Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          OZiSn2bgdGLPIbNTU0o3/3+BxBnxwKj/eDHuxlqIe4M=
Subject key identifier:   49:D5:8B:BE:EF:46:9D:C4:30:76:40:14:B9:CB:00:DB:D5:F3:91:E5
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       0197B6A1B327387B835262BFF1C18CFBA7CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0631
Signing time:             Sat 28 Jun 2025 13:02:19 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:19 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:19 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: QVvkGf9s3TeLcxAvsAs3GNAVmvejChccmvLP47vYy88=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b3:27:38:7b:83:52:62:bf:f1:c1:8c:fb:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jun 28 13:02:19 2025 GMT
            Not After : Jun 29 13:02:19 2025 GMT
        Subject: CN=49d58bbeef469dc430764014b9cb00dbd5f391e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:2f:d7:71:95:90:77:13:0e:ee:59:c4:2e:
                    13:57:ba:6e:a5:79:e5:01:f0:2f:19:c6:64:ec:8d:
                    cd:7e:45:68:55:73:8a:64:44:f5:55:29:f9:a9:a7:
                    4f:3f:c2:7f:7f:39:ee:79:62:a8:95:df:1c:de:39:
                    87:60:92:5e:5d:c2:a1:53:da:db:63:80:ae:26:4b:
                    d4:b5:be:a1:67:d9:34:37:49:14:89:c8:2b:f5:9f:
                    59:e9:e8:85:be:e1:c0:c4:90:37:b6:aa:e9:04:5b:
                    2b:5b:bc:22:65:ab:b7:c7:16:6d:46:ad:bb:ff:50:
                    4d:02:e5:1b:9c:66:75:c0:ea:ca:40:ad:6b:7f:d2:
                    a9:50:68:b9:a9:3e:a4:0b:bb:94:91:d4:48:de:51:
                    1b:13:4e:b6:82:73:e0:0e:8b:ce:8a:40:42:20:1e:
                    46:46:81:1d:2d:5e:cf:a1:00:0b:2d:50:f5:0c:eb:
                    d7:00:b9:36:b9:a1:f0:fa:4a:cb:0b:0f:f7:7b:75:
                    09:30:f6:73:bd:42:02:bf:35:e5:fd:bb:88:5d:63:
                    2a:f8:18:2b:3b:d8:96:5c:e6:a6:26:fc:75:6d:85:
                    ca:aa:8c:92:6f:9f:56:40:04:c7:56:30:2f:b8:ae:
                    de:91:c7:db:47:1b:1f:cf:db:df:da:26:bd:e7:77:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:8B:BE:EF:46:9D:C4:30:76:40:14:B9:CB:00:DB:D5:F3:91:E5
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:49:02:ef:ad:13:9c:f4:61:b0:7f:96:9f:ab:09:60:8e:aa:
         d2:38:c0:1a:56:8e:3a:26:71:8b:5d:a0:01:86:6a:88:e0:0e:
         9e:8e:40:8c:d7:80:4e:48:4a:48:43:b5:65:d6:27:b8:5b:5a:
         cc:50:cc:9a:9c:a5:17:5d:0a:20:b6:27:d5:cc:d7:78:20:0f:
         d6:c6:e2:8e:d9:9e:bc:46:51:c1:b4:4d:89:1b:51:8b:ff:45:
         04:57:ed:89:9f:76:e9:e8:37:4f:dc:18:06:15:3a:ab:8d:33:
         52:92:6e:1c:60:8a:2a:90:ab:c4:aa:b4:ad:07:d9:5c:75:4c:
         66:15:44:45:05:c2:b9:e7:09:6a:77:77:c8:bc:1c:a3:e3:39:
         cb:61:87:2a:ce:85:7f:78:8c:f1:90:a6:c9:11:11:5a:5a:36:
         cf:43:d1:3a:18:37:65:32:11:9e:dc:63:16:83:20:30:a8:54:
         3e:20:d3:d2:44:4a:e1:dd:6e:3d:10:08:d9:01:1f:66:53:d4:
         3a:0a:96:8d:37:30:a7:8d:eb:ce:6e:d4:aa:3c:f4:be:46:5e:
         b0:46:fc:fa:7d:e4:e1:2e:5a:6d:df:02:56:91:ad:82:fa:65:
         e8:8a:2d:4d:6c:5d:fa:3d:7d:08:b2:bb:5d:b6:ea:ea:b1:b5:
         9b:d0:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:43 2025 by rpki-client