc:a2:9c:90:d3:26:aa:ed:e9:b2:a6:6f:ab:0a:
         0f:77:23:51:00:3d:6c:e9:7b:89:91:9d:fb:e5:70:84:3d:1e:
         d7:9e:e4:0b:fd:86:ea:88:ec:b0:e0:3b:26:23:ac:40:f0:93:
         6e:8e:01:5e:bb:5c:7e:f0:2d:47:05:9a:a9:66:12:af:7b:a1:
         a5:f5:78:b2:c9:c9:a4:68:ec:6b:9c:64:68:a9:d1:f2:9c:5d:
         7e:2b:dc:4c:f5:06:6a:64:ac:8e:13:b5:a1:71:f2:45:b2:b7:
         51:4f:0f:96:60:00:f8:8b:2c:63:0f:39:96:5a:f0:1f:b1:9e:
         70:bf:28:fe:ec:1f:3d:ba:93:c4:3c:18:33:1d:0b:53:fe:71:
         96:26:c0:e7:c6:79:25:f7:e7:29:0a:9b:eb:6f:b9:11:24:e7:
         e9:de:8d:12:b8:c5:94:80:65:19:6f:0b:ae:e0:ae:3f:f9:54:
         50:50:4d:c1:51:5a:d5:04:11:b3:d0:b9:9e:24:7b:5e:76:85:
         92:0a:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:13 2025 by rpki-client