Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File:                     mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier:          CQZRDaC42MR5PIhvj8e1DhGUzZZvFcDVVPnxeGQD/qI=
Subject key identifier:   6B:1A:54:63:A3:2B:0F:6D:54:2E:82:C3:7B:11:E5:A6:C5:E1:A6:57
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer:       /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial:       0199FC21C1D304BDC656917D7482A53937AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number:          0F7E
Signing time:             Sun 19 Oct 2025 11:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:34 +0000
Files and hashes:         1: H9x10BlhOPw86EI5C2pvE1Zw13M.roa (hash: QHucV9qKNzN6PEkHvdTSmlNETO8zOFnoDJVkHCpBCPE=)
                          2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: 9eUqzulMLMcJrBEDSN5POcMO09k0TE7NqsNhYPrxeo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c1:d3:04:bd:c6:56:91:7d:74:82:a5:39:37:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
        Validity
            Not Before: Oct 19 11:01:34 2025 GMT
            Not After : Oct 20 11:01:34 2025 GMT
        Subject: CN=6b1a5463a32b0f6d542e82c37b11e5a6c5e1a657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:70:fc:21:77:89:05:da:b6:9a:81:6b:85:
                    49:f7:a4:13:64:08:01:85:38:c1:a3:6c:c3:4e:66:
                    30:ef:99:22:64:7c:1e:d2:99:1c:b0:1a:f5:fa:25:
                    58:fe:1c:3e:20:cb:ff:e7:4f:af:d6:57:0d:86:36:
                    b9:23:98:90:04:49:bd:5d:9b:ed:06:ea:2a:f0:5d:
                    a2:73:76:95:1a:fa:c0:8b:79:76:31:cf:4a:e7:d9:
                    6b:d5:93:98:ae:9b:64:f3:ff:ab:09:0f:7b:04:da:
                    55:2e:c6:6f:39:3a:7f:bc:75:f9:f4:e6:5b:ed:a1:
                    f8:fe:40:12:db:20:27:e6:d2:10:d5:71:8a:de:b6:
                    02:b9:4e:12:72:8e:f5:55:a0:1e:e1:56:6b:88:59:
                    71:93:75:e1:94:13:39:dc:9f:dc:b3:ac:1e:cc:f2:
                    be:3b:e3:30:a9:5c:ed:52:9e:d7:1c:74:15:8e:ff:
                    de:78:bb:11:58:99:5c:b9:2e:7a:1d:9f:ac:ac:98:
                    12:cc:8c:5a:6e:01:23:51:66:ec:7f:3a:21:92:ab:
                    c6:e0:89:36:bd:c4:0b:03:9e:4c:f6:28:fa:0a:e5:
                    db:da:ad:4d:9a:8c:8d:31:4c:4e:01:ff:14:35:e2:
                    47:3f:88:e3:6b:18:77:40:40:e3:3a:5b:5e:51:34:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:54:63:A3:2B:0F:6D:54:2E:82:C3:7B:11:E5:A6:C5:E1:A6:57
            X509v3 Authority Key Identifier:
                keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:30:3d:7c:55:ca:79:71:5f:80:3c:ce:b4:7c:c7:b6:07:79:
         da:a5:b7:6d:8f:5a:cc:21:4a:99:c2:a3:57:71:3c:36:7f:f9:
         3e:4f:d5:90:96:25:e6:6b:9b:4d:b5:2d:d6:87:83:28:3e:85:
         31:33:d2:46:1b:15:48:ac:2e:4e:24:f7:c4:8d:97:14:ae:5e:
         64:fb:64:e6:fd:92:6c:40:fa:6e:5a:79:2e:61:21:ee:6f:fa:
         1e:f1:f7:0d:0f:31:28:41:62:91:31:ce:a0:dc:e6:05:7e:9e:
         e2:cf:61:c4:0b:fd:49:68:aa:9c:b0:13:d5:90:64:4c:2e:2f:
         0a:11:dc:bc:77:c9:b1:d9:bf:7a:35:9f:90:9e:f4:aa:3c:c5:
         db:88:f0:0b:fb:ba:14:bb:b3:0c:36:11:09:fa:44:05:46:8c:
         61:2f:94:bf:d6:5c:e2:5d:7e:5f:a8:c2:bb:ca:d8:53:70:29:
         a1:7b:98:78:97:6b:0d:50:20:e1:91:36:ed:01:c8:f6:64:a9:
         39:29:66:61:d2:13:e0:72:7e:9d:8c:65:ab:7f:3a:0e:f0:e9:
         e8:c9:50:c9:64:b8:09:c3:6e:6d:f7:d3:40:b2:65:27:d1:ba:
         ef:80:68:3c:04:8e:98:e1:61:df:b0:f2:79:2f:83:0b:b8:7c:
         bb:d7:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:30 2025 by rpki-client