Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File:                     ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier:          BPsXeda4VTfT3nwPqY7pcl0E6rkiWqc5aWYnWYy0S1o=
Subject key identifier:   55:11:E9:83:2F:7D:73:13:E0:36:10:A8:3C:64:DE:FA:F9:AB:49:7F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer:       /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial:       0199FCFD19D7F598EFB1301E5494E627D36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 15:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:09 +0000
Files and hashes:         1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
                          2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
                          3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: RSLM9M4RObiK/jwUDaJVdeITLBDKY8hSz3SR7W4xTgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:19:d7:f5:98:ef:b1:30:1e:54:94:e6:27:d3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
        Validity
            Not Before: Oct 19 15:01:09 2025 GMT
            Not After : Oct 20 15:01:09 2025 GMT
        Subject: CN=5511e9832f7d7313e03610a83c64defaf9ab497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:12:61:c9:64:1d:29:e1:61:6a:d7:d4:7e:
                    88:b1:a6:87:5e:ef:6a:28:18:69:51:84:1b:34:99:
                    0f:09:69:03:e2:c2:f8:67:44:fb:60:fb:72:4d:d1:
                    8b:11:ae:1e:4d:8d:17:03:18:e7:a3:d6:96:17:a2:
                    41:cf:3a:3c:e3:46:6a:14:9a:46:0e:24:68:d6:fd:
                    80:c6:0e:ac:e5:7a:07:5a:e5:19:de:8b:4f:23:e8:
                    65:7e:79:47:1f:a6:bb:63:d3:21:91:f4:2c:6b:a6:
                    21:c1:50:70:ea:bb:5d:d6:3d:e8:32:b7:73:5a:9e:
                    a4:f4:33:c0:93:1f:db:8d:f9:91:4b:9a:41:50:88:
                    15:95:2f:23:83:ee:52:f7:ec:94:b7:28:ab:c7:4f:
                    94:77:41:07:92:23:a7:84:4f:a4:d1:06:b9:8d:a8:
                    81:8c:b9:0d:93:40:79:41:f0:d8:6b:35:6b:11:8f:
                    b5:d1:d3:d4:e0:18:e9:be:08:62:2f:54:79:38:d6:
                    c2:9b:98:ea:78:6c:73:74:9c:d6:b6:76:48:02:5d:
                    91:ce:1d:ac:83:20:22:de:32:37:c9:03:51:65:0c:
                    fd:d4:aa:b8:4d:72:1b:11:89:ea:b6:f8:d7:87:ba:
                    b2:f4:89:ba:53:f2:b8:35:b7:9f:2f:09:91:14:b2:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:11:E9:83:2F:7D:73:13:E0:36:10:A8:3C:64:DE:FA:F9:AB:49:7F
            X509v3 Authority Key Identifier:
                keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:41:89:23:45:3d:7d:f5:3f:05:2c:c9:74:ea:2e:b9:e0:
         3d:52:c6:ab:d8:ad:32:f5:ad:3d:60:39:1b:0f:54:b7:06:7b:
         4b:ab:d4:9e:6b:9c:6c:6d:eb:8e:6a:06:f5:05:9f:c3:b8:68:
         db:80:51:3b:b4:ae:af:38:fa:e6:f6:36:f6:34:13:3a:5e:c2:
         6c:f3:df:e5:e1:e3:39:8f:1e:46:21:86:f6:3d:33:13:05:3e:
         bc:6a:b4:df:f9:0a:e0:1d:bb:52:13:28:03:ef:fb:99:59:5b:
         13:80:2b:fb:7a:ec:6d:b7:a7:97:c7:48:8f:98:21:4f:32:67:
         56:84:9e:31:56:ca:86:02:ca:d8:1a:10:86:99:66:e3:90:c0:
         71:c0:a6:b2:b3:de:87:c1:2a:16:55:e1:a9:9a:bc:75:bb:4c:
         6a:e0:89:39:7b:f2:2e:2e:de:24:e3:45:03:25:72:79:5e:0d:
         4f:7e:3f:46:ec:6b:79:8e:06:61:9f:ea:53:58:50:6d:19:29:
         4d:53:38:b8:e5:5f:d4:02:c6:17:d0:68:30:66:3c:ce:1f:72:
         61:7a:a6:d5:f1:f1:a2:4c:48:02:41:b3:81:1b:e9:ae:0e:58:
         67:1f:a0:99:2b:b9:c2:1a:83:33:8f:18:62:cf:d6:fe:9c:11:
         33:fa:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:16 2025 by rpki-client