Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          IV+wU/+ooic4gQTvsoeLQezknk9CPhxHhWYKgkfsDhE=
Subject key identifier:   12:1C:B4:F2:AD:9E:A1:DC:14:55:89:EE:F3:86:CC:C6:BF:4D:7F:BC
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       0199FAA1259A4936E4C033B77D46DC776E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          10DB
Signing time:             Sun 19 Oct 2025 04:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:28 +0000
Files and hashes:         1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: H4slGTpiummciD81mvOd7OZa2c03tA3QFYKmkhIlPlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:25:9a:49:36:e4:c0:33:b7:7d:46:dc:77:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Oct 19 04:01:28 2025 GMT
            Not After : Oct 20 04:01:28 2025 GMT
        Subject: CN=121cb4f2ad9ea1dc145589eef386ccc6bf4d7fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:22:48:e2:4c:ab:13:fd:9a:86:b7:26:8f:
                    1c:b7:e4:42:26:11:a2:ae:6b:95:4a:f4:9b:01:3b:
                    66:ca:85:b6:97:94:49:8d:cf:85:58:5b:42:9d:5f:
                    b8:6b:82:25:90:7b:b8:4c:0f:c5:5e:ee:2c:48:db:
                    0f:24:55:12:cb:0a:d1:51:2a:98:e7:e2:2b:0c:c7:
                    d3:f9:99:83:6d:e4:14:50:11:9b:dd:6f:52:19:f6:
                    aa:a3:f3:7c:c2:cd:9d:ba:e6:06:a4:cb:0c:ca:e3:
                    c1:e8:29:2a:54:b5:0c:04:fe:4f:68:9f:b0:8f:6c:
                    43:f3:69:92:c4:0e:7a:f0:cb:48:b8:63:8d:1c:75:
                    88:5e:0c:ad:b5:b0:18:d9:c7:50:49:9b:22:31:e4:
                    6f:00:f9:e5:b7:6b:9f:8f:4c:e4:80:82:26:c7:00:
                    bb:bb:b3:12:35:1c:6b:9d:15:95:93:2f:43:98:70:
                    5f:df:0c:66:ab:93:5b:0c:74:e0:29:67:69:55:2e:
                    cb:b8:dd:b1:ba:a6:6e:f3:ee:26:b5:dc:b0:3c:66:
                    f7:43:49:31:a2:24:90:6b:ea:ee:de:fa:74:e0:aa:
                    7c:62:c5:eb:76:7a:1a:21:79:aa:67:d2:e0:fb:ac:
                    0d:bf:58:ce:7d:98:51:8c:4e:1c:60:a7:2d:83:33:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1C:B4:F2:AD:9E:A1:DC:14:55:89:EE:F3:86:CC:C6:BF:4D:7F:BC
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:d5:46:af:ab:1d:59:b9:64:51:f3:16:64:f6:d1:81:f1:
         0e:c8:e5:c9:cc:d3:ff:d8:5b:18:8a:d7:3a:2b:20:d3:26:4f:
         c5:2e:b6:44:4f:1e:57:96:9c:b3:fa:bd:14:88:e3:9c:a8:66:
         d6:32:37:16:09:7d:34:32:6c:b8:56:f1:15:24:ec:8e:88:28:
         cd:88:aa:95:9a:74:f1:e9:70:65:22:7f:d7:35:f8:7a:2d:af:
         17:7b:ec:a4:0b:4e:0c:58:e1:5b:9c:7c:83:d8:95:b3:30:21:
         c9:95:1e:40:42:ed:a6:76:96:43:e9:d0:20:78:cc:78:8b:06:
         3b:ce:54:4d:42:2b:81:b8:2a:e1:be:3e:95:6c:a1:66:87:82:
         ef:c1:ff:de:08:c3:0b:ac:57:22:13:73:cc:e2:a7:b4:f3:78:
         b2:36:80:db:58:60:c0:3f:e1:ef:87:1c:c4:5a:33:f3:30:ad:
         97:a1:07:57:66:70:37:c5:34:5c:68:66:84:30:bb:46:78:ec:
         1e:1c:58:b2:b4:6b:eb:3b:94:35:e2:88:63:93:e4:7b:e2:1d:
         83:7c:af:87:f5:44:ec:03:a4:24:40:a0:28:c6:d2:36:a5:a8:
         27:e1:21:b5:3d:60:e1:a1:db:a3:5d:51:c8:b7:ba:d0:ca:cc:
         8a:eb:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:03 2025 by rpki-client