Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File:                     oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier:          wdC/xMAhVNV9eYqoobE5HdppDZFjpft51bzWnlJcfAI=
Subject key identifier:   15:79:4A:CB:02:4C:D2:93:7C:F9:DD:87:C4:0E:4B:F4:52:1F:A8:42
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer:       /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial:       0199FD6ADDA0FBAC7C26C92A10421325B2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 17:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:03 +0000
Files and hashes:         1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
                          2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: HP8dC3pmLzM+VwD+PsDL/RZxcRPmcpjgCviLzTCnxt4=)
                          3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:dd:a0:fb:ac:7c:26:c9:2a:10:42:13:25:b2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
        Validity
            Not Before: Oct 19 17:01:03 2025 GMT
            Not After : Oct 20 17:01:03 2025 GMT
        Subject: CN=15794acb024cd2937cf9dd87c40e4bf4521fa842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:ab:1a:ee:de:0e:aa:19:4c:cd:be:6e:53:
                    6e:b1:27:df:58:42:b6:2b:dc:e1:4c:76:bf:48:31:
                    fb:eb:3e:99:81:72:94:b7:1a:82:e3:6d:9d:48:cf:
                    ec:05:94:1f:f9:3e:b6:fd:1f:d8:cb:80:9f:7a:e5:
                    4c:2a:64:d4:f5:6e:11:fe:28:a4:7b:bc:67:cf:c9:
                    84:5c:30:39:c9:08:f2:5d:d5:88:a4:81:c8:aa:9a:
                    cc:31:dd:76:db:74:74:84:f9:8e:c5:58:a6:7e:7e:
                    10:5d:78:98:d1:57:08:23:d5:b1:2e:f9:95:db:e8:
                    18:a1:2a:4b:0a:5b:a4:26:eb:9d:d5:48:7c:f7:94:
                    f9:45:64:71:98:56:25:40:6c:f7:a0:47:84:a2:9f:
                    ba:27:05:71:3e:35:a1:84:80:a6:ad:fb:de:34:52:
                    8d:26:2c:8b:13:25:43:39:46:b1:2b:5e:5d:c8:c8:
                    10:47:bb:3d:0e:07:dd:f7:8e:9a:89:8d:9c:06:fa:
                    2c:bd:7d:fc:33:b2:d9:ae:57:cb:ad:3b:67:42:97:
                    92:e0:0a:7f:45:bf:c4:9e:01:43:32:da:eb:2e:f2:
                    26:66:ad:77:c5:15:3e:9f:4f:ab:45:5e:68:ab:8e:
                    6e:7a:d9:40:80:13:38:e7:3f:1d:f4:c4:18:32:36:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:4A:CB:02:4C:D2:93:7C:F9:DD:87:C4:0E:4B:F4:52:1F:A8:42
            X509v3 Authority Key Identifier:
                keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:1b:ce:e2:78:60:17:6a:ea:cd:60:2b:80:74:2e:60:86:
         14:d3:2a:2b:03:4f:36:fc:28:7a:89:1e:1e:b8:77:01:0f:bd:
         eb:8b:75:0b:71:58:6f:a5:df:10:a1:f3:1f:9f:bd:e0:7f:92:
         95:8d:78:66:76:32:9e:d7:de:50:c1:53:9c:ca:4e:9f:ce:79:
         dc:25:b9:b9:31:7b:bc:ce:11:39:49:fa:d4:fc:b0:44:ee:68:
         a7:7d:a0:54:5a:24:df:97:2e:ff:68:fc:38:07:22:b2:ad:2c:
         38:38:90:ad:17:69:61:28:d8:8d:07:dd:d6:22:1b:e2:65:28:
         e2:3e:6c:98:61:1e:33:0e:c0:33:6d:bc:97:66:e0:90:e7:df:
         06:84:a4:4f:54:4b:21:b8:b3:e5:ce:b3:e6:02:97:84:c7:37:
         dd:80:3b:bf:e8:f1:26:a9:af:ec:ae:dc:8e:49:93:c1:ba:5f:
         f9:29:40:43:41:59:07:7d:d1:6c:4a:86:98:c1:fa:3e:57:0d:
         f3:10:2c:10:75:70:c2:8c:1a:cd:08:b8:be:26:05:a7:3b:65:
         3a:17:04:75:f1:26:b7:6d:0c:9a:22:82:4b:a0:33:0a:2d:62:
         9d:bf:08:10:3a:9e:8c:96:7e:59:b9:08:41:62:50:cf:76:95:
         48:dc:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:14 2025 by rpki-client