Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          VaQrt0AhBg7omRE3E5RT7b7nWV37Se1dkv17a5l+ShQ=
Subject key identifier:   AF:E3:75:89:B4:A4:CB:D1:06:B0:5E:94:0D:B0:70:75:66:5B:96:F7
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       0199FCC63E46BA587342523B037F6221DF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0E6B
Signing time:             Sun 19 Oct 2025 14:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:14 +0000
Files and hashes:         1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: nZVIIU++EwHp6Ad4C7tzkA3uwgviwr9U/8VFlJO6TmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:3e:46:ba:58:73:42:52:3b:03:7f:62:21:df:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Oct 19 14:01:14 2025 GMT
            Not After : Oct 20 14:01:14 2025 GMT
        Subject: CN=afe37589b4a4cbd106b05e940db07075665b96f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:3a:81:31:d9:00:00:e0:2e:93:11:52:08:
                    80:be:cc:2a:f4:a1:82:b0:d9:b2:af:b0:1f:f0:17:
                    48:43:f1:f4:9d:49:3c:21:0d:95:ec:bc:9f:fe:44:
                    04:ba:3c:67:1c:be:55:11:23:ca:7d:77:00:b7:cf:
                    74:bc:06:e3:da:9d:23:d5:73:70:b9:36:19:ff:36:
                    c0:a4:ce:cf:56:c8:97:d0:40:74:2a:59:ef:1f:7b:
                    ec:4c:12:a1:05:a4:91:56:d1:a5:5e:27:5d:52:84:
                    e9:e0:c6:b3:7d:a3:7b:9a:0b:f6:c8:33:cb:40:6d:
                    5d:06:df:36:8c:e0:9d:59:18:b7:0b:fe:5a:73:78:
                    67:8d:78:84:7a:eb:9e:0f:c5:e1:8a:76:db:ed:be:
                    36:7b:e7:ca:08:60:e0:1d:2b:20:61:bd:c3:36:72:
                    d7:a6:68:20:d2:f2:48:9d:40:7c:69:73:d8:fd:9d:
                    1b:66:3e:7e:2a:40:73:2e:ab:6f:ba:23:d5:c2:da:
                    45:d1:fa:60:cd:f1:e0:72:e1:8a:ca:07:a1:ad:e3:
                    92:a2:84:99:3b:1a:f9:96:2b:6c:bf:37:89:5f:51:
                    3f:98:38:51:e3:54:35:5d:81:db:6d:f4:5e:fa:fc:
                    32:34:0d:ff:f0:30:32:56:1d:44:83:9d:bc:fd:67:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E3:75:89:B4:A4:CB:D1:06:B0:5E:94:0D:B0:70:75:66:5B:96:F7
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:dd:1a:4b:62:ee:64:d2:a5:43:92:fb:f9:d4:e7:7f:ff:
         26:3f:88:7b:c0:d9:0b:c1:c5:a1:4e:38:9e:e5:92:41:b6:d7:
         df:84:db:aa:94:bf:7c:b2:fd:93:10:43:24:fc:e8:4e:84:98:
         83:64:51:76:e5:dc:7b:99:c1:8d:b8:a6:31:e4:70:05:d4:70:
         ab:c1:3a:eb:45:93:f6:ec:b2:e8:e6:38:2b:c6:e5:9a:ac:03:
         6c:94:1f:86:27:db:e8:c0:3d:d6:92:f7:b6:14:42:35:0e:b5:
         8b:f7:dc:93:ae:0c:96:15:88:83:7d:4f:f1:d5:f5:55:f6:c5:
         65:1a:05:1a:47:c4:93:94:ca:b4:9c:bb:2f:c1:83:ed:1e:d1:
         c8:c9:e3:95:fd:96:6c:63:68:f1:c4:f5:c3:f7:29:05:95:ea:
         d8:40:7c:b7:3d:1a:df:67:41:fb:7f:e6:01:68:47:10:bb:01:
         97:b9:40:12:e2:2d:4e:59:15:4f:86:82:59:16:3f:10:78:c9:
         83:2b:3e:63:ee:00:23:93:95:b2:93:60:ca:12:fe:82:cf:84:
         86:68:13:75:9c:26:e4:cf:bf:ae:51:d8:5c:a5:bc:d7:87:49:
         7d:c6:ef:3c:2f:7a:f0:35:dd:dc:f9:88:27:c5:5b:f4:4e:48:
         90:30:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:16 2025 by rpki-client