Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          KKE/dhel5MH+TwYwINHvDs5vkZRY4ncegoxnNLrxxX8=
Subject key identifier:   78:57:04:EA:47:8E:5D:15:3C:EE:1E:C0:04:14:96:E8:96:9D:54:CF
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       0198D47491BA2E2CABB7969CF95690A91F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          06C5
Signing time:             Sat 23 Aug 2025 01:04:25 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:25 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:25 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: vMtsA0A97tyMP9rMYFw1Dic4c3xuvky8PEynGFPfhqQ=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:91:ba:2e:2c:ab:b7:96:9c:f9:56:90:a9:1f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Aug 23 01:04:25 2025 GMT
            Not After : Aug 24 01:04:25 2025 GMT
        Subject: CN=785704ea478e5d153cee1ec0041496e8969d54cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:19:03:8a:da:4a:e4:57:c5:e8:e5:ad:3f:
                    fe:c2:b3:c8:98:31:8e:e2:db:14:b1:74:85:5c:0d:
                    a6:3f:3a:50:b3:e0:de:ad:53:a9:a3:15:9c:31:c0:
                    19:52:64:24:ef:91:bc:69:ae:0c:b4:eb:6b:1e:3c:
                    46:43:43:0d:86:e7:c6:3f:27:a7:64:1b:f4:8c:4a:
                    f9:af:e0:38:88:2d:0f:08:49:ee:79:5d:c5:46:df:
                    dd:99:25:ad:28:6f:bf:2d:9e:a1:0f:e6:05:53:30:
                    2f:ff:5f:d7:21:42:71:3b:f2:de:cb:57:06:06:d4:
                    b3:be:aa:5f:4b:39:df:ec:db:88:b6:85:8a:2c:67:
                    17:cc:7c:cc:7d:85:f4:cc:d8:52:10:ec:4c:5c:56:
                    63:ae:df:cb:3a:c9:d0:98:cd:e0:f6:db:1a:3b:fb:
                    2c:36:35:16:e9:c8:e4:ef:b2:0b:88:42:e6:24:21:
                    fc:6e:b3:83:58:61:b0:76:41:d3:1e:b8:66:11:12:
                    5c:de:a0:1f:b4:05:27:4e:50:b2:38:da:5a:5a:82:
                    53:6f:35:b9:c2:ff:aa:50:e3:5e:11:5c:7d:4c:e7:
                    50:bb:7a:f0:cd:2c:45:14:56:69:20:92:4a:69:10:
                    9b:d2:80:0c:04:1a:3c:5a:1e:40:f3:9b:e8:f2:ba:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:04:EA:47:8E:5D:15:3C:EE:1E:C0:04:14:96:E8:96:9D:54:CF
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:05:ef:d1:3a:fc:1d:5f:e9:42:0b:9d:ee:b3:e4:3d:0a:
         8b:b4:23:c1:e2:3e:39:70:b0:83:6b:9d:ce:b7:09:9a:2a:69:
         2c:ed:8c:85:4b:7a:90:af:28:5b:41:b2:78:89:a1:83:66:7e:
         a1:3c:c8:ef:be:2d:e0:e7:56:cf:54:50:b4:bf:da:a4:a3:6a:
         a4:4b:3d:fe:08:f6:71:fe:01:7a:2a:66:20:f2:ea:37:79:8c:
         38:1a:bc:50:14:88:05:6b:96:99:15:f4:f9:a3:f5:05:ab:ff:
         fc:13:8b:3b:2d:bf:69:4f:99:f0:b8:5e:44:93:1c:88:e7:6f:
         2d:b9:4d:65:b3:09:30:1a:c0:99:08:58:53:03:68:08:c9:61:
         08:d6:0b:e5:b3:8a:89:c7:f7:03:9b:71:a2:2e:e9:8f:8e:37:
         25:1e:66:b7:87:f6:af:ca:5c:1e:a5:ed:4d:65:c9:84:c4:bc:
         1c:e7:09:f4:5d:1d:ea:28:c6:3d:7a:94:ea:d5:f6:1b:40:ae:
         d7:be:f2:09:47:bd:74:0f:a1:9a:f3:ed:a3:84:fa:99:cf:5e:
         9f:58:65:bf:51:92:09:97:64:6d:3c:ed:7e:3d:34:07:93:f3:
         da:a7:52:3b:16:9e:df:68:c3:ca:18:df:f0:24:f3:e6:86:54:
         cb:8c:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:41 2025 by rpki-client