Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File:                     oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier:          ZaoWZUG0DstFA/OJzNG7C+nG4U4DWkq3Iw18hATj7hg=
Subject key identifier:   0C:5F:48:AD:E5:49:34:67:B4:64:BE:1C:6C:0F:0D:CC:F0:EB:E9:64
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer:       /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial:       0199FB7CDE3CCB3951CA5B387979142D3142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number:          0F7B
Signing time:             Sun 19 Oct 2025 08:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:28 +0000
Files and hashes:         1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
                          2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
                          3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: m8xkBmYzpr2i1ewjkqN6lNZSGO8Gtwq++KwoIeEonDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:de:3c:cb:39:51:ca:5b:38:79:79:14:2d:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
        Validity
            Not Before: Oct 19 08:01:28 2025 GMT
            Not After : Oct 20 08:01:28 2025 GMT
        Subject: CN=0c5f48ade5493467b464be1c6c0f0dccf0ebe964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:c9:9b:bf:5a:a6:cd:33:f7:d8:83:f6:03:
                    98:a1:85:ef:98:06:1c:d8:7c:7b:a7:e2:67:e6:87:
                    67:0a:b6:51:33:46:e1:22:2c:ed:ca:b5:9d:e5:80:
                    36:3b:13:da:fe:71:e6:f6:fe:64:67:ad:82:f2:61:
                    41:63:8d:c1:fc:94:0b:48:62:35:f8:9e:db:61:3a:
                    69:80:59:70:61:65:78:69:9f:cb:25:ac:15:a8:6d:
                    6f:29:f8:8c:90:61:f3:eb:3a:aa:bb:fc:b8:b8:92:
                    9c:b7:bb:bf:77:24:cb:20:aa:df:87:3a:4e:3e:c6:
                    45:8e:ea:92:5d:4f:08:a1:4c:66:c8:a4:56:6d:fe:
                    6d:ab:c4:13:e4:c4:13:09:0c:ee:88:c4:1f:fc:61:
                    cc:17:bb:e8:8a:52:f1:3a:e4:23:fd:96:43:8c:57:
                    0a:e3:f7:53:89:eb:d7:ac:01:53:49:ae:ad:d3:68:
                    62:b2:d3:0e:97:0f:bf:37:55:10:82:f5:54:a4:db:
                    df:d2:39:a0:3c:c0:2a:17:70:ea:31:a2:96:79:60:
                    a3:7e:14:e6:d1:1c:e3:84:19:68:08:91:fd:3b:df:
                    42:64:7f:c2:9c:09:6c:15:9c:06:8f:e6:d7:d1:e4:
                    d5:28:38:85:6d:f9:46:b7:f1:50:b0:05:20:23:76:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:48:AD:E5:49:34:67:B4:64:BE:1C:6C:0F:0D:CC:F0:EB:E9:64
            X509v3 Authority Key Identifier:
                keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:d4:f2:40:bd:31:cd:ab:26:7a:d8:a0:06:f5:f6:fc:f2:
         f6:91:a2:d7:47:43:e4:a2:a0:02:c6:04:3f:3d:8b:47:2a:0a:
         c1:04:73:6d:9b:71:69:81:17:05:1e:5d:78:ca:83:66:30:7d:
         17:0a:81:45:32:21:85:a5:46:53:9a:24:71:8b:98:c1:ba:a7:
         eb:a2:c0:bc:5c:46:a5:20:c0:cc:c6:0e:57:61:11:a6:7f:cd:
         b5:c2:d1:3f:40:c5:b8:2d:b5:19:1f:0c:83:0b:55:47:4d:ec:
         be:fb:cf:47:d6:ba:68:2d:f5:5a:70:ec:45:16:16:7b:e4:5c:
         11:ff:0d:1a:fa:6f:c5:d3:81:88:51:bb:7c:ca:7a:a2:71:6d:
         16:ce:b2:58:77:df:b4:df:48:d1:85:96:6a:c1:46:6f:ac:e2:
         10:c5:6a:7c:bf:b9:c2:ed:ae:b1:62:e1:6f:fd:ea:26:f1:46:
         85:d0:c1:ba:92:86:56:f0:48:75:a2:25:ab:2c:d1:fa:1d:a6:
         a0:17:cd:33:04:28:d5:2e:53:a9:1c:9f:b7:bd:13:83:08:a6:
         04:d1:23:71:a5:7c:9e:e2:19:50:8d:6a:74:d5:55:ab:f8:fa:
         68:cc:71:34:79:34:b8:95:8b:4f:25:2f:ef:a4:7f:35:db:c7:
         e0:8f:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:04 2025 by rpki-client