Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File:                     ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier:          XEeGVjht4jqniiihJWrBrMy9EY7ZKYupZHtbE5K3bkg=
Subject key identifier:   D4:B0:25:AB:9E:AE:69:80:40:47:64:63:7E:54:0C:1B:B4:45:6C:CE
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer:       /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial:       0198D54DCEA5D61AE1614C48EAD891AE5E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number:          15EB
Signing time:             Sat 23 Aug 2025 05:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:42 +0000
Files and hashes:         1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
                          2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
                          3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
                          4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 7bzQ3mo/bkvCl+5A93iHBmThBITziy1I42+OplAgTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:ce:a5:d6:1a:e1:61:4c:48:ea:d8:91:ae:5e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
        Validity
            Not Before: Aug 23 05:01:42 2025 GMT
            Not After : Aug 24 05:01:42 2025 GMT
        Subject: CN=d4b025ab9eae6980404764637e540c1bb4456cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:c8:a9:0b:02:29:13:e4:7f:fc:84:0e:22:
                    64:40:26:72:78:97:bd:a3:7f:92:8c:7e:ff:02:48:
                    8d:61:07:fc:41:d3:ca:36:3a:dc:b5:51:46:9f:95:
                    f6:07:37:f2:91:aa:eb:df:f8:cf:a0:29:01:9d:04:
                    9c:6e:4a:52:d8:fb:04:28:3c:71:b8:c8:f0:c2:42:
                    b4:17:a0:82:8d:c2:02:df:33:77:47:81:db:c0:57:
                    5a:6e:61:e2:a6:c9:06:b9:8e:e3:d5:0b:e4:2d:44:
                    a2:80:fc:d0:0b:b8:f4:68:6f:cf:8b:39:46:24:6b:
                    0a:20:60:0f:05:6c:a0:16:57:be:7c:a3:26:f2:75:
                    da:5f:ae:a2:57:f6:e3:51:76:84:81:f1:a2:1c:25:
                    8f:21:f4:fe:52:f5:13:a3:e0:45:ce:eb:52:97:d5:
                    06:4d:56:55:5c:71:0a:e5:32:65:3f:fb:e4:74:04:
                    71:c6:43:ca:b9:b1:9c:01:35:26:bb:87:3d:c5:70:
                    70:e5:e4:82:05:4d:e9:3d:fd:09:d7:fe:8a:f4:c5:
                    c2:dc:bb:8d:12:a9:d2:eb:0f:37:39:45:01:31:53:
                    3c:d7:37:b6:37:2b:da:d3:56:b2:8f:01:19:50:c7:
                    ce:23:cd:93:8d:7f:0d:9b:61:57:93:ad:92:98:d3:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:25:AB:9E:AE:69:80:40:47:64:63:7E:54:0C:1B:B4:45:6C:CE
            X509v3 Authority Key Identifier:
                keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:fc:08:da:f3:82:73:ad:78:69:8e:f7:48:ff:d3:5f:7e:
         e8:c3:61:0c:c9:f0:34:0d:ca:a0:34:ee:ae:14:1e:5d:ac:8e:
         a9:88:31:d4:25:e9:28:4a:b9:a3:88:37:7b:dd:6f:4d:aa:7b:
         c8:b9:63:3b:0b:9a:9d:39:9c:5c:78:8f:de:ca:36:ee:df:24:
         1e:b6:79:ea:8a:fd:bd:fa:57:78:03:90:e6:7c:d6:1c:1b:14:
         36:b9:5c:87:90:42:99:e8:71:15:bd:bf:d8:78:b0:1c:4d:a1:
         64:4a:81:1e:c9:f6:90:91:5a:f8:fa:73:72:e1:95:9a:92:09:
         a9:4f:03:8d:af:2c:5a:cc:4a:8a:7f:98:d8:4a:0f:e1:38:a1:
         cf:ef:76:cc:a9:1b:8d:65:0d:7a:eb:9a:5a:e1:00:8f:9f:9e:
         e8:70:4c:c9:97:f5:20:3c:7c:74:ba:90:1f:cc:d0:e8:2d:37:
         25:e8:f1:ea:b0:5c:81:66:46:72:37:23:b6:33:a0:c9:fe:d5:
         3a:6e:ad:b7:e3:00:3f:9c:d1:40:eb:16:9e:3c:c5:36:c6:bf:
         a8:55:ef:f7:24:42:81:59:f2:ce:3e:2b:f0:c3:42:50:5b:20:
         de:5f:72:f8:5c:c9:1c:06:a4:e3:38:38:17:0f:6f:7f:1f:8a:
         7c:7e:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:07 2025 by rpki-client