Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File:                     odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier:          P2ExyAAz04LCISzDcoLwAMho/swId0S0kImv2Yd96Cw=
Subject key identifier:   1C:30:A6:B5:AF:54:26:1E:E8:1A:72:1C:B1:9D:A7:A2:71:8C:74:CE
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer:       /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial:       0199FD6AD915606E37B9149950DA96192F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number:          062E
Signing time:             Sun 19 Oct 2025 17:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:01 +0000
Files and hashes:         1: iSLwTqep0NbUn-xM6ERQaCHn1tI.roa (hash: khQ4c7Qn9evkEyI3Gv7ZG1leD8nar2lQ0KO438Y9oxI=)
                          2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: r+G524EPihKQW3VM7NZb7qHb/USrUajX1fqRzJoaiZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:d9:15:60:6e:37:b9:14:99:50:da:96:19:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
        Validity
            Not Before: Oct 19 17:01:01 2025 GMT
            Not After : Oct 20 17:01:01 2025 GMT
        Subject: CN=1c30a6b5af54261ee81a721cb19da7a2718c74ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:f8:c0:19:c0:64:1c:3d:02:7e:2b:9b:77:
                    e9:24:51:6e:90:55:f6:01:7d:df:0a:bf:10:cb:c7:
                    1d:8b:de:a6:50:3e:fd:9f:5b:8a:14:b5:f7:4c:a5:
                    1a:26:5a:f3:07:0f:df:61:81:45:98:09:47:c3:29:
                    3f:90:8c:77:86:35:e2:8f:63:90:93:9c:ea:5c:f4:
                    06:59:80:d2:29:88:d3:3b:90:24:ec:07:25:67:75:
                    1e:c3:8e:10:7a:26:e7:f9:75:e4:5e:f2:a3:4e:47:
                    ed:78:73:c9:6e:39:69:05:ee:35:87:16:b0:88:6d:
                    a4:0a:be:ac:29:2c:36:c0:a5:26:dd:24:68:ff:d1:
                    31:f4:69:79:0c:82:8a:0a:37:41:5a:90:b1:7a:c4:
                    8a:de:e3:d7:ea:12:c2:b7:09:fb:a4:d2:e3:fd:a3:
                    62:56:ca:d6:fc:99:df:1b:1c:1c:b2:92:17:d9:d2:
                    79:1c:6f:f0:f1:b7:69:ee:b1:62:60:55:f5:27:ff:
                    3b:44:1b:67:1f:fe:9f:42:2e:30:ef:81:9d:d6:34:
                    20:8f:58:6a:1c:c8:98:58:51:84:14:da:99:69:10:
                    eb:91:29:ec:53:87:4d:5d:3d:ce:5b:2a:16:45:5a:
                    c3:25:39:b1:c1:3b:2d:0c:45:1a:93:3d:a6:b4:69:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:A6:B5:AF:54:26:1E:E8:1A:72:1C:B1:9D:A7:A2:71:8C:74:CE
            X509v3 Authority Key Identifier:
                keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:e5:06:ec:d8:45:05:76:5c:01:4a:d1:04:f1:5e:ad:cc:
         36:15:49:cb:d0:05:51:8e:5b:74:71:06:ff:31:d0:10:34:3f:
         65:0a:ee:47:35:61:be:cc:f6:04:75:de:73:07:38:51:46:27:
         a2:ed:15:13:74:b9:49:e5:d4:4a:73:8e:ac:4d:7c:a1:db:c6:
         04:e8:10:bd:f9:6b:f1:77:56:a9:02:f6:25:fa:6f:12:fd:35:
         ba:f7:37:40:1f:58:19:1b:6a:82:fc:20:be:04:80:de:eb:37:
         8b:eb:bb:57:60:ea:09:45:5e:51:78:e4:01:ad:66:31:2c:a5:
         29:a2:2e:11:bf:38:30:ad:fc:8a:ae:28:b1:39:23:79:e5:81:
         a5:08:80:2b:20:85:5e:2e:13:e9:e3:93:45:be:a4:93:05:72:
         0e:14:2b:ee:5f:2d:7c:15:d6:3d:9e:c4:cf:d5:d1:c6:08:f7:
         fb:85:35:d6:7e:69:cc:6e:09:9f:58:36:38:41:08:91:5b:95:
         74:5f:ee:c0:6d:23:27:ba:54:4d:db:ca:40:41:fd:0d:30:cc:
         5b:c7:25:6a:f2:17:27:21:0f:8c:b0:9f:38:5c:0c:d5:d7:7e:
         71:fa:99:a9:cd:f9:09:ad:f9:e3:6d:77:58:ed:b8:be:91:4f:
         47:04:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:35 2025 by rpki-client