Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File:                     AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier:          w2FXOVwMh+I1P2aiAoMZDxPxIFi/eFt8/IEPjJpWfMM=
Subject key identifier:   80:1A:54:8B:B6:F8:D9:B6:47:FB:92:09:F0:A4:0C:25:FF:4E:C9:AF
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer:       /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial:       0199FCFD5B77965B1A8574F27009462331A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number:          090C
Signing time:             Sun 19 Oct 2025 15:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:26 +0000
Files and hashes:         1: 7Qz5q4z6Tluf-_C3llmKbm-Y_6k.roa (hash: Btz39reQ2rKKUs2JCEZIO4ZVKwDZCOjT3ZoGf4qNKOM=)
                          2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: D4GdRD64mND4Nd65Xpk5qfjQetNfLR87y36IcaTyiA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:5b:77:96:5b:1a:85:74:f2:70:09:46:23:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
        Validity
            Not Before: Oct 19 15:01:26 2025 GMT
            Not After : Oct 20 15:01:26 2025 GMT
        Subject: CN=801a548bb6f8d9b647fb9209f0a40c25ff4ec9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:98:ef:22:3b:c2:53:cc:63:22:aa:7e:19:
                    1a:b6:6c:32:71:1e:08:f4:74:d8:e3:aa:27:79:54:
                    30:02:00:f5:67:18:5e:42:af:f4:d1:47:aa:3f:72:
                    0e:9e:1e:7a:29:38:20:32:eb:72:9a:2b:62:79:ef:
                    4b:88:43:bf:8f:0b:ef:84:ed:62:7a:fa:3c:f3:ff:
                    a1:53:57:4f:26:07:fa:f2:8a:eb:d9:72:41:03:74:
                    62:e0:15:80:0a:cc:0d:c7:f0:1a:aa:b3:85:92:25:
                    bf:d7:4b:96:6d:6c:e2:0d:50:11:60:46:a0:d6:53:
                    73:a2:1b:77:92:4f:5a:fa:89:ca:fe:60:34:52:c0:
                    e5:c6:4d:35:bd:3f:48:57:fe:86:1f:62:45:9b:1e:
                    81:91:13:58:46:4a:65:68:7d:c8:64:84:0d:ab:41:
                    0b:3e:58:5f:f5:5c:c7:e9:51:e1:cc:8f:16:ed:ce:
                    f0:91:d9:a6:e7:29:fb:05:f8:12:7a:e7:cc:f3:ad:
                    6c:04:34:3e:a6:13:7d:c6:e8:b7:d0:86:36:dd:76:
                    ac:82:a5:e2:10:51:4b:ba:80:0a:82:8d:66:3c:92:
                    80:95:64:f3:4d:9d:6d:5d:1c:80:a5:f4:e6:e1:22:
                    b9:89:e5:ce:d1:07:60:30:51:7b:82:33:60:5e:df:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:54:8B:B6:F8:D9:B6:47:FB:92:09:F0:A4:0C:25:FF:4E:C9:AF
            X509v3 Authority Key Identifier:
                keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:22:67:ce:ac:e3:42:20:20:91:04:48:ea:83:7a:2c:38:37:
         6c:8d:3d:b7:01:ca:cc:dd:f1:ad:89:da:cc:2e:97:23:e9:0b:
         80:14:f8:3c:70:eb:28:72:7f:86:53:10:b0:fa:a5:53:0f:b3:
         52:b6:ae:2c:9e:66:40:db:4c:2d:2c:74:a2:24:11:0f:6a:d5:
         e0:87:87:55:17:15:ff:e8:65:d6:b2:b5:d5:41:14:29:fe:cd:
         e8:a1:7d:20:4e:e5:69:ab:69:65:ff:8d:54:23:f3:90:fd:0e:
         4e:6d:14:e9:d8:ab:42:79:52:63:0d:1e:3d:61:c2:69:12:96:
         77:10:2d:06:84:12:63:11:c5:aa:f9:c0:e9:51:e3:50:c5:56:
         f8:27:03:62:9f:7b:06:af:eb:08:2e:57:16:51:d7:2c:67:b9:
         e6:68:50:d6:c3:49:8d:06:c2:94:82:60:53:ce:32:95:70:a9:
         7d:e2:ef:f0:20:23:01:02:45:47:98:21:e6:c8:47:8c:cb:1f:
         91:d7:df:aa:5a:73:2f:59:0b:b9:1f:56:fe:cf:ef:9e:ad:fc:
         28:d2:c6:6c:e5:e8:e8:bb:ec:97:57:82:f9:0d:54:40:20:53:
         cd:03:da:0d:1d:70:e7:2a:1d:b6:04:46:f7:68:76:65:a1:24:
         4f:80:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:48 2025 by rpki-client