Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File:                     oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier:          u14wUjZtBW31FfFgiQDHiuqAJvNXCzXM4usTMXaEDqA=
Subject key identifier:   6E:87:24:53:23:56:B5:F0:1D:F7:FC:64:8D:A2:A1:79:3C:A5:00:30
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer:       /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial:       0198D4734E4FC143368598660A5AFF41D626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number:          0F77
Signing time:             Sat 23 Aug 2025 01:03:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:03 +0000
Files and hashes:         1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: To600IQFpu2C3k+Xa2zsaGOOM0G2lYZItTmyb2Umntg=)
                          2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:4e:4f:c1:43:36:85:98:66:0a:5a:ff:41:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
        Validity
            Not Before: Aug 23 01:03:03 2025 GMT
            Not After : Aug 24 01:03:03 2025 GMT
        Subject: CN=6e8724532356b5f01df7fc648da2a1793ca50030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:a0:c5:4a:6e:52:60:ca:34:53:21:d8:d6:
                    b8:57:5e:d7:6b:a6:d9:26:7f:c2:7c:b6:d7:29:21:
                    4c:f5:98:1e:78:6e:7b:92:9a:dc:20:46:de:e4:c1:
                    02:d4:4f:ee:35:f1:63:e2:7d:23:17:bf:41:78:31:
                    0b:5c:32:f4:f6:89:c6:f2:f8:63:1a:af:ee:f6:86:
                    b8:cd:3b:85:cb:a1:53:b7:92:41:42:7a:4f:5a:42:
                    8a:1a:88:a2:c8:e3:51:b5:4e:cb:78:df:c3:c5:25:
                    a1:be:53:91:88:86:96:21:81:3a:03:3c:84:20:65:
                    fe:9c:df:80:b5:7c:ff:68:15:d0:c1:22:07:5e:7a:
                    63:e1:2b:23:12:18:63:4c:06:92:c3:e6:90:5c:57:
                    91:ba:51:34:75:2a:4e:34:95:70:71:22:b3:ce:9f:
                    64:62:df:96:b8:eb:a3:0b:e2:93:df:6d:db:61:2e:
                    a0:ae:87:e6:64:eb:0d:6a:82:af:ec:6d:6c:3e:06:
                    d0:8b:db:45:87:2b:52:4e:96:23:75:49:0e:6f:e6:
                    71:23:c7:e5:10:84:51:f5:31:40:14:35:56:8f:ec:
                    1f:7f:3f:7a:e2:69:ae:6a:a8:db:4e:2e:3d:cf:63:
                    06:ec:2a:e8:90:22:db:bb:f4:c5:2d:2f:ad:3d:b7:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:87:24:53:23:56:B5:F0:1D:F7:FC:64:8D:A2:A1:79:3C:A5:00:30
            X509v3 Authority Key Identifier:
                keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:ea:fc:43:4f:fe:5b:a3:de:ba:3c:ea:56:5e:ef:fc:be:
         53:9e:c1:6c:d2:86:f8:70:29:a5:57:a3:91:c9:fa:a6:b3:40:
         36:d7:b8:a0:34:41:9c:9d:f0:c0:3a:4c:f5:d9:2f:0b:82:ea:
         be:90:fc:c0:63:54:3d:46:57:c0:8f:b9:9d:d3:f9:ae:a8:c5:
         a5:f1:67:77:36:81:32:85:b5:33:ba:06:f3:1c:b3:42:20:70:
         f8:ea:d6:dc:e6:f7:8d:5b:82:da:1d:f5:ff:c4:f4:0e:00:0f:
         8b:8d:af:a8:56:79:f0:36:c6:7f:97:2d:2a:a0:ff:bc:8e:99:
         d7:b1:d4:22:50:be:2a:b4:b6:c1:61:0c:d9:f3:a7:05:e9:0e:
         43:c4:d5:3b:09:2d:68:89:40:4b:6f:05:7b:0c:a6:fb:c9:4e:
         a1:01:a9:3c:7c:7c:bd:a0:6f:a9:5c:de:4e:d0:7e:bd:17:b5:
         be:06:07:57:d0:3f:05:d0:c3:f5:83:45:35:ed:bf:bb:b7:46:
         4c:4f:e2:66:0d:6b:31:c0:2a:72:e9:7c:98:9d:ab:c6:55:1c:
         35:ea:54:74:c4:7d:cc:84:f0:53:a4:00:13:11:b2:5a:cf:c7:
         c3:84:49:4d:e0:29:88:67:24:a2:58:9b:6b:d6:e9:4e:32:7e:
         06:c5:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:49 2025 by rpki-client