Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          11dcSusiAUO23d7M8buWM5s3Xgw53O6Ej4f7wEfEn08=
Subject key identifier:   94:D0:7A:30:EB:BE:67:D4:AA:98:27:D4:B8:6B:DC:0A:FD:C9:8E:0D
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       0199FFC761D701046D194A182AFC5EEF12D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0760
Signing time:             Mon 20 Oct 2025 04:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:20 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: /Cf8hUlleR200qX1qI3Ha8325aihjQSFE1RUeZagkaE=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:61:d7:01:04:6d:19:4a:18:2a:fc:5e:ef:12:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Oct 20 04:01:20 2025 GMT
            Not After : Oct 21 04:01:20 2025 GMT
        Subject: CN=94d07a30ebbe67d4aa9827d4b86bdc0afdc98e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:df:03:cf:75:4e:b1:d4:fd:bc:a6:db:7e:41:
                    74:2b:d7:84:5e:d8:b0:26:8c:f7:36:67:ab:01:dc:
                    f2:b7:18:66:8f:d8:7b:3f:ba:98:ce:18:97:83:a2:
                    46:9d:8a:f1:80:f1:18:10:ca:33:03:94:ea:ff:3c:
                    29:69:1a:e1:1b:0b:75:0c:be:43:c0:38:a8:d8:ca:
                    ae:a1:0c:60:88:01:65:4e:5a:5a:61:a8:e2:5c:f8:
                    56:7d:b1:fe:7e:96:4d:15:3f:16:44:ea:de:ab:00:
                    30:1a:37:90:1f:ed:f5:19:8f:65:03:fb:00:7c:fa:
                    2d:b7:da:e3:18:96:89:6a:b4:9a:ca:99:5e:f7:78:
                    04:c8:91:ed:70:c6:3a:00:89:38:db:53:24:62:2e:
                    dc:de:3e:60:41:6b:94:55:06:9e:fc:ed:5e:95:4d:
                    05:5b:ad:c2:40:02:10:ee:84:4f:8b:aa:d1:0c:fe:
                    3f:f0:34:7d:f6:84:67:b0:a4:be:25:2d:f8:ee:4d:
                    f2:7a:d6:31:08:f0:49:2e:f7:e0:3d:02:15:d8:a6:
                    b4:d6:f4:78:cf:20:71:29:68:31:13:34:02:28:79:
                    57:a1:5e:0a:e5:da:37:8a:46:50:9d:2a:f9:2c:94:
                    cd:60:d5:39:7e:2d:03:6a:87:d7:14:dd:a6:cc:91:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D0:7A:30:EB:BE:67:D4:AA:98:27:D4:B8:6B:DC:0A:FD:C9:8E:0D
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:2d:71:85:d9:7b:4d:98:60:3c:1f:ed:23:31:5f:94:40:
         38:c1:ba:ab:bb:27:f5:a4:da:28:ab:2a:2a:88:04:83:27:62:
         ef:a0:98:0f:ae:39:74:e6:bb:ac:2e:c6:12:3a:22:f4:39:e3:
         5a:18:7b:41:61:d5:45:da:45:43:cb:d1:25:83:4e:0c:3a:82:
         0c:d4:ad:12:ac:67:b0:d4:75:b6:64:78:4f:32:ff:7a:4d:5e:
         0f:67:8d:2d:d0:5e:58:35:5d:a6:27:35:66:3e:ad:53:83:65:
         25:f7:d8:f7:2a:85:e1:54:27:38:8a:ec:88:fa:cc:1f:a8:db:
         ad:f4:e5:a2:6b:31:f7:36:4d:f0:56:40:c1:1d:27:cf:21:11:
         77:9b:e1:63:ce:19:1d:c3:f4:d0:70:99:6f:dc:9f:8b:ae:3a:
         2d:a4:7d:8b:ae:68:bf:67:5a:2e:25:0b:82:9d:a1:d3:b6:93:
         71:25:1e:1e:3f:41:8f:c7:5f:aa:87:71:fb:cd:41:d7:56:fc:
         fa:b0:fe:41:6d:04:27:54:a0:b1:94:fb:af:64:cf:52:a9:e2:
         5a:4e:de:f2:4b:37:a4:ba:b6:63:53:69:d7:84:1c:d0:bd:a3:
         21:d6:ab:d9:e9:8c:3f:11:41:c8:1b:9e:81:71:45:2a:28:6f:
         a9:e0:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:31 2025 by rpki-client