Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          WqVDeHVM+Nq4D1ngB20p4Fn/kHoTUvBjyjBidSoLl2w=
Subject key identifier:   48:5D:7C:7F:8B:74:AD:60:37:FB:A3:D4:D5:B6:51:12:CB:B9:33:E5
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       0198D54DC856EDCAE3E224336CC0F8570A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0DD2
Signing time:             Sat 23 Aug 2025 05:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:41 +0000
Files and hashes:         1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: a7gm2GHOl/h8JjvcBdGizhqNOwmxOxl3IfpJzTPOXSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c8:56:ed:ca:e3:e2:24:33:6c:c0:f8:57:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Aug 23 05:01:41 2025 GMT
            Not After : Aug 24 05:01:41 2025 GMT
        Subject: CN=485d7c7f8b74ad6037fba3d4d5b65112cbb933e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:a7:16:cd:0a:94:71:20:2f:a1:5a:d7:1b:
                    d5:19:d6:58:18:5c:3d:a2:ae:b2:9c:0d:83:44:c6:
                    b5:c0:66:20:09:2f:73:9b:c6:94:d2:5b:f5:e2:db:
                    d5:31:b4:08:47:3b:87:24:fb:3a:af:f7:89:ba:c1:
                    fe:63:27:0c:b7:26:d5:85:84:de:5d:34:f9:d1:27:
                    2c:d6:21:79:b9:cb:b4:9c:14:6f:c6:38:fc:9d:41:
                    e0:55:7c:c0:9f:42:0e:3c:b5:84:0a:42:2b:af:5b:
                    49:cf:8e:c0:1f:d5:56:8d:5c:46:aa:46:3b:03:54:
                    88:59:de:cf:3e:89:d1:82:86:e4:b1:71:32:b7:a4:
                    ea:0d:9a:ab:bb:a2:a3:6c:5e:c1:56:c4:08:f7:8a:
                    d8:10:29:f3:d1:72:0a:b9:22:53:91:5d:ad:6c:b5:
                    77:26:86:55:5a:15:32:42:b8:14:76:e0:da:c8:91:
                    27:75:84:c7:e7:38:7f:5f:6b:99:6d:8b:db:a1:36:
                    74:d4:16:35:3c:d6:59:94:8d:ac:da:62:83:6e:71:
                    94:23:93:17:89:18:ea:ed:f7:70:c4:c6:d4:e9:dc:
                    65:c9:e1:5b:bf:bf:eb:e6:41:8b:67:23:91:9c:ce:
                    1a:aa:b9:ee:09:0a:e9:cc:f4:c3:ef:90:7c:d3:64:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:7C:7F:8B:74:AD:60:37:FB:A3:D4:D5:B6:51:12:CB:B9:33:E5
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:21:3c:85:b0:73:d1:75:a1:cd:08:98:83:fb:dc:f6:d0:
         7c:07:4b:11:c7:20:e9:fe:12:59:0a:26:5a:7e:42:f4:39:5d:
         f9:41:7c:0c:78:c4:c9:9b:71:0b:47:f5:07:dd:25:87:b2:20:
         72:37:d8:4b:a1:a2:f6:55:1a:53:b9:c2:a4:92:49:79:53:78:
         a0:53:17:93:04:b1:ca:3d:f9:9f:ef:71:97:d7:b5:a1:7b:ae:
         ba:28:a2:40:23:aa:dd:aa:68:a3:dc:55:76:5d:e7:56:35:b4:
         b1:cf:2d:df:4e:2f:73:be:09:9b:ad:2b:0f:b4:27:bf:0b:a2:
         dc:06:86:47:0d:16:86:ec:a3:44:6b:37:60:41:12:96:9f:2f:
         3f:a8:8f:27:9c:39:43:e9:96:05:38:92:81:3c:e5:c5:70:2e:
         f0:db:73:1b:1d:38:a0:03:d6:d0:32:5a:59:f7:65:54:b3:a0:
         ff:61:66:42:73:65:a6:91:29:f8:6a:f7:9a:d0:cd:b9:3e:0b:
         42:2c:76:2e:c7:8d:0a:d0:ad:f0:60:16:5b:05:47:78:3c:0b:
         44:ad:d5:da:11:a0:db:8b:dd:22:77:ff:67:c4:3b:92:91:0f:
         b7:52:e3:b7:d0:57:8d:ed:9c:c5:80:aa:de:32:d8:ed:7f:e1:
         5a:ce:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:03 2025 by rpki-client