Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          xKLedKeoxnWyutZZiS/41VWiNc1aTQbx/JHDKMjoBfQ=
Subject key identifier:   6A:90:F3:12:89:0B:60:5F:42:23:80:4A:55:2D:7B:70:20:98:18:94
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       0198D5BC2FA0CA9FE56B078E4C9F466D2B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          07B3
Signing time:             Sat 23 Aug 2025 07:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:16 +0000
Files and hashes:         1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: h9hzhR5zcKdICYjru4oD9a1XibxkWYAc0QlW4d/fflo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2f:a0:ca:9f:e5:6b:07:8e:4c:9f:46:6d:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Aug 23 07:02:16 2025 GMT
            Not After : Aug 24 07:02:16 2025 GMT
        Subject: CN=6a90f312890b605f4223804a552d7b7020981894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:36:ce:64:b7:3c:f7:d4:9d:f7:cb:a2:51:
                    52:4b:8a:06:b5:52:db:2d:08:35:f7:5b:8d:fc:71:
                    5a:d0:e1:3e:d5:87:08:2c:7a:3a:20:41:b5:90:95:
                    2c:0e:40:6a:b9:49:08:fd:85:1f:77:fc:d6:94:2f:
                    54:73:65:b1:56:a8:98:1b:4e:0e:3d:f7:67:93:61:
                    22:14:94:35:64:3c:c8:f8:67:2d:bd:ec:c2:df:10:
                    8b:3e:96:3e:10:1f:93:60:54:8e:bb:ca:28:6a:87:
                    cc:67:3f:0d:4a:7c:6f:0a:2e:ba:c2:dc:c0:cd:86:
                    9b:b6:fc:54:53:87:be:ea:d1:d5:e0:d3:40:a1:bd:
                    10:a8:fd:6c:30:9c:37:53:72:b5:78:e7:bc:1f:e5:
                    f0:a6:c6:7a:8f:85:db:1a:d2:44:b4:a9:52:36:a3:
                    ae:e0:0e:5b:21:af:56:85:a8:1b:e8:23:3f:73:5b:
                    ea:28:d7:87:83:68:ca:76:36:51:3c:30:93:7c:76:
                    39:20:fb:6f:3e:bc:b1:b7:4c:69:f0:63:f2:a8:b4:
                    74:58:2a:81:52:8f:6c:31:b3:c1:e9:45:c9:17:d0:
                    8e:e3:01:82:75:19:d9:e6:af:7b:72:25:ba:42:4c:
                    96:86:df:d8:55:9f:d8:f0:c8:51:4b:2f:7c:5e:2d:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:90:F3:12:89:0B:60:5F:42:23:80:4A:55:2D:7B:70:20:98:18:94
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:85:48:6b:cb:bf:a1:51:1f:90:6e:2c:6b:47:8f:42:8a:
         7c:62:28:37:0e:58:78:cd:df:db:77:b7:20:4a:02:c4:62:96:
         4f:4d:ed:7a:02:72:59:64:11:39:f5:cb:60:8b:ae:e2:5f:7b:
         42:3c:0c:e2:e6:cd:30:bf:43:33:ff:fe:21:a1:ac:65:19:c7:
         9f:eb:42:30:5f:f4:c8:39:f5:0e:9a:4d:dc:e7:bb:c5:79:80:
         02:87:1d:71:d9:ba:4b:e4:b5:74:2b:62:f9:4a:89:81:7a:46:
         8c:16:c7:4f:66:c2:d9:4e:7b:02:3b:5e:ea:34:8b:e4:fd:08:
         7c:b7:45:19:23:4e:21:1d:94:a7:57:ee:2f:99:75:13:68:71:
         fa:4f:09:af:6c:32:89:26:19:5b:69:66:5f:f2:f5:35:2a:d6:
         55:83:b8:2d:df:02:c6:b0:cf:25:0d:a2:08:b1:d9:05:26:aa:
         3a:70:3d:d9:86:df:20:47:79:b7:38:ef:7b:65:33:a9:1b:4a:
         dc:5d:58:f0:8d:99:e5:6e:0e:57:bc:a9:97:3a:71:d5:37:00:
         3c:df:43:fb:5e:9c:4e:0e:32:08:7f:f0:db:37:18:9f:1d:32:
         75:77:eb:dd:e2:8a:cd:a7:96:a4:1a:4d:64:71:6b:05:05:fa:
         8d:91:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:57 2025 by rpki-client