Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File:                     Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier:          zqE8XvEu9/ydCM9OMFqPwfBxbPqBQo7ybhhTFCMmTLg=
Subject key identifier:   98:0F:D9:3C:83:6F:39:1E:DE:FD:52:0C:A1:13:D8:09:31:10:2A:DD
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer:       /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial:       019A03DA5D33A82DC919FB98E3D82DD41C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number:          140C
Signing time:             Mon 20 Oct 2025 23:00:33 +0000
Manifest this update:     Mon 20 Oct 2025 23:00:33 +0000
Manifest next update:     Tue 21 Oct 2025 23:00:33 +0000
Files and hashes:         1: 5jNjIfZHCFKLrjsIx_m00VoOlb4.roa (hash: dt8T70nhuJEI4o3TKiSfnq7kGTmTe/iNZKgWHVnpVF8=)
                          2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: dsWcd9keMxX2qJ/TDfTLEYhr6Nd/hXrnZvojloKDKDY=)
                          3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:da:5d:33:a8:2d:c9:19:fb:98:e3:d8:2d:d4:1c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
        Validity
            Not Before: Oct 20 23:00:33 2025 GMT
            Not After : Oct 21 23:00:33 2025 GMT
        Subject: CN=980fd93c836f391edefd520ca113d80931102add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:da:1a:ee:3a:e1:ae:10:48:e5:c8:36:68:
                    96:08:21:1f:7b:d5:82:94:37:92:6e:36:7f:65:30:
                    97:5b:da:f9:af:70:29:ae:84:52:23:85:b6:ac:56:
                    08:67:8c:4e:b9:bc:f5:38:c9:37:09:c0:39:48:c7:
                    b7:e9:a2:c2:92:eb:52:95:7b:e0:d8:37:f6:4b:60:
                    5b:01:e9:c1:a0:04:fc:6a:2d:bf:0b:d3:71:43:6d:
                    88:a8:72:0f:51:1b:c4:63:f2:d8:a8:71:bb:f2:b7:
                    ed:ba:a1:80:23:02:41:41:66:80:ce:88:fb:ed:9b:
                    5c:36:a0:c5:18:a5:ed:72:8c:79:e0:27:bf:58:cf:
                    9c:42:c1:c5:76:3d:b9:d3:dd:48:9f:b1:40:b9:5c:
                    8c:d3:e5:ca:45:cb:bf:32:38:c1:4f:65:fb:0b:25:
                    63:c3:16:e5:ce:a3:59:06:ac:91:e9:8b:a3:11:47:
                    52:fb:2a:03:d5:82:f9:0d:de:04:f5:1b:ae:c7:28:
                    f7:88:1c:d4:e1:b3:34:14:47:72:4b:ce:25:b7:ec:
                    1c:5a:3f:ff:6f:27:5b:be:53:a8:e1:55:94:36:1b:
                    4a:b3:e0:22:1f:cd:8d:10:b3:c7:b5:1e:5c:da:57:
                    34:07:9b:1c:cc:f0:8c:e8:0e:c3:c6:b0:d9:ca:bd:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0F:D9:3C:83:6F:39:1E:DE:FD:52:0C:A1:13:D8:09:31:10:2A:DD
            X509v3 Authority Key Identifier:
                keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2d:8a:68:c7:59:bc:5e:6b:a1:fb:b4:bf:90:0e:55:2d:84:
         65:66:73:71:72:30:1b:92:3a:ea:f7:88:61:fa:1d:37:26:d6:
         31:70:a1:2f:0b:23:0b:0f:df:8e:1f:72:87:63:2f:2d:f1:f7:
         25:ca:3c:db:6d:55:55:eb:cc:1a:a8:59:c0:6d:5e:74:1d:d2:
         13:ae:b1:8f:ae:a6:39:a9:22:ab:7a:57:15:ec:b5:db:07:99:
         f6:90:3b:fc:e3:fe:de:94:8b:9e:d9:10:8e:0c:80:eb:38:36:
         76:b1:72:0c:04:1f:e9:af:1a:d0:1c:8e:59:5f:cc:00:27:ff:
         8c:dc:2a:b4:8c:21:dd:eb:65:d8:28:17:92:91:f8:3a:69:c4:
         dd:a9:34:85:fa:db:f2:21:89:8c:3e:38:4a:af:f4:8e:eb:a9:
         38:24:45:b7:b1:34:c3:c1:2e:a2:97:d9:35:de:6b:c9:5c:e1:
         58:c2:4a:ba:83:99:d2:15:70:a3:87:cb:a3:07:7d:b8:69:94:
         8a:17:b5:ea:28:19:ae:20:cc:fb:52:18:7f:c4:7b:ad:9e:e7:
         d2:61:b3:37:e3:6c:77:4a:88:ed:2d:f3:40:e5:25:1f:58:78:
         ef:5f:36:b4:ae:f4:ec:69:a6:e2:a7:74:4c:6f:e7:0d:0c:a1:
         4e:21:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:15 2025 by rpki-client