Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File:                     oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier:          VOvrjMf8R+fSfodAWk8WnoMhFkXV/FJbCc1SZbvpc1k=
Subject key identifier:   DE:E5:81:B0:B5:B7:67:33:70:33:D8:F0:67:9A:FB:10:B4:B0:49:A4
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer:       /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial:       0199FCFDABF26A5AC94A27DBC3BDC6B611B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number:          0AF7
Signing time:             Sun 19 Oct 2025 15:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:47 +0000
Files and hashes:         1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=)
                          2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=)
                          3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=)
                          4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=)
                          5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: aiYdZjO4CkxP7L2q/NnYcaoUFhcpqTwOQdcQOjvMOvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:ab:f2:6a:5a:c9:4a:27:db:c3:bd:c6:b6:11:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
        Validity
            Not Before: Oct 19 15:01:47 2025 GMT
            Not After : Oct 20 15:01:47 2025 GMT
        Subject: CN=dee581b0b5b767337033d8f0679afb10b4b049a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:46:75:38:ef:bd:4f:e9:3c:a6:e2:54:fd:
                    ee:21:74:4d:b3:40:72:76:4f:ba:4e:d0:b2:1d:47:
                    00:dc:74:38:61:2c:3c:b0:71:e3:82:81:4e:5c:5b:
                    d3:c0:a2:c9:4d:b9:92:7e:c4:01:af:c2:0c:90:c0:
                    25:c0:e7:ce:f2:8b:55:30:d0:e3:33:ad:3d:15:19:
                    00:3c:3c:b8:cf:e3:36:bc:1a:60:52:0e:40:00:f9:
                    7e:3d:1b:40:f4:79:c6:43:7d:50:8d:34:4e:7c:1c:
                    ae:99:99:fc:21:29:f4:67:bd:5a:4f:98:07:6d:33:
                    32:21:85:7f:3c:20:0d:1a:31:61:2e:86:5e:9f:ff:
                    57:21:c2:9b:cf:dd:ab:1a:c5:0e:c6:63:b5:ff:55:
                    c9:0a:2d:ee:c3:95:c9:0f:f9:60:9f:d3:f8:db:12:
                    58:63:37:c6:83:e7:3c:36:a0:4e:e3:1e:d7:66:b4:
                    6e:f7:73:a2:4c:d6:6e:fc:9f:5e:80:28:13:77:9e:
                    5f:5d:ed:0d:fd:96:75:53:9f:18:84:b0:9c:6a:d2:
                    5e:a3:54:42:0f:ba:39:fa:d3:4f:79:a3:61:df:11:
                    11:d7:11:6e:7e:e4:2d:99:a5:b4:5a:08:cb:d8:f9:
                    fb:a3:f2:97:a5:93:e2:30:cb:9a:95:1f:83:91:42:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E5:81:B0:B5:B7:67:33:70:33:D8:F0:67:9A:FB:10:B4:B0:49:A4
            X509v3 Authority Key Identifier:
                keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:63:c7:7e:1c:2e:0e:d7:8a:2f:46:13:58:ae:67:b5:3b:
         2c:85:75:d6:10:bb:21:13:f0:32:51:31:e3:9e:07:31:ac:0d:
         f8:39:40:01:5d:e0:75:52:e2:96:f0:af:ce:6c:70:60:7d:af:
         d9:da:9d:1e:2e:63:18:2e:cc:40:de:fd:d2:92:be:de:35:e0:
         18:a2:3b:2f:ce:4e:97:5c:d6:69:a4:92:b0:1f:bb:bc:b5:84:
         a9:5b:9c:fd:72:89:6e:e7:a7:0b:15:5c:7d:26:a7:67:b2:9d:
         8b:c5:1c:e7:13:6b:d6:20:25:85:88:a6:b1:60:34:6d:8c:f4:
         b1:50:65:ad:d3:84:c8:80:e7:3c:32:93:f6:a3:6e:c8:69:de:
         7e:8b:14:88:13:17:32:11:17:d6:89:43:42:78:54:2e:2c:47:
         77:df:f5:8e:0a:92:b2:6e:b3:a7:a9:2c:bb:e2:c3:58:f3:50:
         4d:41:81:b6:4e:89:12:e2:b8:6a:0c:7c:46:c0:ce:77:d7:5c:
         e7:c0:19:9d:95:ef:c9:95:5d:7f:ad:ed:ad:89:d2:82:54:4c:
         f9:5e:3e:57:9d:68:80:70:67:2c:e5:8c:a8:cf:f8:fe:88:30:
         9b:c3:c8:49:a5:c8:aa:bd:1d:fa:ce:07:a1:53:9a:1e:a3:3f:
         62:67:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:27 2025 by rpki-client