Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File:                     f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier:          aydeBdbej77PRqGvGnqH+vK4V3Y4CUTBkkJrn8QeGNk=
Subject key identifier:   46:8B:40:1C:B9:E5:F9:D8:9F:6D:DD:EC:0E:0E:B6:13:70:5C:38:A6
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer:       /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial:       0199FDD942DA9F455A8274CC16C1466924D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number:          0F90
Signing time:             Sun 19 Oct 2025 19:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:37 +0000
Files and hashes:         1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
                          2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: syGtpYJKjPTUAZ9CkagUeilnfWo/7rmNj3oyDR69Crw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:42:da:9f:45:5a:82:74:cc:16:c1:46:69:24:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
        Validity
            Not Before: Oct 19 19:01:37 2025 GMT
            Not After : Oct 20 19:01:37 2025 GMT
        Subject: CN=468b401cb9e5f9d89f6dddec0e0eb613705c38a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:9f:7d:80:a1:cf:93:89:4a:68:b2:9f:7e:
                    e7:28:ef:af:ca:6f:3c:95:bd:2d:70:22:cc:14:ad:
                    d6:f1:5b:ca:1e:df:21:e3:e0:7d:1f:fe:f4:51:65:
                    71:0d:2d:54:be:30:a8:1b:08:73:62:4f:44:05:97:
                    c1:43:1f:7a:86:ab:9c:37:b8:53:95:61:e2:7c:dd:
                    63:7a:d1:8b:63:73:5f:f4:ad:46:c7:71:7f:97:ad:
                    8a:73:89:f5:5e:12:06:9e:2c:e6:39:d0:40:5e:1d:
                    1d:9e:a0:9f:be:68:67:52:3f:14:6d:51:4f:3b:7f:
                    18:6b:59:0b:cd:ff:dd:51:a9:8c:d7:12:03:d8:d9:
                    27:29:2a:a9:c5:a1:e7:cc:0e:bf:cb:98:8c:00:76:
                    51:39:cb:cb:06:26:0f:a1:98:dd:86:b1:25:a0:89:
                    14:51:e0:45:64:8c:19:5c:c6:f1:31:86:99:bc:d8:
                    d1:60:39:d1:e2:a2:1c:4c:68:16:33:a9:02:65:65:
                    77:f8:e3:da:12:8c:d0:24:bc:c4:54:14:f9:ed:56:
                    a2:f4:13:3c:32:12:02:4b:45:d4:51:0e:d4:b6:5d:
                    ef:2b:6e:4a:a7:a0:81:81:32:1c:56:de:d1:d8:10:
                    8f:15:f4:51:5e:51:72:28:7d:61:60:e1:de:b3:63:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:40:1C:B9:E5:F9:D8:9F:6D:DD:EC:0E:0E:B6:13:70:5C:38:A6
            X509v3 Authority Key Identifier:
                keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:e4:dc:4f:09:4a:05:7d:4b:37:7c:e9:8c:4e:82:a9:a9:
         28:be:12:0d:63:2d:2d:c3:8f:22:59:2c:3c:76:49:6f:1e:2f:
         10:98:6e:63:8f:7b:5f:41:2b:ee:d4:46:18:ad:4e:b7:bf:21:
         54:6e:f4:04:05:de:4f:33:f8:11:09:b5:5c:85:4b:b1:13:bc:
         cf:1d:dc:ac:d7:dc:8d:81:a8:be:4c:d4:93:1d:87:8f:94:87:
         63:bc:2a:31:cb:9b:38:4e:bc:b9:9c:db:cb:71:76:5b:2e:40:
         85:79:21:b5:2d:84:68:02:c7:6e:52:3d:34:d5:6f:77:7a:d3:
         ef:7f:5d:d8:4c:11:a1:9f:50:9c:38:bc:a9:7c:da:d7:2b:a7:
         e0:3d:84:a7:e7:96:58:47:d5:35:d6:6b:76:15:e2:4f:7f:6a:
         c1:d2:ce:97:67:ae:4f:02:e7:51:7d:80:1e:06:9e:88:80:cb:
         b4:24:75:51:85:2b:54:5a:ea:dc:3f:4d:d7:50:fb:82:08:d5:
         36:b2:35:ce:82:0a:d9:6d:96:c1:21:5c:7f:a9:53:d2:43:8a:
         81:62:bf:83:1a:70:fc:34:35:00:5c:f3:8d:ad:1e:03:94:66:
         84:a0:d4:66:9a:33:6f:4a:0f:3d:62:f4:c3:02:be:89:60:e9:
         e2:05:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:15 2025 by rpki-client