Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File:                     Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier:          SRUP0qRRpBt624cwf0691t/eYZyDjI6dMbyI2foBpLU=
Subject key identifier:   B2:D7:6A:81:F9:14:A5:4F:E9:80:D4:AD:88:A7:BF:28:04:A5:AF:81
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer:       /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial:       0199FFFEB7E14C9B1CBC29455B76C88764DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number:          140A
Signing time:             Mon 20 Oct 2025 05:01:47 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:47 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:47 +0000
Files and hashes:         1: 5jNjIfZHCFKLrjsIx_m00VoOlb4.roa (hash: dt8T70nhuJEI4o3TKiSfnq7kGTmTe/iNZKgWHVnpVF8=)
                          2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: NbJsYdUe6QUABjROTAAaG2JKRatnG2oNhxwmMtP2Ht8=)
                          3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:b7:e1:4c:9b:1c:bc:29:45:5b:76:c8:87:64:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
        Validity
            Not Before: Oct 20 05:01:47 2025 GMT
            Not After : Oct 21 05:01:47 2025 GMT
        Subject: CN=b2d76a81f914a54fe980d4ad88a7bf2804a5af81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:e7:ed:41:75:de:96:b9:ca:fe:c6:f1:03:
                    7e:77:17:fa:e8:97:2d:2d:f8:0f:65:f8:d5:c3:a3:
                    5b:9a:9d:1e:ce:f0:4e:bc:34:66:21:a2:d8:cb:96:
                    bf:d2:b9:ef:82:03:2a:e4:03:63:9d:3a:9e:db:65:
                    54:f9:06:b5:1a:43:1b:8f:74:ba:ef:a3:4d:87:55:
                    b1:17:93:5b:2f:8a:be:85:ab:d3:52:a0:90:f1:ce:
                    2e:fd:1b:37:0a:96:d5:35:ba:e3:61:c5:8b:e2:42:
                    61:db:df:a9:4e:8e:61:21:71:d4:43:78:92:42:f8:
                    7f:5f:6d:d8:9c:30:ef:b7:6a:fd:8f:94:85:fe:6d:
                    48:d8:3f:a4:9e:e7:75:a2:a5:59:dc:26:d8:98:08:
                    5b:51:12:13:1b:7a:b4:3b:15:0e:4b:b4:0d:f1:8c:
                    da:42:88:5c:03:f8:f3:97:ec:a2:4a:d5:a5:b9:5a:
                    7f:5b:0d:88:32:0c:2b:de:b1:f1:38:1e:5a:fe:40:
                    57:a3:03:58:33:18:be:fa:cc:2b:a4:72:72:b7:ea:
                    e7:00:1f:6a:1e:c1:75:bc:e9:26:e1:4f:d1:03:b7:
                    0e:5e:13:f1:4c:97:7f:db:37:dd:a7:1c:5e:9b:0d:
                    8e:c6:eb:63:c6:11:33:58:5c:37:69:41:ce:35:4d:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:6A:81:F9:14:A5:4F:E9:80:D4:AD:88:A7:BF:28:04:A5:AF:81
            X509v3 Authority Key Identifier:
                keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:65:e0:7d:98:5d:33:38:54:6c:26:69:17:cf:37:ab:01:
         2a:7d:c3:49:b5:83:30:f1:2b:22:ca:8e:d1:ee:13:67:ee:17:
         71:24:8c:01:e5:60:70:26:80:d8:15:53:e8:98:81:ae:01:a1:
         34:0a:05:19:8e:ca:7c:c5:d6:bf:ad:d2:59:0a:f1:76:8c:b4:
         84:93:2f:61:79:e6:c7:c8:03:e3:93:62:f8:39:8a:0e:01:0e:
         f3:0c:d3:07:22:ac:42:a6:95:3f:e3:21:44:58:4b:4c:7f:ad:
         6a:b7:09:b4:a4:3c:53:04:57:45:11:81:d7:3f:13:fb:74:3f:
         24:3e:66:bc:d4:61:c9:4e:1c:75:10:97:87:cd:1e:c0:de:0d:
         c1:cc:a8:ef:7f:14:3d:05:68:79:a1:9d:83:49:b5:6e:3e:b9:
         16:50:54:63:a8:e9:93:3b:0f:a1:10:98:3e:7c:d9:06:63:34:
         53:16:0e:96:83:6e:d0:02:ee:21:b6:a4:22:3c:ad:17:73:ba:
         69:46:b5:75:a3:a3:91:7c:63:d1:b1:dc:4e:f9:eb:a0:51:20:
         40:ed:1e:a3:57:39:e2:b3:24:e8:e0:61:d9:be:17:ba:f3:08:
         70:a4:d2:c9:a1:20:7d:79:02:72:b3:97:40:6a:3d:95:41:33:
         b2:9f:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:04 2025 by rpki-client