Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File:                     OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier:          XJmb9SV+t7Ck6HnPOdvfV0sqB7rUdLACmGFD4ER1U3A=
Subject key identifier:   93:90:38:8E:85:C7:02:F0:03:04:BC:B5:62:87:06:73:89:35:B0:58
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer:       /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial:       0199FC588A64AA7933B21E49A934CA0CBA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:24 +0000
Files and hashes:         1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: IaJ5tiMU6tMLCefzehLwl2a0PJ6xVjekKK5Lt8ks3nE=)
                          2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:8a:64:aa:79:33:b2:1e:49:a9:34:ca:0c:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39469af33611b79084f575e95b13e66550edb383
        Validity
            Not Before: Oct 19 12:01:24 2025 GMT
            Not After : Oct 20 12:01:24 2025 GMT
        Subject: CN=9390388e85c702f00304bcb5628706738935b058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:00:37:3a:22:e8:2b:a6:aa:8a:8c:83:30:
                    0e:4d:67:49:d9:2b:f8:23:7d:f4:d2:7d:26:9e:62:
                    8a:58:0a:59:ec:66:df:34:1b:a3:1c:5d:c3:e8:ba:
                    ba:f6:4c:30:0a:82:17:56:6a:b5:86:34:5b:c4:68:
                    3a:4c:0f:c2:e5:55:0f:a6:11:30:20:8a:5c:12:a2:
                    50:1b:17:33:21:37:f4:3b:fd:8f:eb:e7:af:ee:ea:
                    26:c4:7a:79:2d:a8:1f:14:54:7c:5a:87:96:e8:94:
                    d6:01:14:66:ae:a2:fb:73:22:d2:a6:16:10:05:f3:
                    e7:59:d8:cd:f1:be:b2:3d:4e:d2:18:54:1b:2f:50:
                    57:99:b7:5e:d8:86:3e:81:5f:f8:37:64:15:82:6e:
                    ce:45:16:d8:a9:56:01:b3:17:13:e4:88:7a:e2:fe:
                    f1:3c:8f:d2:b7:07:f8:f0:16:f3:bd:6d:89:a7:c6:
                    0c:95:3a:c5:d3:9f:9a:ae:4f:2e:34:77:44:12:be:
                    ab:00:35:2e:dc:77:c4:c4:0a:90:67:85:3e:29:b4:
                    1d:b6:ba:24:81:57:d7:9c:89:02:ed:f6:bb:16:29:
                    c8:a9:0e:69:79:7c:61:d9:b0:4c:55:43:b0:1f:a6:
                    18:a4:78:6f:9a:57:4b:98:6e:97:7b:54:45:a5:3a:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:90:38:8E:85:C7:02:F0:03:04:BC:B5:62:87:06:73:89:35:B0:58
            X509v3 Authority Key Identifier:
                keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:be:d2:f9:be:04:54:a6:aa:b2:60:61:1c:6a:34:95:d5:3f:
         5d:1d:4a:bc:4f:c1:22:75:a9:c1:7d:aa:77:97:ca:e7:d6:bc:
         4e:9c:b8:0a:71:72:ce:1a:ce:83:b2:ff:b2:e1:79:56:62:0c:
         46:68:33:ca:26:be:92:2d:55:27:5a:42:9b:2d:ae:1f:54:fe:
         bc:41:3e:35:2a:55:ae:19:4e:e9:f3:02:c7:4e:b3:17:0b:c0:
         28:4b:2a:2a:b1:61:24:31:45:8e:42:c8:06:df:22:f2:87:f3:
         6e:c4:a4:02:01:62:58:49:00:d7:74:29:f0:19:2c:e6:b3:01:
         47:8e:90:97:ff:15:2d:89:7e:01:69:49:45:e7:0c:47:30:1c:
         97:74:ac:1c:4e:11:0c:c7:fd:b2:4a:0c:79:83:ba:f2:cd:92:
         63:e7:62:70:e6:38:82:af:55:39:5f:c1:5b:ae:2f:47:e2:c2:
         35:ea:32:b0:2a:9e:99:8d:05:02:43:85:78:47:08:62:27:39:
         09:8e:32:e5:e3:eb:fe:d8:c9:cf:74:38:fb:37:44:a2:b2:d1:
         11:74:86:48:6a:07:7b:be:4b:0e:2f:1f:01:c4:3e:69:71:ae:
         2a:84:95:8f:85:6e:3b:ee:3a:ad:54:df:25:c0:a5:74:06:06:
         93:5f:6a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIpkqnkzsh5JqTTKDLolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl
ZGIzODMwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
Eyg5MzkwMzg4ZTg1YzcwMmYwMDMwNGJjYjU2Mjg3MDY3Mzg5MzViMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYANzoi6CumqoqMgzAOTWdJ2Sv4
I3300n0mnmKKWApZ7GbfNBujHF3D6Lq69kwwCoIXVmq1hjRbxGg6TA/C5VUPphEw
IIpcEqJQGxczITf0O/2P6+ev7uomxHp5LagfFFR8WoeW6JTWARRmrqL7cyLSphYQ
BfPnWdjN8b6yPU7SGFQbL1BXmbde2IY+gV/4N2QVgm7ORRbYqVYBsxcT5Ih64v7x
PI/Stwf48BbzvW2Jp8YMlTrF05+ark8uNHdEEr6rADUu3HfExAqQZ4U+KbQdtrok
gVfXnIkC7fa7FinIqQ5peXxh2bBMVUOwH6YYpHhvmldLmG6Xe1RFpTpCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOQOI6FxwLwAwS8tWKHBnOJNbBYMB8GA1UdIwQY
MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt
NjZkZDJhOTFmYWNhLzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh
LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb7S+b4E
VKaqsmBhHGo0ldU/XR1KvE/BInWpwX2qd5fK59a8Tpy4CnFyzhrOg7L/suF5VmIM
Rmgzyia+ki1VJ1pCmy2uH1T+vEE+NSpVrhlO6fMCx06zFwvAKEsqKrFhJDFFjkLI
Bt8i8ofzbsSkAgFiWEkA13Qp8Bks5rMBR46Ql/8VLYl+AWlJRecMRzAcl3SsHE4R
DMf9skoMeYO68s2SY+dicOY4gq9VOV/BW64vR+LCNeoysCqemY0FAkOFeEcIYic5
CY4y5ePr/tjJz3Q4+zdEorLREXSGSGoHe75LDi8fAcQ+aXGuKoSVj4VuO+46rVTf
JcCldAYGk19qeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:14 2025 by rpki-client