Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          tFf6rmBClTRjvTkXt5te+Kilsy0GFspUZDLwSYNcSSc=
Subject key identifier:   0C:96:C0:E9:AA:93:04:36:EF:8A:AC:E1:4A:1F:76:33:A7:58:FD:C4
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       0199FAA15159AB9C2745623D77AAF45318F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          1483
Signing time:             Sun 19 Oct 2025 04:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:39 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: cudpv4gu2ZFy/61NGTOUZVh6a5BV6Lx01QvkMQV6MPA=)
                          2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:51:59:ab:9c:27:45:62:3d:77:aa:f4:53:18:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Oct 19 04:01:39 2025 GMT
            Not After : Oct 20 04:01:39 2025 GMT
        Subject: CN=0c96c0e9aa930436ef8aace14a1f7633a758fdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:10:bc:03:54:e0:ed:ef:23:d4:bc:be:42:
                    02:5b:31:80:63:91:85:47:8c:c8:6c:8c:5b:09:85:
                    50:f2:d1:12:d8:a2:00:35:23:a7:34:7e:e8:71:90:
                    39:10:23:2e:2b:b1:bf:89:47:68:d6:f3:72:bd:e1:
                    d7:dc:14:10:24:eb:e8:15:9d:3d:b5:e7:c0:44:fb:
                    e0:58:b3:af:cf:20:a0:19:66:c8:71:9e:c9:fc:ad:
                    43:e1:c1:bf:76:c6:e2:5c:4d:24:d6:cf:92:4d:c0:
                    ed:a5:c7:ff:d1:7a:21:75:26:ed:d8:5e:ae:89:57:
                    82:0b:d4:01:3b:41:9e:4c:89:ff:a9:b0:18:51:a2:
                    b9:94:bc:61:0d:fe:96:9e:5c:11:1a:93:97:e3:02:
                    b5:bd:a8:f2:ec:73:fb:d5:29:dc:ac:a9:18:9c:37:
                    e9:b5:2f:89:97:cd:c3:49:41:60:31:7e:c4:06:a9:
                    0a:0a:b7:fa:27:a0:b2:83:a8:15:20:da:7d:40:69:
                    38:45:e7:f7:e7:e0:e7:84:0d:75:ee:d6:e6:39:a7:
                    f3:fa:5e:da:a6:9c:d2:6e:e9:9c:df:ec:91:21:c1:
                    8e:43:6e:d8:9b:d8:52:2a:55:c0:a7:1a:74:5d:99:
                    5c:f5:5b:27:2a:c9:ff:94:0d:d7:14:10:88:f4:28:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:C0:E9:AA:93:04:36:EF:8A:AC:E1:4A:1F:76:33:A7:58:FD:C4
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:08:ad:f1:59:3d:b4:cb:d4:cf:5b:fe:13:b5:69:cf:c4:
         b0:6c:84:6a:87:af:1f:5b:41:90:57:81:83:97:b1:60:e3:e1:
         ee:65:95:4a:d2:c2:00:9a:76:b7:44:a7:cb:b8:58:1b:3b:7a:
         a0:66:d8:d6:0e:f8:fb:e5:fb:96:c5:72:e9:74:9b:9d:f2:75:
         4e:53:3c:ea:89:21:e6:f2:bf:86:ba:d5:4b:b9:a6:0b:7b:24:
         50:06:71:33:5f:c1:43:b6:c1:9e:61:0f:95:6e:0b:f8:d1:9b:
         f4:25:c4:12:1f:01:7d:65:7f:b0:49:a5:3f:44:cd:bb:b9:e6:
         ae:9b:b1:76:b3:02:09:7d:a1:ba:64:58:ae:a7:3c:ac:d0:88:
         5c:1c:8f:56:f2:c6:dd:91:07:68:67:63:44:54:b0:5f:06:57:
         4f:57:27:5a:20:0e:89:eb:8e:46:e2:a6:53:a2:90:c7:7b:94:
         3f:c5:c0:81:4b:d6:0e:0a:fe:e7:64:2d:ac:0f:9b:4f:0b:90:
         cb:d8:22:05:56:6e:00:65:7e:f3:f7:59:0b:5d:7e:1b:b8:41:
         3c:5b:68:5a:91:51:28:94:ab:f3:63:98:a9:aa:48:ea:cb:50:
         19:b5:ba:60:87:48:98:f8:41:b0:8b:0e:0a:11:c3:31:e8:61:
         7d:5d:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:50 2025 by rpki-client