Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File:                     oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier:          oos4IcrhgFFmCcPkQZSlLrsIoNztu+wg4HkQRVM8cCw=
Subject key identifier:   1D:2F:B5:C2:20:36:62:D8:0E:10:42:2B:27:82:4B:FA:6D:D9:84:0B
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer:       /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial:       0198D5F1AAB9710B1FFB5FB0FC068AE13841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number:          13B4
Signing time:             Sat 23 Aug 2025 08:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:41 +0000
Files and hashes:         1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
                          2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: K9r0AWWxNLwU+S9VvZzaPCAy8NFtwtTzyCiKaO01LHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:aa:b9:71:0b:1f:fb:5f:b0:fc:06:8a:e1:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
        Validity
            Not Before: Aug 23 08:00:41 2025 GMT
            Not After : Aug 24 08:00:41 2025 GMT
        Subject: CN=1d2fb5c2203662d80e10422b27824bfa6dd9840b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:9e:bb:7b:91:db:34:7a:b2:4c:77:09:5d:
                    33:c4:3b:81:f0:f3:4a:49:91:97:d0:45:a8:d2:ed:
                    03:57:3d:0a:a9:b0:5c:7e:fd:83:e5:74:50:56:60:
                    e1:e2:24:e1:57:3e:52:dc:a9:e0:a8:14:f5:3f:14:
                    8c:4b:a7:67:22:3e:ca:19:de:51:8d:29:3a:9a:85:
                    f1:b3:a5:5d:ac:3d:26:14:33:69:6c:52:9a:4b:54:
                    52:f8:e1:d8:94:c5:59:92:e2:5a:37:45:0c:d9:de:
                    8b:4c:65:c3:a2:f1:cc:a0:2e:4e:8d:c8:9f:40:21:
                    4a:26:38:35:77:22:9b:65:34:28:7a:e4:9f:bb:44:
                    9e:de:c5:16:22:f6:e6:8f:9d:cf:5d:eb:c3:14:fb:
                    fb:76:19:01:4a:92:45:fe:f4:4d:4c:88:f6:9d:7e:
                    c3:6f:14:99:a4:01:a9:7f:3b:7c:78:b9:fc:92:ea:
                    cf:ee:6f:2b:25:7d:ed:a6:35:d1:fe:3e:f5:9a:c9:
                    f7:d4:5e:f4:05:56:3a:01:03:f0:31:db:f3:96:92:
                    a2:cb:cb:a9:8a:3f:6d:62:68:d8:8e:07:f5:7e:2b:
                    94:d0:49:66:33:36:62:20:af:e3:68:17:3c:5a:61:
                    f5:fa:9b:94:e2:3a:d2:bf:ab:99:27:30:21:31:ef:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:B5:C2:20:36:62:D8:0E:10:42:2B:27:82:4B:FA:6D:D9:84:0B
            X509v3 Authority Key Identifier:
                keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:5c:13:fa:89:55:e0:39:a7:e9:06:08:d5:e4:18:52:23:
         70:42:e7:1f:41:a3:b8:1c:e4:72:c4:1b:7c:ed:c1:2e:48:be:
         61:3d:5f:5f:77:ec:7d:c7:94:7a:bb:e3:bc:8a:71:53:d3:58:
         a4:4d:44:a6:4e:51:5c:81:72:03:a1:e0:86:ba:27:a8:06:e7:
         44:df:60:c2:9a:83:7e:48:1a:f6:8e:d0:5c:cc:0f:53:e7:7f:
         93:68:c5:bf:25:5e:16:77:62:a3:a2:3f:97:d8:3a:21:fe:7e:
         e5:c0:5d:0e:3a:4e:85:85:19:9b:50:14:96:8a:84:7b:3c:40:
         8a:bc:6f:92:5e:54:16:3b:b4:ea:99:5e:cb:7f:2f:5c:f4:cc:
         14:6f:49:a5:57:0b:6c:6d:6a:6f:6d:d0:c7:0e:93:52:66:dc:
         03:41:b7:15:16:8b:ca:01:43:49:85:db:9b:a5:8b:3a:26:24:
         64:91:35:7a:fb:c2:50:58:37:97:12:55:a5:a1:20:22:75:68:
         37:9f:94:df:6a:94:de:92:b1:23:f0:a7:51:7c:21:90:23:dc:
         b5:32:94:ee:f4:64:84:4b:82:53:9c:b1:4f:7b:fd:16:85:45:
         65:43:10:23:a9:be:51:e3:f4:c7:f3:38:d2:33:85:93:2c:c2:
         ca:24:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:49 2025 by rpki-client