Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File:                     0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier:          xatLkEFo4PPM1dV6H6V54ApKgUMTSSXHINOVKP4IEdA=
Subject key identifier:   39:57:B6:24:3E:F9:4B:30:02:60:5C:61:AE:B0:31:F2:18:10:32:BC
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer:       /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial:       0198D705D2DD60E899FC49C1E236F2ED2A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number:          081E
Signing time:             Sat 23 Aug 2025 13:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:19 +0000
Files and hashes:         1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: jGqAAG2otnOJ+mmZzsBAH10f5xQPfyNlzP4jjug/HEU=)
                          2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:d2:dd:60:e8:99:fc:49:c1:e2:36:f2:ed:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
        Validity
            Not Before: Aug 23 13:02:19 2025 GMT
            Not After : Aug 24 13:02:19 2025 GMT
        Subject: CN=3957b6243ef94b3002605c61aeb031f2181032bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:92:91:c1:61:c3:6f:83:12:89:30:20:96:
                    f6:06:e7:da:5c:b7:db:8b:7c:fa:a7:ed:88:74:94:
                    d1:4d:3c:cf:6e:c6:ab:d6:4b:fc:a7:86:04:9e:16:
                    9b:59:f3:64:67:9e:35:e2:6c:be:30:75:12:ea:23:
                    ae:cd:17:ef:a2:14:94:43:f3:81:37:6a:70:68:20:
                    28:c2:73:96:6a:22:fe:83:f4:9f:1b:c3:c4:88:e0:
                    fb:71:03:d4:5f:ad:ff:93:de:e4:3c:cc:61:46:26:
                    0f:82:e2:a9:69:0c:e0:fb:15:b9:50:88:22:c3:66:
                    28:08:fd:a3:cb:76:32:d5:56:5f:b1:93:9a:4a:a9:
                    5c:4d:6c:51:ef:c9:39:eb:0b:3a:c4:24:a4:dd:8d:
                    40:ce:77:97:f8:89:8b:bd:5a:56:c0:79:e0:81:0f:
                    80:5a:a1:36:16:f9:b2:1d:dd:a1:52:30:f3:6f:d3:
                    03:ae:34:32:b6:a9:df:97:a1:bc:20:bd:98:b1:2f:
                    80:b9:f3:d7:41:6a:0b:fb:1f:22:49:34:17:f5:71:
                    8b:c0:3c:1a:17:51:7c:26:25:0d:11:dd:79:73:89:
                    cc:0f:52:84:0f:f2:77:39:07:0c:97:e4:66:3d:c3:
                    b2:d0:1b:04:a8:04:0a:0f:9a:b8:f8:4a:f4:9b:6f:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:B6:24:3E:F9:4B:30:02:60:5C:61:AE:B0:31:F2:18:10:32:BC
            X509v3 Authority Key Identifier:
                keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:9c:3b:3b:97:01:cd:52:44:74:51:b3:3f:5e:d8:0e:07:
         89:7e:66:bd:56:48:b4:cb:e7:0d:48:ba:5d:d3:9b:dc:9d:ea:
         b0:71:68:ac:ec:04:0b:8f:12:b5:8e:28:b5:3d:33:48:ba:cb:
         de:32:76:47:0c:90:c5:15:6d:d7:53:44:50:7e:0b:73:9b:63:
         6a:85:dd:56:4c:19:cb:9d:47:7c:2e:89:82:62:f8:11:35:1b:
         4c:40:f8:a1:fe:c4:8d:94:54:67:11:0e:dd:bc:8f:f2:f3:88:
         f5:b2:ca:77:d3:c1:af:39:4e:04:69:c1:d1:09:8a:6d:b8:9c:
         11:0c:76:8a:f5:c5:0b:22:29:1c:7b:9b:ff:fe:4b:52:38:44:
         dd:cc:1a:b9:0d:68:e3:f4:75:4c:24:5c:ef:ab:d8:1b:54:27:
         60:5f:21:a0:3e:ed:17:4b:4c:dd:30:d0:7b:cd:5e:c6:e8:c0:
         89:cf:aa:12:6a:cc:f8:1f:e6:12:3c:f6:bc:15:f7:0d:a5:3d:
         ba:d0:2a:d4:00:26:54:29:a3:8a:f2:6d:52:6d:3c:83:77:ca:
         a6:1d:c9:50:de:a5:bd:d4:9e:69:e6:c9:d5:8e:9b:c6:f0:6e:
         e4:0a:06:1f:8e:e9:d7:b0:d7:36:8e:f6:a2:0d:a1:b4:0c:6a:
         a1:32:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:12 2025 by rpki-client