Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File:                     obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier:          W23Q3R+Wdh/sgg8+RRN6tYpuerYGGyd8Q5m/2S68vUA=
Subject key identifier:   9C:3A:C0:BC:6B:62:55:49:7D:F8:BE:88:AC:92:00:E0:D2:AD:69:26
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer:       /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial:       0198D6CCF782DE790326E99712E7B1A85FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number:          0BE5
Signing time:             Sat 23 Aug 2025 12:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:13 +0000
Files and hashes:         1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
                          2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
                          3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
                          4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: +Gm8TdcChG1jaCyZKLOZs5eLV5pEZqUbb6nNV2aM2KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:f7:82:de:79:03:26:e9:97:12:e7:b1:a8:5f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
        Validity
            Not Before: Aug 23 12:00:13 2025 GMT
            Not After : Aug 24 12:00:13 2025 GMT
        Subject: CN=9c3ac0bc6b6255497df8be88ac9200e0d2ad6926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:7a:86:3e:4b:6e:fc:97:86:b4:fe:55:a9:
                    26:ff:51:d7:e2:e0:a2:9d:9a:b6:0a:82:25:55:69:
                    e3:6f:19:16:12:93:d2:67:42:42:db:a4:f4:06:b3:
                    b6:b8:d6:6d:cb:b5:ee:f6:66:d4:46:d6:e8:53:28:
                    ba:8c:01:ae:e9:5d:20:9a:2e:b1:2e:c5:06:bf:42:
                    c1:bc:49:b8:73:8d:d9:e4:19:c8:3b:bc:72:f7:10:
                    e8:18:eb:8a:84:41:33:eb:48:2f:00:c9:d1:a7:88:
                    63:9e:d5:b4:b9:98:5a:ca:f2:14:04:45:84:65:d8:
                    a3:73:a2:54:91:c1:1b:8f:25:47:dd:d0:8d:f0:31:
                    3f:21:bb:28:8a:d0:92:8c:e8:9d:26:69:46:7a:13:
                    c3:cd:41:03:91:9e:97:e5:09:0b:95:16:85:c0:11:
                    97:81:12:2b:81:d0:d6:72:0a:23:f9:4c:76:23:60:
                    9b:6a:b6:48:b1:36:5d:09:b3:c5:49:97:01:8a:be:
                    28:8d:54:74:87:6b:bd:d4:ce:b6:b8:e5:6a:01:78:
                    5b:df:a5:e9:40:b1:65:aa:84:43:83:de:ad:87:62:
                    3b:c5:48:35:43:03:28:c0:79:f8:10:96:28:cd:c6:
                    95:52:04:21:af:9a:74:6d:1d:00:36:50:06:c0:ed:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3A:C0:BC:6B:62:55:49:7D:F8:BE:88:AC:92:00:E0:D2:AD:69:26
            X509v3 Authority Key Identifier:
                keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:69:7d:b3:38:11:a0:f4:e2:f9:12:fa:db:8f:e8:fd:0a:
         6c:c0:e8:a2:5a:b4:34:0d:60:86:2f:0b:6f:d0:74:57:d0:84:
         14:85:9c:80:0e:5f:fb:9a:55:b7:b0:2f:0d:5f:51:e6:1f:b3:
         2b:01:3f:db:2a:7e:a1:13:c4:46:fc:11:09:0e:50:b8:40:ff:
         72:f4:ed:f0:e1:2f:fe:62:c8:28:ca:21:6e:7a:37:19:06:6b:
         14:53:e6:df:a8:a9:2c:c8:5d:34:95:f7:47:bd:a7:66:f3:c1:
         06:00:91:36:ac:d0:7d:d7:b3:7d:07:0e:4c:83:4f:6d:75:9a:
         6f:60:4c:f7:63:86:3e:71:0a:ff:9a:8b:c9:b3:e6:04:f7:76:
         38:5c:12:c6:05:14:b2:66:e6:38:bd:b4:e2:63:28:4f:45:83:
         74:dd:73:d0:0a:ab:c4:83:67:9a:86:fe:62:d5:02:a1:0e:f6:
         94:e3:c9:f8:b2:da:98:1a:79:3a:bf:59:31:9f:58:a1:6c:74:
         e4:ef:01:84:75:88:43:02:34:59:09:26:91:55:9a:d8:7f:ad:
         47:6a:94:08:9a:56:3c:61:df:58:56:ed:4e:10:77:d8:d3:e9:
         cf:cd:48:19:89:42:9f:35:7d:9c:e2:84:02:4f:ab:0a:00:12:
         f7:1e:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:17 2025 by rpki-client