Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          po5MCGDVaH6CJ9gM1LkCUfUKXWNiP1FqwVc+sAHCq+w=
Subject key identifier:   7B:6E:7C:82:F5:0B:4C:47:D7:F5:D8:30:C6:80:A1:21:79:1D:92:69
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       0199FD3448422AB33B5FA3FB020643EBCFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          02ED
Signing time:             Sun 19 Oct 2025 16:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:25 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: K2jzrD482A25zL7gEEKcXszaa+ekBjcHTwv9kroKbjo=)
                          2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:48:42:2a:b3:3b:5f:a3:fb:02:06:43:eb:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Oct 19 16:01:25 2025 GMT
            Not After : Oct 20 16:01:25 2025 GMT
        Subject: CN=7b6e7c82f50b4c47d7f5d830c680a121791d9269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:de:cb:4c:e6:09:52:31:66:04:df:cc:f1:
                    00:e0:4a:7b:2d:18:4f:c9:ea:76:02:d7:fc:54:5e:
                    60:e9:67:3e:53:e5:e8:d0:f5:13:1a:62:86:2c:f9:
                    98:b9:75:b4:f0:46:77:a8:02:14:a3:e4:ed:0b:ee:
                    fd:08:0d:dd:12:6d:93:ca:cc:5a:d1:f3:c1:eb:9e:
                    ee:95:4a:c5:2a:5d:38:77:77:73:35:eb:35:a3:89:
                    24:3b:fa:ad:99:46:b6:ff:d3:96:a1:08:76:aa:59:
                    0f:d4:11:be:bb:d3:3c:ff:fa:2e:ab:e4:ae:ec:66:
                    02:cd:45:3c:dc:15:5e:8d:f5:e9:af:9f:e4:c2:47:
                    05:ab:50:41:c1:38:8e:fc:d0:70:7c:fb:11:d6:31:
                    07:13:51:f2:9e:d0:c2:bb:92:4d:f3:9d:ce:89:e4:
                    41:91:7e:d4:e4:9d:54:b3:74:ef:18:bb:30:46:21:
                    f3:83:a9:f0:eb:c1:dc:18:f5:f1:1c:9f:b4:18:60:
                    3a:47:6e:10:6d:4c:f9:5c:5d:88:1c:a2:f7:99:f0:
                    e9:b0:a2:f1:b6:a7:44:a0:6c:76:07:ed:6a:c8:ba:
                    a7:d5:10:cb:74:d0:2b:5d:f3:b9:77:2f:7d:3f:1e:
                    ec:93:a3:0a:c1:43:83:83:4b:eb:57:88:6d:83:7c:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6E:7C:82:F5:0B:4C:47:D7:F5:D8:30:C6:80:A1:21:79:1D:92:69
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:96:33:f9:2a:19:8d:7e:7b:dd:ae:7b:c2:45:d5:4f:db:
         29:74:6d:d7:25:54:10:d6:81:1f:2e:24:dc:9b:b8:97:f7:9b:
         8f:c5:ff:4c:57:f6:b2:11:f0:da:e2:83:df:d9:c8:f5:86:98:
         0a:5a:18:3f:ec:aa:b1:e5:09:bb:af:a1:a5:db:26:20:ae:ea:
         9c:f3:67:92:ce:d5:3d:f8:14:ea:fc:c0:e7:5d:a0:69:f6:a2:
         9d:99:50:fe:38:4b:a3:63:62:f3:98:7b:6b:3a:46:ba:60:79:
         06:77:08:90:21:06:5e:8c:a5:68:8e:a6:4a:a5:fe:e4:76:74:
         2c:ce:44:9a:06:ab:b3:83:20:d9:f0:fa:12:70:07:42:27:da:
         06:60:21:d3:3b:35:9e:7d:e4:36:53:64:71:74:ed:63:6f:f7:
         05:3e:8f:cd:86:ca:65:c3:95:81:1b:90:39:db:0a:90:88:0d:
         82:7c:48:11:5d:71:16:b3:33:48:b9:6c:10:3f:c5:cd:54:5d:
         ab:83:f1:a6:62:8f:93:3f:8e:23:90:d7:05:ff:0e:dc:1a:d0:
         12:7f:0d:c1:67:bd:38:17:4b:89:7f:cb:da:4f:b6:64:e3:92:
         4f:85:63:39:6d:ba:a9:47:d5:78:58:7f:53:a9:cb:7a:a4:6c:
         a7:06:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:11 2025 by rpki-client