Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File:                     OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier:          nQd7FsneC+MuGbZKVZUh9c5WqYkEpEYQJ4RFdVff3hc=
Subject key identifier:   FB:35:EF:5F:24:12:B0:DF:94:B7:81:7C:4E:14:B9:4F:B7:97:9C:30
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer:       /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial:       0198D583C0927310ACE22E45E819496DAAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number:          130B
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
                          2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: /2gh7ofNM5f7YyoNqmDlpQC0UG3snwWZiR1oiBas0PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c0:92:73:10:ac:e2:2e:45:e8:19:49:6d:aa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=fb35ef5f2412b0df94b7817c4e14b94fb7979c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:16:38:24:4c:b6:36:d2:ef:d2:51:65:c7:
                    c4:52:a6:80:52:de:d6:3b:29:15:27:f8:35:27:21:
                    17:24:b4:12:df:92:a9:c5:a9:ce:46:b5:2b:66:b4:
                    f8:9f:60:05:8e:61:73:e6:a2:71:d4:6d:01:d1:e0:
                    3d:a9:0a:b4:60:9b:5b:09:4c:8c:27:05:ed:85:78:
                    df:5a:65:3b:2d:5a:dc:2a:54:97:a9:d5:22:0d:83:
                    c8:5a:78:cc:be:06:4a:58:66:6c:64:4c:d6:c4:de:
                    68:57:84:74:b0:17:68:3a:62:41:f7:b1:40:d4:1a:
                    66:e4:14:97:33:8d:1b:18:0f:74:c7:71:45:23:92:
                    bf:8e:27:23:85:71:ab:57:1b:fd:9f:e5:92:6e:bf:
                    76:27:ce:5c:67:1a:eb:8e:0f:84:d5:83:97:48:f9:
                    69:2a:cf:b9:24:ae:da:75:0d:e8:fb:61:4c:87:e9:
                    49:7d:c6:fc:89:45:d0:05:e8:93:62:aa:0a:94:5f:
                    e0:39:2b:0c:b1:bc:af:4b:0b:85:f5:50:64:45:3c:
                    88:05:0c:78:61:2e:0a:1c:5f:2b:61:2e:f6:96:67:
                    0c:ca:29:34:09:2c:53:a1:68:84:f3:d5:97:b9:9c:
                    97:b4:fc:49:2f:fa:0a:38:57:3d:cd:ef:a0:c9:75:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:EF:5F:24:12:B0:DF:94:B7:81:7C:4E:14:B9:4F:B7:97:9C:30
            X509v3 Authority Key Identifier:
                keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:74:bf:e9:a1:37:6c:b7:8a:a4:04:c6:16:9a:92:76:49:
         c6:09:9f:3a:4d:9b:38:71:cb:43:73:2c:bc:01:68:14:70:fe:
         3c:3f:fc:37:f4:14:12:60:47:0f:00:59:45:dd:d9:03:e1:57:
         7b:90:cf:0b:09:a8:92:22:a8:d0:db:c9:c0:3c:f5:e4:04:12:
         cb:01:86:5e:6f:b4:18:2f:17:80:7f:d2:46:7c:d2:37:e2:b9:
         ec:90:2d:48:59:70:0b:f1:12:a2:5b:85:41:c9:7f:ae:f9:0e:
         79:3e:28:9c:fc:06:30:82:25:5c:29:cf:f8:63:fd:6a:bf:67:
         5b:a4:a5:f1:2a:23:e5:dd:97:e1:1d:db:30:b3:22:13:80:98:
         b2:58:50:17:54:79:55:23:de:60:06:47:23:5d:49:ce:df:91:
         f6:56:cd:00:ad:94:23:1c:c5:b2:dd:e3:85:6c:8b:3e:37:cd:
         3f:65:2b:85:c1:4a:ad:c6:99:3b:1a:08:03:b0:b3:4a:0e:9f:
         54:ea:ad:f9:2e:4d:f5:2b:14:6b:31:e3:15:93:39:b4:0e:df:
         38:93:dc:4a:27:bb:4e:9e:9b:c2:58:09:1e:d5:3e:53:eb:15:
         7b:82:76:09:90:e6:de:6a:c7:90:59:cc:29:e3:a9:4a:61:22:
         08:25:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:23 2025 by rpki-client