Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          xIRjlVIDaAziBYBdG2vej9qwto65q3Hmy4PzRl1NHHo=
Subject key identifier:   0C:AB:44:51:12:D3:82:F6:45:14:6B:30:BC:14:70:E8:2D:06:C5:1B
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       0199FC8F425D8DB67682323383CAEEE71179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          1739
Signing time:             Sun 19 Oct 2025 13:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:10 +0000
Files and hashes:         1: 0TAxxPi4zjMfURtgArfTlTlJzoY.roa (hash: DkfnTLoQSnkxMFDufCf4Tzi91pyg3D/dKfjoKdkuvnc=)
                          2: 2Fz3gDQO1Ko4Uhz-WKqbPvSyHuY.roa (hash: qDVXlglB84tjlEcwlG5YSSXNovaEgcbeYtxfS2oty2U=)
                          3: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=)
                          4: 9L6AVjkValDZgShbyHFIglFK-vU.roa (hash: vufq8Mys/rVjB7A0Cd1ttX4gkVYJG8tMhOrBmJ6rqrA=)
                          5: B3osDG38ZDrGf88ro5_cPchMPNQ.roa (hash: cHTpc3o5rIlsqZtfKdAwi89vReD0eYn50sK/4Phfd3o=)
                          6: F4w-QZJ9tuZ3bwCkS70XoiSwZrE.roa (hash: hgJd+IQxksq4UP4gzNVwizzj2yRg9XUuIEuXvfpX7aI=)
                          7: Jb1qAtrQRHkWR9yqePpnXV6kF-U.roa (hash: opwZoEWtUaeMsOhsAkDVCLoxpYSLW7EC/weSdnXl3hU=)
                          8: T3TYQGzkIt875WMcJue8Tlu8qcE.roa (hash: zrjAaYCf4QNugLTCHzX4Z7vGYzZPktrc0+f+lzFF6qE=)
                          9: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=)
                          10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: 6mOnzoAs+9vVZMclb1ryr7YpEYLTe3zYzoHURkSfKjI=)
                          11: wt3LwVWmMnxdQ_1hnrE0QvYmwGo.roa (hash: 78DCmBR5KDCiWcDQ81Kjee3QnK4jQ7nQ69rTiAmxiSU=)
                          12: yS4gxCiyxv-6Eo_qaFTdHS-1_f0.roa (hash: 4bv1Fv/+FlNMdg4hH2LqipPwgjlMt4gTsStcEknTXUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:42:5d:8d:b6:76:82:32:33:83:ca:ee:e7:11:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Oct 19 13:01:10 2025 GMT
            Not After : Oct 20 13:01:10 2025 GMT
        Subject: CN=0cab445112d382f645146b30bc1470e82d06c51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:9f:7a:ad:ce:e1:45:c5:20:f0:92:19:c3:
                    02:68:b1:97:74:55:af:2a:01:d7:ef:b1:ac:de:15:
                    02:00:c4:9a:d8:18:a7:29:08:b8:57:44:5f:f1:3d:
                    92:8c:4d:a2:b2:ac:22:21:71:5c:e0:2f:9d:e7:db:
                    6e:10:73:b0:c5:f3:d6:17:ef:9c:76:06:19:e2:9a:
                    e3:9c:a0:a4:30:12:6b:ff:fa:5a:f5:5e:cc:0b:ef:
                    7c:4e:24:0d:36:d1:e6:98:f2:3f:a8:8e:be:71:47:
                    05:27:4f:60:ee:79:14:85:5e:7a:a6:64:01:af:d6:
                    d5:27:de:07:f6:b3:76:a0:2c:ab:99:75:d5:bd:5d:
                    fd:df:04:03:3e:c8:4c:01:02:ce:27:cf:aa:76:d1:
                    55:2e:54:b4:be:1f:84:69:a0:6f:a8:4f:e2:5d:94:
                    cc:8e:f0:db:e3:a9:3e:fc:3d:b4:61:65:50:de:2a:
                    82:36:9e:98:e5:f1:db:c7:fd:92:6a:d4:97:33:6d:
                    e9:80:ea:8c:91:ca:48:19:a3:c7:38:0d:ed:0c:62:
                    4b:ff:e3:78:66:05:a4:3e:9b:05:3b:8d:99:40:c2:
                    35:5f:fc:68:31:14:e2:51:7f:b7:7a:df:b0:43:a6:
                    b1:52:b3:42:ba:e1:cc:e2:ec:5a:b7:f0:c9:fd:61:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:44:51:12:D3:82:F6:45:14:6B:30:BC:14:70:E8:2D:06:C5:1B
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:47:6d:a4:36:bc:6f:e8:bc:9b:5a:7a:ce:3c:d2:a6:9a:
         81:31:79:74:99:62:ba:19:07:71:ef:7d:dc:0d:38:f7:84:ec:
         7b:10:5b:f2:64:16:a8:fb:67:2f:08:c5:f4:80:17:fb:d7:0a:
         30:f1:8f:ff:7f:b1:eb:8d:cb:e6:1f:75:72:f3:fd:71:9b:15:
         db:c6:f3:b2:1a:42:e1:c0:8b:c5:15:42:c9:60:c5:26:22:da:
         b1:60:a2:57:91:42:be:7a:01:8f:5d:6c:87:82:6a:02:54:34:
         ad:f0:67:e6:71:98:88:eb:d4:e5:61:18:56:cc:c1:9b:5e:af:
         2e:1a:78:f9:93:e4:d5:58:2d:5f:7a:33:6f:fe:5c:9d:54:43:
         b6:4e:ac:53:a1:1b:02:e4:f3:bb:85:42:cd:48:61:85:cc:bd:
         f7:2f:b3:6d:d3:a6:02:c7:20:c0:ab:4a:43:79:94:af:aa:ff:
         a9:56:07:ee:7c:2b:d2:64:42:ad:40:4e:77:c8:eb:7c:8f:7d:
         13:e0:ae:ef:25:b6:09:17:ed:90:9e:15:56:5a:5c:78:ab:d8:
         42:73:3f:69:84:d9:a9:21:94:77:b3:34:23:ca:2f:7b:b6:b1:
         a2:a1:84:09:6a:f0:73:f9:9c:73:5b:13:6f:94:e5:50:c9:42:
         39:fe:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:20 2025 by rpki-client