Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File:                     o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier:          4xp8RURV2Th/i0TY2qF/RsAIEneIsGlWLdsPcU72HRE=
Subject key identifier:   C6:AD:66:BC:00:BC:C7:36:97:28:99:98:ED:F0:42:33:FF:A5:69:9B
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer:       /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial:       0198D5F141F9BC9E24DE8F7AE33F3048ABE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number:          0975
Signing time:             Sat 23 Aug 2025 08:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:14 +0000
Files and hashes:         1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
                          2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: 7NzCGX5RhVmQMkt94JcJBQZCWAcEhL31kpGHSIF2v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:41:f9:bc:9e:24:de:8f:7a:e3:3f:30:48:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
        Validity
            Not Before: Aug 23 08:00:14 2025 GMT
            Not After : Aug 24 08:00:14 2025 GMT
        Subject: CN=c6ad66bc00bcc73697289998edf04233ffa5699b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:0c:c5:42:89:eb:3c:e1:72:f1:b5:96:e0:
                    92:13:a4:7b:d7:ad:3d:b1:3e:69:82:01:9b:d6:d8:
                    32:f0:54:21:b9:ef:3e:fe:6a:ee:85:ba:ff:87:a8:
                    38:a2:10:9c:85:fd:5c:8c:5c:07:99:9a:83:9b:9f:
                    95:95:37:20:97:a7:e3:1a:84:aa:dd:3d:7a:07:3e:
                    8c:48:54:5c:29:9a:5f:06:ec:20:af:64:a7:ce:43:
                    57:42:75:72:58:33:08:3a:3e:0f:de:d8:80:65:21:
                    71:ea:0f:f4:fa:35:1e:5d:02:d5:33:90:64:1d:54:
                    c7:bd:2b:d5:ef:ce:51:68:02:90:1b:df:57:ed:36:
                    fc:12:78:74:d0:ac:19:1e:84:b0:a3:7b:96:b4:24:
                    a6:a9:7e:7f:aa:09:c6:8a:20:71:f6:51:20:52:bf:
                    47:00:a4:84:18:f0:63:7b:ab:a5:8e:83:8d:20:3e:
                    54:d8:71:da:27:9d:e1:38:e4:b9:a1:f9:fc:4c:7d:
                    72:61:94:30:0b:d2:41:af:37:db:f5:d1:44:8c:1c:
                    7a:85:26:a8:de:81:f2:e4:92:0d:7d:cd:18:26:da:
                    ed:63:c0:d1:d7:b4:27:5f:a4:b2:e5:15:67:45:32:
                    81:59:54:1f:f0:3c:4a:45:9d:c5:af:17:43:fe:26:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:66:BC:00:BC:C7:36:97:28:99:98:ED:F0:42:33:FF:A5:69:9B
            X509v3 Authority Key Identifier:
                keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:87:9d:5e:69:33:3c:3b:8e:b1:67:66:b4:c9:04:61:16:
         0a:d8:a8:5b:d3:0a:9a:78:45:6a:e8:68:0e:de:6e:0a:a4:c7:
         75:0c:c3:09:92:69:73:f2:e7:96:61:d7:47:51:e3:3b:84:87:
         be:c9:2e:1b:f6:13:fe:eb:e6:ca:27:5a:9f:6b:04:b2:39:c5:
         24:89:42:a6:a7:af:6f:87:19:23:c6:30:07:25:55:fc:17:a2:
         d3:9b:f9:7e:ae:5c:52:5c:0e:80:2d:b9:73:2e:4f:60:71:52:
         fd:bc:f7:ce:ec:36:70:d3:21:d8:01:37:75:6e:2c:5a:43:7c:
         18:e1:11:0b:17:47:f0:ba:7d:90:f1:c0:ef:34:3b:b4:77:99:
         62:6c:e8:d6:fe:37:ae:ca:57:ac:d7:9b:6c:81:f5:2f:b8:26:
         46:3b:ae:46:6c:c0:20:18:aa:6c:be:1d:7d:2e:93:c0:22:f2:
         ad:e0:1f:db:37:c4:06:df:55:21:ef:cd:9c:6e:cd:f1:0c:2f:
         47:77:da:ba:23:1e:2b:6b:1d:01:01:7a:01:c2:48:ac:ee:1a:
         8f:6a:c2:d0:d5:dc:c2:dd:e4:b4:83:63:b2:bc:26:4b:4e:69:
         77:17:c6:ee:ba:14:3f:8f:66:57:80:84:60:1b:58:ee:82:78:
         49:0f:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:40 2025 by rpki-client