Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File:                     OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier:          SuG8jBgfDiIY8g5GO0BMaBtgg6kw9oF8zu1aKhPJz9E=
Subject key identifier:   F2:E2:B6:1C:ED:D4:7F:AD:1A:A5:0D:EC:44:25:11:50:20:41:0A:D4
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer:       /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial:       019A01B568595D9E70D5415E90BE0166C3B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number:          1677
Signing time:             Mon 20 Oct 2025 13:00:57 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:57 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:57 +0000
Files and hashes:         1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: 4g8JLJ+8Z55tHihxjzZcT8m1Yx8fPOZZVDkG9EsihCI=)
                          2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b5:68:59:5d:9e:70:d5:41:5e:90:be:01:66:c3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
        Validity
            Not Before: Oct 20 13:00:57 2025 GMT
            Not After : Oct 21 13:00:57 2025 GMT
        Subject: CN=f2e2b61cedd47fad1aa50dec4425115020410ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:ae:10:c1:fe:fc:73:19:ce:10:ef:2d:89:
                    60:6e:f7:aa:25:66:62:b8:a5:e6:75:bb:6e:4c:b2:
                    32:25:48:89:78:79:d6:17:93:5d:36:90:2e:26:51:
                    72:cb:e6:c3:6e:81:a8:30:1e:54:5a:36:2b:71:fc:
                    39:d8:42:94:70:63:49:5a:d4:15:04:73:cd:5c:b3:
                    05:ac:94:de:84:98:f9:62:2e:27:c5:b7:1d:ee:ce:
                    09:60:a7:a5:c6:e0:dc:f9:ad:4b:12:84:87:13:a4:
                    3c:b3:ea:f3:21:56:49:29:1d:0d:13:d0:b0:35:a0:
                    43:8e:fe:fb:69:99:eb:66:9c:46:ea:fb:c3:63:3c:
                    10:19:e0:19:51:20:7c:24:28:44:f1:5d:31:03:af:
                    12:95:5b:28:ff:c5:54:6f:1b:88:b6:2b:12:5c:ed:
                    3a:9d:92:7f:4a:5b:ef:4b:7b:95:f7:68:5e:72:e2:
                    e1:6d:31:b2:1e:45:0e:f2:72:32:4c:4c:ab:d7:17:
                    9f:9f:0d:54:5b:e2:27:40:fa:05:c6:ce:6f:97:70:
                    c2:d3:bf:c2:8a:f6:a3:72:1b:48:79:2c:4f:0d:62:
                    7e:e5:a2:9f:4a:7d:8d:e8:be:8d:e2:88:a0:94:9b:
                    94:84:14:0e:de:62:0a:2c:71:9c:d0:a2:a2:0d:d5:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:B6:1C:ED:D4:7F:AD:1A:A5:0D:EC:44:25:11:50:20:41:0A:D4
            X509v3 Authority Key Identifier:
                keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:bc:99:1e:e7:8c:7f:a1:42:e3:0f:89:8f:7e:ae:38:78:
         55:71:eb:fe:fe:c5:03:c0:b5:ee:7a:c8:1a:d5:6b:4c:da:00:
         eb:9f:42:25:fc:4c:b5:43:c7:e0:a8:07:fa:18:4d:63:65:cf:
         05:f3:78:09:2f:ad:ee:74:c1:36:e8:0f:a5:d9:c2:8c:0b:fd:
         8e:c9:27:e6:52:89:24:f2:27:f4:24:ed:05:08:ba:27:7a:cd:
         25:54:7d:18:54:b7:79:60:a6:8f:94:24:ab:0b:d3:0b:35:e6:
         5d:76:a1:ce:e1:c0:9d:5e:c9:ee:5d:e7:b7:d1:0d:1c:95:a2:
         ab:a8:f4:2a:3f:07:6e:54:86:08:55:de:30:ca:e0:12:96:ab:
         ae:f1:7d:4d:94:d5:8a:fa:e0:5c:16:77:0a:05:06:e5:98:31:
         60:6c:46:72:9e:7b:1d:b5:b8:9e:8b:13:46:72:73:b3:62:ea:
         81:89:c4:98:87:00:4c:df:1a:7e:7c:ad:80:7f:31:79:33:74:
         fc:65:df:44:93:80:42:df:c6:d3:5c:79:9d:ad:56:e0:e7:b8:
         70:f0:e5:3b:a4:bd:46:58:f6:c7:99:4f:b5:a8:3a:71:72:9a:
         43:1e:4d:ab:d4:d0:90:30:d7:6a:f2:16:60:24:15:36:42:97:
         00:fe:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:44 2025 by rpki-client