Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File:                     ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier:          gwDSECI7iyvxrfSA6im8kY7f2fsr4ROM1Vi8upNlm7E=
Subject key identifier:   0C:AF:A7:A1:7A:26:73:36:8D:8B:62:9D:EA:9F:5F:2E:39:F8:94:D2
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer:       /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial:       0199FB7D00E73F3233CD172E4E65FC638722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 08:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:37 +0000
Files and hashes:         1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
                          2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: 4UYoqfRV/WllxD4TPf1dtcYVli8HmRa5XalcXdW0Rww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7d:00:e7:3f:32:33:cd:17:2e:4e:65:fc:63:87:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
        Validity
            Not Before: Oct 19 08:01:37 2025 GMT
            Not After : Oct 20 08:01:37 2025 GMT
        Subject: CN=0cafa7a17a2673368d8b629dea9f5f2e39f894d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:b5:0d:7f:fd:9d:39:f4:43:dd:3e:c5:d1:
                    36:4c:34:5c:d8:70:9e:8a:30:af:30:75:c8:5d:0f:
                    03:5b:9e:ea:e5:d3:94:0b:1e:50:9e:96:60:eb:59:
                    c9:bc:4d:a8:62:32:4c:40:3f:a3:75:7f:cb:de:8c:
                    eb:e7:89:29:b1:70:13:6e:08:cc:9b:d0:cb:de:18:
                    82:6e:a8:b7:1f:7a:b9:ee:d7:4e:6f:a6:25:31:51:
                    a2:4e:87:9e:99:e4:9b:e4:0c:53:26:83:09:61:d9:
                    0b:75:70:8d:06:3f:53:b0:0c:48:d5:35:df:b2:c8:
                    4c:cc:da:d1:28:05:5d:ea:fe:68:8c:9c:d6:36:43:
                    6e:ea:c8:5c:3e:6d:96:d2:ab:77:b2:fd:13:d0:14:
                    66:4b:e2:4f:85:e0:e0:f1:63:00:40:55:8a:f2:09:
                    22:7c:c2:b1:49:eb:c6:4f:6b:f4:4d:6f:99:92:89:
                    63:12:4b:a3:49:db:af:a5:05:d7:3d:c5:dd:62:80:
                    f4:9b:c4:a8:65:ee:17:35:24:7f:2a:7f:a3:05:72:
                    97:77:2e:7e:4c:e5:a8:04:92:33:c0:58:ae:74:6f:
                    a0:b0:8d:30:45:a4:dd:44:d5:d4:cd:cc:68:0a:0a:
                    6c:88:f1:44:1e:8c:26:a1:c1:a0:d7:37:9b:19:2a:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:A7:A1:7A:26:73:36:8D:8B:62:9D:EA:9F:5F:2E:39:F8:94:D2
            X509v3 Authority Key Identifier:
                keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:ca:7c:db:af:ea:d3:00:a7:a1:3f:82:fe:a1:fb:75:76:
         90:0b:01:4b:f6:5b:61:d2:32:97:3e:24:16:1a:77:4b:99:39:
         52:bd:24:19:07:00:86:29:5d:a4:56:f5:14:38:c2:ae:d3:b7:
         fb:6d:ad:80:a4:a7:8c:99:ea:07:3c:ad:40:59:cd:f1:f1:16:
         7e:c2:f7:ad:06:dd:85:16:7d:2b:35:74:e4:fb:fe:65:a4:e3:
         79:6b:0f:c6:e7:1b:e1:de:29:44:d7:7b:be:7f:f6:14:17:69:
         d9:b9:6e:a2:a1:b9:e0:13:a5:cb:ee:19:a2:f2:1e:8f:be:ef:
         9a:d0:58:d8:4e:ef:8e:a4:ee:a9:25:cc:7d:d0:06:40:61:9c:
         c0:19:f6:c6:80:fd:ee:f5:cb:02:45:1b:a9:5d:e3:05:47:e9:
         7f:fa:99:b9:b0:ac:46:04:5f:45:69:85:2d:6c:04:47:89:8d:
         44:7c:54:46:8d:1f:4e:d6:f9:f9:3f:28:5d:b2:25:e3:7d:25:
         3e:d0:4c:3c:47:c9:64:d1:78:09:9c:ff:fe:d0:8c:58:f8:12:
         79:5a:16:1f:30:17:a8:a5:c9:b8:c3:e0:ad:80:e5:0c:73:4e:
         cb:85:a5:84:d6:9e:9d:36:d0:48:fb:07:ef:3f:50:d4:7a:c1:
         41:87:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:26 2025 by rpki-client