Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File:                     Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier:          EpIJOskkdfJMvLXahHURDL2ewIf9h+ZDKSWUd/N9ScM=
Subject key identifier:   33:16:89:8A:CA:55:6E:1D:1D:F7:6A:69:DB:32:6A:C2:92:36:E0:07
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       0199FE7DDBE02BEF3273938AE6B09F6DD776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number:          16FF
Signing time:             Sun 19 Oct 2025 22:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:25 +0000
Files and hashes:         1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=)
                          2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=)
                          3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: HGMeOV8W+89e40d9uuBSO/2qVayAUGWO6+pWDz2ZKlY=)
                          4: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=)
                          5: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=)
                          6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=)
                          7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=)
                          8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=)
                          9: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=)
                          10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=)
                          11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=)
                          12: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=)
                          13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=)
                          14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:db:e0:2b:ef:32:73:93:8a:e6:b0:9f:6d:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Oct 19 22:01:25 2025 GMT
            Not After : Oct 20 22:01:25 2025 GMT
        Subject: CN=3316898aca556e1d1df76a69db326ac29236e007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:a2:17:a2:37:43:ff:52:81:f3:35:12:7d:
                    1d:6e:a5:1d:58:df:6d:fd:ea:85:f5:a9:d4:72:41:
                    fe:e0:5e:dd:24:9e:ad:16:7a:da:33:70:a8:29:70:
                    dc:54:bf:78:52:6f:5a:ec:27:91:5c:90:64:15:62:
                    d4:74:b8:53:1d:c4:50:bd:5b:49:97:e4:df:94:95:
                    a3:b0:82:be:1c:c0:cb:15:2e:5e:9f:c4:5e:17:7b:
                    69:9a:09:57:10:4b:1f:06:04:76:ab:bd:88:27:ff:
                    4f:fb:f3:2d:4b:38:0d:de:bb:8b:d6:47:33:0f:98:
                    4f:32:7f:c9:e4:16:a3:d0:4b:28:c2:61:10:18:8b:
                    54:71:32:3b:34:68:29:99:f6:0e:cc:38:c8:7b:d5:
                    ce:a1:55:04:58:5a:a4:58:8a:77:28:c9:5e:27:98:
                    ed:86:f5:ae:d3:19:6b:dc:46:eb:21:33:5c:ea:99:
                    60:5f:2a:59:a9:a0:c0:dc:cf:9c:e6:d8:ac:8b:45:
                    a1:33:4f:9c:08:8c:d1:4e:f0:b9:2b:59:df:bd:18:
                    06:ae:56:cd:2b:af:3d:ba:06:3f:9a:c1:22:52:ef:
                    72:4c:0d:c7:4b:f7:ba:1d:20:de:7d:3e:d5:d6:f0:
                    f1:b4:ad:96:8e:a1:08:6c:d6:48:67:71:81:d9:56:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:89:8A:CA:55:6E:1D:1D:F7:6A:69:DB:32:6A:C2:92:36:E0:07
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:87:b0:04:89:d7:2a:1a:83:1c:51:2a:10:78:0e:15:64:bf:
         fb:ab:9b:7b:8f:73:26:c2:98:9d:75:54:0a:b9:c0:75:e9:89:
         a7:be:98:53:1a:66:02:50:eb:08:aa:f3:10:dd:52:d4:a6:f8:
         83:9e:b5:3d:0c:5e:a4:19:05:e4:34:45:96:8a:4d:88:d0:b8:
         5a:52:d5:30:20:51:61:10:75:a0:c2:99:a8:80:c4:48:0d:be:
         10:8d:45:46:72:20:91:88:02:73:82:80:2a:29:d0:b0:6e:c9:
         3a:52:c6:59:3d:6c:b4:bd:8c:e5:66:71:b1:17:e8:53:b5:a6:
         70:5d:38:19:fd:21:51:e8:19:a6:c6:2e:1a:8c:a3:27:06:18:
         09:ce:16:05:0e:fd:a8:ad:ca:a6:21:eb:86:c5:6e:6e:3e:32:
         63:21:cb:7c:eb:25:3d:9d:0e:59:95:0c:2e:0d:76:c7:36:12:
         e5:43:f8:53:a5:ad:f3:78:8e:43:48:b3:f2:20:fb:6c:fc:de:
         62:d3:7f:ae:4c:d7:6b:49:4c:57:1a:1f:63:1f:c5:dc:4b:b8:
         ca:d4:c2:46:5b:b4:15:dc:7d:3e:8b:8b:36:57:2d:b9:b1:fd:
         0e:61:8a:0a:a9:9c:32:fc:d6:5b:59:32:c4:9f:d4:90:a0:41:
         5b:2e:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:51 2025 by rpki-client