Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File:                     x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier:          FH2GHgcuQI2OszKom1s8k2m05lWFLbZOzpyZOfHgGik=
Subject key identifier:   F8:4B:9D:2C:9A:FD:CF:AE:F1:5C:25:85:2F:E0:39:39:CB:00:AD:F6
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer:       /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial:       0199FBEBD64423322786AFFE4252D992762B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number:          1506
Signing time:             Sun 19 Oct 2025 10:02:40 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:40 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:40 +0000
Files and hashes:         1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=)
                          2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: Q1xhzWLpZ9tm5AveJWmZDjb8f/x2WwonXGxKjKnBVxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d6:44:23:32:27:86:af:fe:42:52:d9:92:76:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
        Validity
            Not Before: Oct 19 10:02:40 2025 GMT
            Not After : Oct 20 10:02:40 2025 GMT
        Subject: CN=f84b9d2c9afdcfaef15c25852fe03939cb00adf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:14:a7:dc:8c:05:6c:e7:fe:6e:de:7a:c8:
                    38:20:76:2e:31:41:53:5b:ee:9e:9a:81:0d:ac:16:
                    77:1e:b5:fa:c6:ff:ba:fe:22:df:17:d5:ab:eb:1b:
                    57:61:98:d8:7b:22:af:0d:8b:5c:53:01:bb:f6:7f:
                    3f:ec:53:cc:29:3f:bd:e3:59:50:91:b8:5d:f1:43:
                    af:c9:71:32:fa:9b:b7:e9:52:84:07:16:38:82:48:
                    d7:30:b9:5c:4b:0c:29:23:d0:9c:db:10:8b:44:44:
                    80:1a:f3:c8:84:06:ae:f6:d8:aa:88:80:fd:04:8f:
                    fa:b9:74:9c:99:12:0e:81:a5:d8:f2:1c:94:4c:51:
                    40:84:42:97:53:0e:4e:6d:a2:0c:56:59:6e:82:6d:
                    8b:6f:e7:9a:c9:bb:3f:1f:b6:4d:87:7b:4a:41:03:
                    2a:b6:13:1d:93:b1:5e:1f:55:de:35:d7:fc:32:8d:
                    56:c2:f3:87:f3:e6:d2:bc:73:b8:e3:b0:52:db:c8:
                    88:c3:81:a4:1d:92:9c:7f:6c:42:51:ff:16:36:3b:
                    b7:e3:07:b4:43:34:ce:bc:f2:63:a5:f7:16:ff:31:
                    35:37:2d:e1:6b:b1:3f:d7:a0:1c:9a:e8:7b:cd:84:
                    a7:ac:55:3b:94:da:01:db:d1:0f:a5:90:dd:63:e5:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4B:9D:2C:9A:FD:CF:AE:F1:5C:25:85:2F:E0:39:39:CB:00:AD:F6
            X509v3 Authority Key Identifier:
                keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:10:6b:31:64:6d:0b:c1:a5:97:9f:c2:01:c5:6d:7d:b8:3a:
         11:84:5d:06:42:7b:4a:06:74:4c:b4:28:8d:dc:7d:0f:71:d8:
         72:b0:11:ce:94:59:a4:8a:81:f3:53:46:34:f8:76:9e:9e:06:
         b7:05:99:49:c1:fb:cd:11:60:f3:69:49:1d:24:a3:57:24:e3:
         be:1e:74:c0:6b:b5:89:0a:c5:d8:7a:ed:a1:7b:f2:c3:ab:49:
         92:3e:3e:e3:b1:fc:00:2c:f6:f4:40:f1:fc:c8:09:70:92:09:
         27:0f:fc:b2:d2:da:89:81:79:53:a2:1d:99:83:7d:36:bc:0f:
         b3:7e:33:c0:81:d6:b3:57:6c:85:31:29:60:f6:56:16:d3:8e:
         d3:d6:01:db:2e:a8:65:0d:d4:86:8f:e3:90:55:7d:d4:be:72:
         8c:32:cb:d6:c2:29:06:eb:a1:c0:17:50:1f:db:8b:64:d2:1e:
         32:6e:ab:09:23:58:4f:f6:79:39:ee:41:56:35:4c:c7:59:36:
         ff:7d:fc:fe:70:1a:5b:86:a2:b8:94:c9:84:d5:46:c0:d3:e1:
         02:e2:f1:39:70:4c:2d:61:83:d4:72:8f:d2:17:30:ad:e4:3d:
         a5:8d:19:b3:e0:c6:79:91:9b:37:02:a6:18:58:fd:8c:fa:d8:
         aa:00:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:36 2025 by rpki-client