Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File:                     _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier:          Eq4YRtR8tgFjWHTNg3XYjTakj8ysqiphL8J8wX9PL/c=
Subject key identifier:   1A:46:9F:94:78:23:A7:8D:A7:8E:93:B4:A0:62:40:65:B1:73:49:BE
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer:       /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial:       0199FC21B43DED32C9C96F15A25A6119084D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number:          0AC9
Signing time:             Sun 19 Oct 2025 11:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:31 +0000
Files and hashes:         1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
                          2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: HxI92dQPVLjhg6n6Kdw8FcQOhdtkPb4HGkiI54m5H8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b4:3d:ed:32:c9:c9:6f:15:a2:5a:61:19:08:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Validity
            Not Before: Oct 19 11:01:31 2025 GMT
            Not After : Oct 20 11:01:31 2025 GMT
        Subject: CN=1a469f947823a78da78e93b4a0624065b17349be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:38:00:65:45:82:9b:45:48:6a:46:ed:bb:47:
                    9a:6d:84:57:c5:ea:77:fb:42:85:0c:85:74:c3:71:
                    43:b7:f0:fc:a8:5a:bc:27:39:f7:af:a5:f2:26:66:
                    a0:0e:ae:79:26:b4:d4:c3:6b:61:e0:b6:37:6e:ad:
                    66:70:01:8b:f2:2b:e2:9a:fd:74:dd:62:d5:11:a7:
                    ba:05:02:4f:84:45:fa:b4:8d:aa:5e:3b:0e:c1:6f:
                    22:2b:39:06:41:2b:ef:c6:a1:6d:10:4a:49:6e:b4:
                    8f:9b:e5:6f:8f:e6:27:b3:91:66:82:e6:a5:1b:3c:
                    6d:d8:cd:4c:af:fa:06:2c:43:f6:33:fd:04:6e:fd:
                    e2:42:7c:99:6e:07:24:aa:cf:ef:4c:58:8c:5f:2f:
                    d8:0c:36:db:a8:b0:a6:1b:e9:df:d9:e4:39:d9:81:
                    fc:f6:40:3a:78:73:58:ab:cd:03:4c:8a:dc:96:96:
                    eb:76:4e:c7:c2:2e:f7:15:fb:b4:f9:39:a7:42:dc:
                    30:ab:ac:93:f5:f7:82:3b:7f:66:6e:5b:a5:57:01:
                    cb:ba:c3:6c:fe:ce:73:d0:e2:9e:8f:a1:b1:b0:44:
                    af:86:9d:9f:06:af:c8:08:f0:3e:a4:c9:f2:a1:33:
                    35:42:59:77:13:51:99:84:af:78:50:ad:4e:08:e4:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:9F:94:78:23:A7:8D:A7:8E:93:B4:A0:62:40:65:B1:73:49:BE
            X509v3 Authority Key Identifier:
                keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:86:14:bf:a8:49:9c:b3:37:3b:93:36:91:9f:43:b1:9c:07:
         c4:25:9b:88:10:31:61:9c:30:54:61:5f:79:56:12:cf:64:88:
         82:f7:5d:04:ac:03:8d:73:61:a5:2e:52:78:aa:37:d8:a2:e1:
         dd:ba:19:b5:04:fa:61:e2:15:74:7f:8b:6d:3e:62:da:02:7f:
         53:f7:d0:d6:84:da:ad:09:b4:81:43:36:24:b7:5d:a2:4e:2b:
         68:f7:45:85:00:d0:72:b3:b4:c4:39:d7:ed:28:d5:08:cf:7a:
         95:10:6a:a9:53:1a:1e:c0:54:2f:bd:62:4a:04:31:a1:8c:9d:
         49:39:14:c3:3b:08:a5:e8:e2:2b:45:fc:f6:65:bd:d9:8d:a0:
         bf:34:64:f3:f1:b9:4a:d4:7b:16:dc:fe:9f:2f:fe:bb:0f:80:
         20:5e:37:8c:e0:88:76:ed:de:cd:ae:80:0a:ae:10:6a:11:44:
         8f:fe:c8:7c:a7:52:c0:b4:9f:fb:0d:bd:3b:b8:c7:15:ae:ef:
         5e:c6:db:29:17:1e:76:e5:28:94:7b:64:af:05:e7:54:7e:85:
         ec:dd:5d:2e:19:f8:65:5e:77:0f:5d:18:e1:7b:c7:41:05:39:
         08:43:26:1f:87:11:fc:eb:0e:23:73:04:26:dd:38:1e:fd:74:
         37:37:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:30 2025 by rpki-client