Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File:                     OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier:          nIo+NYxnKTZjcAYAd0Kw7Sg/P71dbzNob75gSaoz+EU=
Subject key identifier:   E5:C0:F0:12:80:4A:0E:EA:AE:6B:D3:47:E3:DD:F7:C2:62:46:50:09
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer:       /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial:       0199FCC63D8DE38C1081E2DD1DCEB06FB30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 14:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:14 +0000
Files and hashes:         1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=)
                          2: 1kY2nGT8PP1V1pxbzH8gDFZHRGw.roa (hash: pbZtP+N8idLMQTinI/aHUKYzG+cdVac5nacfjqhyPdo=)
                          3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=)
                          4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: xzDXHSgpqhyuJoMaAzzmfqc21Mr1WAbjmH0zwczCYAs=)
                          5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=)
                          6: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=)
                          7: vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa (hash: 1s2dWFQ6yIEmp8FiTPqLYuMVpLoqmko/eqoHIt276/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:3d:8d:e3:8c:10:81:e2:dd:1d:ce:b0:6f:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
        Validity
            Not Before: Oct 19 14:01:14 2025 GMT
            Not After : Oct 20 14:01:14 2025 GMT
        Subject: CN=e5c0f012804a0eeaae6bd347e3ddf7c262465009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:d4:ba:b0:93:2f:b0:9e:32:6f:4d:38:c3:
                    b4:b5:c8:91:76:14:11:b0:a4:68:7f:b9:da:03:c1:
                    13:ac:39:a7:a6:b9:16:29:6c:58:7b:68:ab:11:3f:
                    e0:6d:d1:7e:37:a4:97:39:57:7a:82:71:cc:81:02:
                    ef:5b:bb:57:9c:94:22:e8:f4:94:47:8a:10:29:5e:
                    39:19:92:ba:78:48:6d:da:12:65:7e:04:6b:65:bf:
                    da:1f:f8:e9:3b:3b:21:da:f8:36:ab:ec:63:7f:fd:
                    f4:44:5b:1a:8f:e7:54:1b:3b:7f:52:d6:6f:fc:59:
                    2b:e8:04:69:95:f8:b7:86:0f:af:29:2c:12:43:27:
                    f6:fb:dd:31:ba:9a:89:39:1c:b6:f2:5b:b2:ac:32:
                    8a:4a:31:71:53:4d:ba:5f:7f:ac:43:52:fd:1f:6a:
                    d3:0c:08:ba:5e:34:9f:18:84:ae:c9:95:de:51:73:
                    cf:6f:a4:ea:1a:79:9a:2b:74:fe:83:b4:f4:98:4a:
                    10:c1:70:41:63:9a:14:0e:6d:e6:66:19:43:6f:57:
                    68:3c:d5:83:61:3d:32:63:85:46:72:74:df:ab:cb:
                    2a:f2:c1:3b:e0:7b:64:2f:c9:24:bb:02:5f:fc:a3:
                    8f:da:5e:5d:b1:44:43:99:cd:07:94:ee:17:fa:34:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:F0:12:80:4A:0E:EA:AE:6B:D3:47:E3:DD:F7:C2:62:46:50:09
            X509v3 Authority Key Identifier:
                keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:1d:9b:44:ba:9c:7d:e8:d6:17:f7:f9:bf:83:e2:bf:ff:
         02:a5:1b:5b:f6:54:d6:79:71:d7:ff:16:bb:1c:4c:93:c9:cc:
         e0:1b:35:40:18:99:b8:19:e2:23:3c:e9:02:6e:0a:cf:f8:e2:
         8a:53:26:b0:7d:72:7b:38:3f:66:71:c5:12:fa:a8:23:28:40:
         ba:e6:b5:45:42:c0:c0:6d:e7:77:e0:52:e7:b0:1a:bc:2c:1f:
         af:91:2c:52:38:15:61:5c:9a:76:81:a5:2d:ef:78:00:b7:a9:
         93:ad:9a:2a:e2:7f:b2:1b:6a:97:34:20:c6:43:b8:df:c1:54:
         26:c8:6b:09:be:b4:7f:59:e0:95:83:4b:2f:78:c7:df:79:14:
         3c:d5:4d:6b:f5:89:c5:0f:12:2b:72:7c:07:3a:7d:d6:ee:96:
         24:e5:9f:e0:d6:13:49:6c:9e:3d:bf:e2:49:48:db:b8:4b:6b:
         11:0f:36:9e:12:69:2c:10:16:3b:1d:25:50:39:39:27:68:96:
         88:a7:cb:3f:61:d6:0a:a0:28:1a:f5:4d:b1:dc:03:ff:5a:03:
         52:ef:55:07:fe:25:fb:ae:68:37:8c:13:92:dd:b0:a5:93:f8:
         89:4c:f9:26:ee:0d:b1:ae:26:97:4e:59:ad:2d:1c:78:b5:a4:
         53:b8:9f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:12 2025 by rpki-client