Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          u7FvpDyVpRnIT6pFM7z9B4DwlxcBesu/98VFyGg/3SM=
Subject key identifier:   9B:D0:49:68:4B:6E:96:1C:07:C2:42:07:C4:D5:08:A5:2E:FF:7E:A8
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       0198D54DD21C4ED5B3BC69210956797D48C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          1107
Signing time:             Sat 23 Aug 2025 05:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:43 +0000
Files and hashes:         1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
                          2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: GBRkQt7+xD/MGoxbSfvsZ3hGopkZ9vLfEKggPaXDPtg=)
                          4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
                          5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
                          6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d2:1c:4e:d5:b3:bc:69:21:09:56:79:7d:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Aug 23 05:01:43 2025 GMT
            Not After : Aug 24 05:01:43 2025 GMT
        Subject: CN=9bd049684b6e961c07c24207c4d508a52eff7ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:35:3e:42:46:74:f9:09:86:d9:f0:4e:4f:
                    02:9c:9c:c9:4c:fb:12:f0:e0:12:01:fb:21:0b:c5:
                    d2:2f:8e:94:e7:b2:13:78:d0:58:27:81:89:36:e4:
                    85:c7:fc:8a:ac:ce:1f:d8:91:e8:e5:11:05:11:1f:
                    04:af:6e:b8:33:ad:5d:42:5c:86:96:08:fe:12:83:
                    e9:d8:2f:d1:b0:fe:d7:7c:77:03:dc:4c:9c:d0:93:
                    fc:30:3a:0c:ce:ec:e6:b9:fc:11:9b:39:f9:3c:d0:
                    73:44:06:af:f2:1a:2b:a3:02:0b:64:2e:8b:90:64:
                    f2:f8:40:2f:21:b4:2c:6b:ec:e9:37:f5:ea:0e:f6:
                    80:5a:97:2f:41:b1:23:17:b7:a3:f6:14:59:ee:1e:
                    ae:1e:3e:c2:e2:0a:88:f3:84:87:4f:f5:ef:23:cd:
                    a6:ae:51:ef:cf:68:33:ae:1d:1a:f6:52:ac:ae:5f:
                    43:4e:c5:69:e1:e1:b9:b5:70:fc:27:e8:89:d0:05:
                    51:87:3f:e5:a4:05:14:99:15:85:da:55:0f:2f:70:
                    9d:b3:fb:26:21:50:f0:46:56:0a:10:75:31:b6:31:
                    52:cd:80:5b:02:bb:ce:e1:28:6b:97:d7:4d:a4:4e:
                    1d:de:4e:0e:b8:aa:e1:2c:cb:91:98:8a:c5:ba:d1:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D0:49:68:4B:6E:96:1C:07:C2:42:07:C4:D5:08:A5:2E:FF:7E:A8
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:2b:43:1d:95:d3:2c:c2:df:8d:04:cb:30:54:70:2a:10:
         6d:6f:69:ba:ec:81:0e:63:64:2b:76:d6:8d:09:16:d7:67:5e:
         63:71:d0:b7:04:cd:8a:af:88:eb:ee:60:99:96:ac:a6:63:e6:
         77:19:03:cc:b8:98:e7:71:7c:23:da:5c:d2:98:fb:e6:73:57:
         cb:17:ea:a7:fa:f1:00:a8:d1:3d:fd:ad:50:85:36:49:aa:80:
         72:e1:45:60:55:c1:2a:eb:93:7b:14:bc:67:0b:87:ba:25:16:
         15:ed:21:0e:75:05:39:c6:fe:6a:57:dc:23:4a:60:01:8d:a5:
         34:ff:e8:87:61:85:07:47:22:d2:60:ee:fc:ec:52:d9:61:e0:
         33:df:a3:0e:cf:95:f9:cb:3d:46:cf:20:73:00:78:fa:5a:68:
         1c:59:c5:c6:10:01:07:72:3d:3b:99:ef:c2:bd:5d:2e:a6:66:
         96:85:6d:2e:45:11:80:9a:7d:c9:ae:9b:44:b6:ec:5e:fd:52:
         85:c7:71:6f:df:c6:11:29:6f:72:9c:25:c9:ff:82:15:0c:c1:
         4e:8b:dc:6f:51:8f:8f:7b:3e:0c:f0:b4:a0:0a:26:cc:fa:ce:
         e5:b0:d9:59:24:da:56:4b:c4:d3:cb:5b:d6:6e:f2:ab:d5:aa:
         09:4f:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:02 2025 by rpki-client