Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          V991zHzFcKtj80CaXyqsmom4MfTycZKa9ottUmN3VHc=
Subject key identifier:   81:5F:FA:CB:BA:5F:1A:0B:5E:3B:19:A0:33:0C:05:5F:A4:CC:16:76
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       0199FD347C0CC2CE9A9599CAAEED04C20BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 16:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:39 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: 7bSUA3i2IMN23mlRpwrbyKO56WakSQk894OMLAQCj3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:7c:0c:c2:ce:9a:95:99:ca:ae:ed:04:c2:0b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Oct 19 16:01:39 2025 GMT
            Not After : Oct 20 16:01:39 2025 GMT
        Subject: CN=815ffacbba5f1a0b5e3b19a0330c055fa4cc1676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:35:f2:84:ef:a4:e6:0a:b6:73:a9:7e:58:
                    1a:f2:8e:da:b8:ff:46:43:cc:91:c8:d5:21:ed:c5:
                    ea:b3:4c:1d:ba:29:3a:b0:fa:bd:82:82:ad:8e:cf:
                    ed:67:f9:24:a0:a7:1e:2d:f0:93:7f:1e:16:1f:44:
                    ae:f7:b5:18:bd:04:97:d7:63:20:d9:96:39:d1:6a:
                    7f:5b:f9:82:e3:42:ba:51:d3:6b:ed:98:c7:65:3b:
                    3e:30:47:13:5d:58:ed:cd:8c:b3:7c:16:ef:cb:63:
                    97:05:43:9d:c2:1d:47:f4:46:2f:b3:ca:a3:cc:93:
                    d1:c1:9d:b3:42:9c:3d:27:55:ff:6f:c0:43:15:e0:
                    db:02:a7:71:a2:00:e9:9d:2d:67:54:07:b5:19:5c:
                    45:1d:1d:4a:09:bf:57:78:3f:f5:ad:8d:ce:ec:c8:
                    8a:0e:53:51:35:95:46:5f:51:25:8a:82:a5:66:17:
                    35:ba:30:08:ea:3c:28:c5:46:c8:f6:ce:4f:f9:61:
                    06:8d:77:ab:31:6a:c6:d1:01:1c:cf:4e:ab:fa:b6:
                    a2:87:28:27:04:46:73:7e:e9:f4:21:1f:87:7b:51:
                    09:13:34:4e:73:0f:8c:0b:5a:95:a9:b9:76:84:d8:
                    73:4f:ae:07:65:6d:c6:a4:e0:60:e7:9d:9f:d2:b0:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:FA:CB:BA:5F:1A:0B:5E:3B:19:A0:33:0C:05:5F:A4:CC:16:76
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:27:7e:30:68:b9:76:e7:1e:91:e7:80:a9:3d:dd:1f:fd:0c:
         b0:cd:e6:06:4a:6e:74:7f:da:90:5e:57:47:0a:cc:d9:f0:56:
         a0:5e:2e:a2:0e:ce:b8:3d:14:0e:2b:d7:74:6b:e7:2e:f8:8b:
         cb:12:4e:01:14:9f:3f:5e:db:9b:1d:e7:59:5c:c9:4a:d1:78:
         6c:b1:27:dd:12:19:ca:9f:0a:55:b5:d2:14:4f:0b:d0:24:d6:
         3b:f7:a2:62:be:07:09:2b:25:5b:bb:ed:be:5f:3f:75:1a:66:
         a3:4d:b7:d8:7e:61:b3:5e:77:47:f2:f4:7b:b4:16:44:a3:52:
         fd:1d:4d:fe:d9:e0:f4:95:c5:8b:82:de:62:bc:66:d6:47:ca:
         78:ed:b8:d2:9c:59:a5:5f:d0:7b:f4:75:89:67:d0:8b:22:f9:
         be:7f:67:94:35:1e:bc:9b:25:0b:84:be:5a:a5:41:e1:06:fb:
         31:38:84:cb:99:38:a1:37:03:3c:7c:6c:af:e5:6e:7a:99:98:
         70:70:a3:be:fa:26:cd:15:e3:21:0c:f2:d3:b7:b5:18:91:25:
         3a:3e:f4:e1:1f:79:08:b5:99:49:34:ed:58:7e:01:f3:cf:50:
         8f:50:76:c8:ff:22:c3:00:22:2b:05:77:41:79:2d:f1:e9:a8:
         3b:58:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:39 2025 by rpki-client