Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File:                     4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier:          LAP1yNTHk0jsYnbCOI2+toRpgQgBp2nFB1Vt6R5On5k=
Subject key identifier:   30:AB:3A:F0:6A:85:19:08:37:20:A2:EF:59:F4:EE:2F:AE:06:D0:95
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer:       /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial:       0199FB7C7E6926A731C741A965527DABA042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number:          0124
Signing time:             Sun 19 Oct 2025 08:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:03 +0000
Files and hashes:         1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: u0hGYxc43HaKDqSF+mZEJ/Ns5kNit6diNKI3E6PwvkE=)
                          2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:7e:69:26:a7:31:c7:41:a9:65:52:7d:ab:a0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
        Validity
            Not Before: Oct 19 08:01:03 2025 GMT
            Not After : Oct 20 08:01:03 2025 GMT
        Subject: CN=30ab3af06a8519083720a2ef59f4ee2fae06d095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:78:43:d0:2c:c1:39:a6:7f:5a:24:46:64:
                    f5:72:da:2e:03:c1:d0:3f:9a:5e:3e:7e:20:1e:04:
                    1a:02:81:68:cf:fc:88:52:98:17:97:5b:10:06:e2:
                    b6:73:85:55:0b:52:3f:18:79:fb:9b:44:35:1d:49:
                    bd:6f:c2:af:42:95:6f:fb:5d:20:60:0d:00:d3:0d:
                    71:50:ad:b0:db:85:90:4d:a5:e7:2e:55:1e:ed:2a:
                    fc:b7:8a:fb:3a:b8:3e:62:4b:f3:2d:aa:c0:d1:b2:
                    5a:32:50:f7:b7:a9:91:9a:42:05:df:c9:e0:d0:75:
                    da:95:d3:33:e6:36:c9:09:72:cc:82:0b:3e:35:88:
                    cd:2e:17:78:1e:90:f2:22:b1:c1:0b:97:78:fb:89:
                    88:eb:8e:14:1a:76:e1:ca:6e:0a:9f:85:85:bb:6c:
                    b9:0a:b0:f7:de:44:c0:ef:86:d1:6c:c4:f5:e5:0f:
                    c3:4f:07:ab:29:f5:a5:36:e2:55:51:82:9c:79:be:
                    f0:f9:ff:01:c3:ce:a0:3c:b9:fe:d1:58:7e:ae:df:
                    5a:ee:3a:76:4a:b8:f2:50:5a:f6:d2:19:11:06:d6:
                    c1:34:1f:82:2e:71:98:27:e0:cb:78:f2:ec:24:f9:
                    df:13:31:79:44:81:c5:ac:cb:44:8a:fd:6a:98:58:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:3A:F0:6A:85:19:08:37:20:A2:EF:59:F4:EE:2F:AE:06:D0:95
            X509v3 Authority Key Identifier:
                keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:07:db:35:db:64:5d:01:57:91:41:51:56:12:a6:66:7a:b4:
         28:5c:5a:6c:c6:74:56:c1:38:b4:32:99:2f:a8:f7:fa:7c:3d:
         60:f0:4b:63:09:31:6b:d4:33:e2:16:84:10:a7:ed:90:a8:80:
         59:23:c2:f6:f1:9a:ce:d8:eb:ef:94:c3:f4:79:5c:f3:f7:e1:
         6b:28:1c:67:7c:be:96:36:37:42:98:0a:0e:f2:85:d0:cc:97:
         80:71:65:26:1e:4f:e8:31:65:9e:54:f5:10:ee:b6:cd:0e:1c:
         dd:29:69:76:09:0b:0f:c8:58:76:7c:c7:07:bf:1c:ad:42:cc:
         16:fa:39:c5:5c:24:ed:af:b5:37:16:ee:5a:e2:3a:15:e9:d4:
         72:92:9f:d5:b0:cc:b5:9f:9c:cb:e0:a3:89:52:0b:fa:91:05:
         48:2b:72:35:1d:29:2a:e2:e7:0a:60:52:87:1e:af:a2:39:88:
         48:b3:28:af:68:58:5e:8d:7a:fa:fb:f1:95:99:be:89:a4:f9:
         56:63:95:a9:b0:44:7e:8c:be:bf:f8:4b:1c:cc:6c:66:96:c8:
         fd:ac:45:d6:cc:b2:39:c2:68:ab:f5:f0:39:e1:08:0d:6d:a2:
         59:36:6d:3f:cd:35:e1:bc:33:ff:c5:57:14:a8:98:84:cb:e5:
         6e:0d:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:26 2025 by rpki-client