Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          TWxew9pCgqbnp8kQI2nEI3zivXpLDYscLN9Y5HT/Rnw=
Subject key identifier:   DE:87:2F:4A:35:26:BB:A2:50:03:14:1E:8C:21:3B:E1:95:B6:15:2E
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       0198D5837FCC732C94D6BF8C2D0676498A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 06:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:21 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: llu1FglKqz8Ie5NCc8KF9p53sRaDDdIXYfZtuhr9NMo=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7f:cc:73:2c:94:d6:bf:8c:2d:06:76:49:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Aug 23 06:00:21 2025 GMT
            Not After : Aug 24 06:00:21 2025 GMT
        Subject: CN=de872f4a3526bba25003141e8c213be195b6152e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:66:d5:07:20:21:dd:98:d0:83:34:f4:76:
                    d0:4d:77:82:ff:3e:f5:ff:0b:b0:ea:eb:ea:9d:e0:
                    af:63:fd:25:31:d4:1d:e9:fd:8b:44:7b:fa:85:76:
                    03:be:1d:d6:82:d7:88:c7:86:8a:f1:0e:aa:c1:4f:
                    4c:cf:85:a9:83:bc:53:49:6b:26:8c:3f:d5:2b:d9:
                    2d:a8:bc:d9:b7:10:c3:9c:46:c0:a0:6e:88:9b:cf:
                    e7:59:5a:52:55:0a:88:7a:77:01:92:d6:da:d2:47:
                    fa:60:b4:78:b2:0a:e9:aa:b0:a3:bb:4f:85:f4:a3:
                    25:82:67:cd:b2:0f:89:62:42:a3:c2:e6:5a:c4:fc:
                    4a:fd:cb:a6:d6:9b:51:38:8d:07:79:d3:f3:51:e2:
                    42:82:67:fc:1a:7c:67:42:6f:3f:0c:7f:50:e2:94:
                    50:1d:ba:93:9f:cc:51:c2:20:ee:77:e0:de:cd:38:
                    6d:35:e6:43:ec:a0:c5:71:39:91:59:10:fa:15:1e:
                    bd:1a:36:99:8b:d9:7d:6c:42:d1:d2:48:c4:f1:3d:
                    47:68:fb:d3:df:93:8e:fd:52:f4:65:86:63:00:f2:
                    2a:22:61:1a:c6:43:c4:a3:24:fe:9f:19:5e:b4:94:
                    db:b7:b0:13:8f:37:8b:09:2c:e6:28:68:6b:ab:26:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:2F:4A:35:26:BB:A2:50:03:14:1E:8C:21:3B:E1:95:B6:15:2E
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:fd:4c:e4:a4:4b:c8:e9:22:a5:bb:f0:b5:2a:50:af:2d:
         c5:3e:84:c9:44:45:0c:93:e2:8a:ce:c9:2b:e9:c7:43:73:1a:
         09:14:31:7e:ef:40:c4:13:c2:00:ae:b1:c8:69:fb:66:8f:97:
         54:7b:ae:3f:dd:b9:0a:b4:17:1e:6b:ac:40:40:4e:c7:b4:ec:
         06:55:b1:24:f3:28:3c:aa:06:65:41:7c:ef:5d:9b:6a:49:a6:
         62:02:23:64:6f:fd:ea:fe:77:43:29:53:98:06:90:d8:ea:39:
         7b:7a:96:fe:dd:a8:bf:8d:c4:cd:83:3d:31:fe:ba:8d:ac:ba:
         0a:8c:be:3d:48:8c:47:a4:6a:a9:be:22:9b:18:28:1e:92:0e:
         fe:d6:c0:0e:1a:4d:95:c1:98:9d:1a:4d:9d:3b:7d:34:72:6d:
         f5:42:ed:ed:73:a0:1b:56:52:bb:cc:f7:1d:e9:22:b2:9a:67:
         ce:67:61:f4:bb:d8:58:5f:57:29:96:08:f5:d9:19:a2:35:d5:
         9d:8c:34:f9:e2:4a:29:50:eb:b6:78:f3:01:42:bf:e3:31:2d:
         db:3d:50:1f:f6:f8:5e:1b:47:15:90:d9:4a:56:24:a9:ed:73:
         c2:73:09:14:e1:77:97:68:d4:e5:eb:bc:4b:91:a0:bf:db:e7:
         5e:dd:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:08 2025 by rpki-client