Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File:                     O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier:          tjsza/8VHhL3Z+f3j4mTqlX6ZGmHtlMNLelHIIlnacE=
Subject key identifier:   AB:DC:09:F8:DD:5D:12:7D:7C:30:3C:6F:F5:A1:5F:A9:DB:CE:59:E6
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       0198D583E491C6C96D779C82FA1C618A3FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number:          0E0F
Signing time:             Sat 23 Aug 2025 06:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:47 +0000
Files and hashes:         1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: ClEJFiESSH4cFEZme+RW5DnZSuy8GhF+4fY/LDtE+84=)
                          2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e4:91:c6:c9:6d:77:9c:82:fa:1c:61:8a:3f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Aug 23 06:00:47 2025 GMT
            Not After : Aug 24 06:00:47 2025 GMT
        Subject: CN=abdc09f8dd5d127d7c303c6ff5a15fa9dbce59e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:ca:98:d7:fb:19:ba:77:6d:af:cd:22:60:
                    01:fa:ec:48:e4:98:bf:cd:01:32:d0:38:f2:53:9b:
                    41:59:bf:71:39:08:c3:29:73:42:11:fd:00:29:f6:
                    64:f1:1b:b3:34:20:a8:5d:b4:f9:b2:df:16:f0:51:
                    81:f9:41:5e:31:00:99:f8:3f:c9:be:65:22:e5:93:
                    1b:28:d2:3b:8d:59:af:e7:af:56:98:55:9c:fd:21:
                    74:50:53:7b:ae:01:17:80:44:6f:83:8d:8f:74:06:
                    ea:e2:9c:8d:d0:ed:9a:48:98:b1:39:06:f2:88:b3:
                    e5:05:39:c2:a3:9a:2a:8f:bb:ec:4d:de:52:ac:88:
                    58:62:b1:d6:4f:7e:05:86:48:e4:6a:af:80:70:db:
                    07:9d:bd:56:47:f9:a2:a6:6d:7e:8b:ea:75:0d:19:
                    e8:2d:80:96:a2:fd:0c:ac:71:24:32:66:d5:ac:54:
                    a4:3d:e8:8b:f4:9c:ea:b6:2a:c0:e2:d1:0f:ec:e6:
                    ff:da:18:71:18:17:dd:e4:3d:69:f9:b0:d8:67:19:
                    0d:9b:af:be:4a:07:83:37:f2:1a:21:8b:93:95:2e:
                    44:db:38:a6:69:e1:a5:51:e3:d7:60:55:7c:c5:75:
                    24:ae:cd:76:2b:f4:9d:97:59:44:99:7a:17:fc:53:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:09:F8:DD:5D:12:7D:7C:30:3C:6F:F5:A1:5F:A9:DB:CE:59:E6
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:6e:e1:64:5f:4f:46:b2:43:a1:95:33:49:cd:2c:8a:94:
         0d:e2:41:03:66:46:b3:56:ff:b1:25:3e:39:82:59:5d:7d:ee:
         68:0d:87:69:15:4e:30:06:92:f6:57:55:79:41:59:31:9c:82:
         13:de:d5:77:37:e2:91:8f:b4:81:ff:e9:72:40:bb:b5:8a:4f:
         59:36:7c:f8:35:e1:ec:98:70:56:90:99:f3:1a:6a:90:f3:1e:
         d1:71:29:21:94:e6:68:73:c1:5e:58:72:30:1e:55:91:52:19:
         b9:b9:fe:fc:59:0c:2a:24:ba:4c:89:3b:dd:0f:45:67:3e:18:
         d9:a5:5a:2f:34:53:35:f0:6b:2b:3a:32:e2:ed:c0:ff:5b:6a:
         5b:de:4a:ef:49:5c:4f:ba:d1:e7:00:9a:50:2e:a7:f0:e0:8f:
         41:67:1d:89:69:57:9d:d0:45:48:96:34:7d:78:80:a9:27:00:
         e8:e0:be:3f:4a:93:b0:e2:88:9a:d1:30:ec:63:e1:49:dd:dc:
         92:b7:4c:6d:73:ae:b8:14:c4:5a:02:c2:2f:dd:b5:65:e8:f3:
         c9:c7:d3:83:14:8f:bd:ca:ad:3e:9b:84:12:8c:0b:ee:43:e5:
         a1:5b:38:c0:ba:ef:3c:3d:0c:94:e5:37:e5:d4:cc:b9:cf:3d:
         4f:9b:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:19 2025 by rpki-client