Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          EQx1iYn8klagtb7pquf4LnB1rNOqw3gobJ9+A/ukX8U=
Subject key identifier:   20:0E:D0:9E:5A:76:EC:5B:5E:55:1E:12:BA:E4:B1:22:FD:D5:EF:63
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       0198D54E48D5966D16223B3ADE5758FCF75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          130C
Signing time:             Sat 23 Aug 2025 05:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:13 +0000
Files and hashes:         1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=)
                          2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=)
                          3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: V/N6uGN2YDZn9hVmNrst7TcKB+o3gX1i5Lw/H/+Bu1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:48:d5:96:6d:16:22:3b:3a:de:57:58:fc:f7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Aug 23 05:02:13 2025 GMT
            Not After : Aug 24 05:02:13 2025 GMT
        Subject: CN=200ed09e5a76ec5b5e551e12bae4b122fdd5ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:5f:a4:07:d6:aa:06:29:5a:b5:f6:a6:b3:
                    34:5b:f8:f7:39:6d:a4:a6:8c:59:78:9b:6b:1f:c3:
                    c0:ed:a6:e0:aa:c6:ef:b5:27:6c:27:b4:a6:4f:a6:
                    c6:fe:4c:c1:90:02:84:01:80:56:64:70:9c:49:c8:
                    e4:4e:3c:af:41:94:ff:52:3f:6d:06:a8:05:d7:47:
                    af:3d:73:fd:10:7e:3f:6b:9d:89:72:aa:a4:d1:1b:
                    fb:e9:56:e2:c3:e8:35:bd:f4:51:ec:75:2d:72:a1:
                    48:e5:76:48:80:80:01:17:22:00:f7:b8:7a:86:9c:
                    e2:e2:95:92:63:fa:88:99:14:77:d2:76:92:36:ca:
                    f0:04:47:b5:ed:22:24:73:5a:81:14:fb:f2:42:0a:
                    9e:92:8f:de:5e:5d:11:71:ba:24:5a:e0:d7:a3:ec:
                    27:6c:83:c0:c0:e7:4c:f0:0d:90:64:f7:bd:81:f1:
                    bc:5f:1d:69:53:f4:01:d9:7d:1b:f2:85:a8:5f:e8:
                    48:83:f0:91:b0:c4:8a:36:e9:67:14:89:8c:f5:28:
                    b7:5f:b6:42:e2:45:ca:3c:52:f2:3f:32:47:d8:bc:
                    f9:d4:8c:33:a8:f9:65:e6:a3:d7:8d:b8:12:14:e1:
                    62:b0:01:96:42:0d:c1:07:9e:f7:40:dc:f8:ab:26:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0E:D0:9E:5A:76:EC:5B:5E:55:1E:12:BA:E4:B1:22:FD:D5:EF:63
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:02:7a:2c:b4:bd:74:af:47:d9:a0:db:d6:71:ad:27:d4:
         a3:6f:59:6a:29:d6:e4:ed:da:05:b0:21:43:97:e2:dc:39:92:
         e1:bf:8c:7a:73:8c:a9:96:0e:56:c3:64:5b:1b:79:fb:03:f9:
         fe:25:5a:a1:0e:72:cd:8a:e5:70:aa:c3:e6:40:bd:3e:3a:66:
         af:8f:af:a9:50:5e:84:59:1a:21:7d:e7:31:5b:23:3a:ac:fa:
         63:1b:dd:72:51:0a:47:10:f7:a2:4d:8f:68:5f:3b:28:d5:14:
         21:26:3f:f1:d9:be:76:ef:f2:7b:00:5d:6c:a6:94:19:96:a5:
         07:3a:99:6d:50:71:a8:bd:e5:e5:45:85:39:d7:2a:1d:0b:66:
         4c:80:7e:3f:b4:c4:ee:c0:05:46:52:bc:a9:16:cf:2f:05:53:
         c6:a9:6e:91:84:20:15:86:ce:ab:b9:9e:70:fe:1f:7d:6a:6e:
         76:69:cc:51:9e:c0:79:d4:e6:b7:21:08:3a:ff:0b:e8:5a:a8:
         a9:68:2d:06:15:28:91:d3:80:c0:7a:78:51:c4:57:c1:5d:32:
         2c:d2:f0:16:1e:04:e0:f2:d3:b9:24:a7:0a:c0:b8:3d:48:c7:
         de:41:72:19:ac:b9:82:8b:4e:0b:50:55:08:d7:f8:98:83:d4:
         1a:50:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:46 2025 by rpki-client