Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File:                     OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier:          n678ZZmEzfmLqvtuSuaTeZ5N35qSlqclxd+8R1cSyVg=
Subject key identifier:   7C:0B:D7:E7:CE:B9:A2:BB:0B:DB:E8:85:81:71:BE:AE:02:82:8C:A7
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer:       /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial:       0199FDD8BCFE2B9A7D32E2C106E2A66D5058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 19:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:03 +0000
Files and hashes:         1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: MjpxY0Gy/ys3X7hIysUqd1302O2xmCjnQfizumrsSfw=)
                          2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:bc:fe:2b:9a:7d:32:e2:c1:06:e2:a6:6d:50:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
        Validity
            Not Before: Oct 19 19:01:03 2025 GMT
            Not After : Oct 20 19:01:03 2025 GMT
        Subject: CN=7c0bd7e7ceb9a2bb0bdbe8858171beae02828ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:21:56:9c:d6:81:63:9d:69:cd:14:40:ad:
                    6f:f0:f7:28:35:a9:15:d0:c7:42:7e:ae:1e:d7:8b:
                    8d:14:14:fd:e8:0e:79:50:c1:d3:08:c0:a5:a4:08:
                    54:87:2b:d3:06:fc:52:93:20:b7:d4:17:bf:1a:f3:
                    1b:32:e3:e9:be:f3:d3:6d:c3:e3:28:ab:79:a2:44:
                    d1:ae:25:8f:64:1a:55:07:48:9b:91:4c:32:31:3b:
                    93:a4:fe:31:2c:8d:6d:9a:c4:68:6a:6f:6b:bb:28:
                    f0:48:3c:d2:a4:35:be:86:49:09:b8:92:4b:5a:d5:
                    c4:84:c7:5d:b3:93:a3:8d:c8:e7:3d:4c:af:b6:c9:
                    1b:f8:67:e4:56:77:46:88:d5:e8:3d:98:0a:b9:2c:
                    1a:e0:33:a0:9f:4d:fc:1f:b0:66:65:c2:1e:c1:8d:
                    b7:a1:66:d6:fc:42:1d:cc:7b:37:7c:e6:0c:ac:c9:
                    8f:ef:1c:13:aa:34:1f:e5:7a:72:2f:04:6c:11:0d:
                    2f:45:a7:77:3a:2e:f6:fd:dc:7d:e6:a4:bb:3a:ed:
                    be:0e:df:37:84:b2:34:9d:bd:cd:87:18:0f:dc:43:
                    8d:d0:47:d4:e2:0c:d0:d7:84:c7:94:95:b7:4a:fd:
                    42:35:07:17:5c:a8:ea:9a:b7:9d:a9:92:51:66:62:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0B:D7:E7:CE:B9:A2:BB:0B:DB:E8:85:81:71:BE:AE:02:82:8C:A7
            X509v3 Authority Key Identifier:
                keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5a:a7:f8:d2:63:fd:70:29:da:69:70:a2:75:46:55:06:4e:
         83:26:52:a7:80:2a:fc:4d:dd:f9:b9:fa:cc:98:d6:c6:73:27:
         a4:50:51:af:d0:db:dc:69:4f:ff:76:f9:bd:42:ec:32:8e:e5:
         4d:2a:87:77:23:aa:2b:37:ce:f9:ab:15:2c:c6:b7:1a:1f:e2:
         c1:be:17:83:1f:26:3b:98:41:ae:4a:f3:59:ad:02:73:e0:7e:
         af:83:86:15:74:72:0b:aa:25:f5:f5:32:9b:1b:eb:91:e7:aa:
         a7:4d:aa:e0:58:08:f7:b0:48:9c:a5:53:fe:a4:42:77:21:eb:
         d7:34:29:43:79:38:26:b3:9d:d7:86:61:a5:19:34:2d:e0:8f:
         cc:4e:85:52:19:17:6f:2b:5a:88:2a:91:87:74:be:37:30:13:
         02:04:7f:2e:59:72:a5:b5:3d:58:9b:2f:7a:50:3c:de:b4:9e:
         4d:60:da:85:9b:cf:b4:b7:4f:ce:54:72:a5:20:91:35:4d:c2:
         59:83:38:09:56:f0:3f:d4:e7:fd:06:b6:e5:18:38:bb:28:53:
         28:76:2d:d1:19:ed:2c:c5:41:e9:d9:d6:33:14:59:6c:57:d9:
         0a:c3:04:d5:f4:c0:31:e5:05:8c:0a:d8:cf:2a:12:79:64:71:
         b0:fd:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:34 2025 by rpki-client