Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File:                     oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier:          NvxNMZeojC/I9y/zCIarRjiqHiI7LbkWl0bdKFo/y0s=
Subject key identifier:   A3:5A:B7:CB:D9:37:7A:DE:B7:3D:F6:0A:F0:15:68:41:4F:E3:B7:41
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer:       /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial:       0199FDD8FA6FF3D9E4114BFFAE6AEF79FB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 19:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:19 +0000
Files and hashes:         1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: +Syqut046g8GLtdKPOXFGT5+pgWwM+2fCPrMeLXxjLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:fa:6f:f3:d9:e4:11:4b:ff:ae:6a:ef:79:fb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
        Validity
            Not Before: Oct 19 19:01:19 2025 GMT
            Not After : Oct 20 19:01:19 2025 GMT
        Subject: CN=a35ab7cbd9377adeb73df60af01568414fe3b741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:9a:1a:d6:a6:5c:6b:78:3a:3b:b3:5a:29:
                    22:72:7a:2d:32:43:eb:77:55:7a:74:ff:d5:e5:0c:
                    c0:bb:f5:02:5a:3d:0a:4c:fc:a6:ad:6e:cc:09:2b:
                    d1:9d:93:ca:d9:6e:64:2b:bc:b3:23:fa:b1:e0:62:
                    1e:c6:81:14:4e:73:e1:c9:5e:d5:2c:a0:07:7c:c4:
                    72:fd:d4:58:8d:63:a8:34:9e:16:f8:43:1b:a8:84:
                    8f:f5:b8:87:d1:6d:da:2a:59:28:aa:7b:99:c5:ac:
                    1c:0d:43:41:02:22:b3:30:41:2f:06:98:f2:aa:34:
                    87:30:50:7b:51:4c:20:0c:c8:28:97:1b:3f:a1:ef:
                    f7:00:5f:3c:19:07:d8:fa:8e:ca:d4:6e:ac:26:3f:
                    c4:62:d9:90:ac:62:eb:71:a4:44:80:c2:d6:7c:37:
                    e8:24:8c:53:11:73:cb:b5:0a:5b:1e:41:6f:86:32:
                    2a:c7:b1:5a:46:11:ae:a5:85:12:fb:72:65:ae:7c:
                    a9:9b:35:0d:56:16:cf:bb:ae:83:4e:1f:9c:0b:29:
                    36:3c:ab:d6:85:20:13:2d:76:a3:3f:ef:5c:f7:c9:
                    cb:dc:60:88:ce:92:37:d0:a0:4e:b8:63:e7:68:90:
                    36:e9:36:ed:48:28:9f:d9:8f:cb:77:27:43:82:29:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5A:B7:CB:D9:37:7A:DE:B7:3D:F6:0A:F0:15:68:41:4F:E3:B7:41
            X509v3 Authority Key Identifier:
                keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:77:d6:70:9e:4d:70:b2:e1:99:41:78:71:77:a6:43:a4:
         14:56:aa:b2:4c:64:f8:0b:8b:79:a5:b5:46:93:18:1e:5d:af:
         71:f8:32:a6:af:20:c8:48:27:09:02:c0:73:24:45:81:dc:c8:
         f5:bc:cc:f7:3d:5d:1c:ad:a1:1d:b5:c5:fd:13:3e:8a:c1:03:
         24:9e:99:06:07:97:74:b3:9c:ae:8a:09:bc:5f:55:45:64:c1:
         29:a6:14:39:c9:f6:ed:b8:c8:5d:1e:9a:f8:40:48:8c:fd:66:
         42:cc:ac:6d:3d:ad:9d:97:6c:66:a7:47:70:df:b3:46:53:e6:
         40:0a:cc:13:fb:c4:1c:3e:56:f3:9b:08:90:8e:59:db:fa:69:
         95:01:93:bc:35:3c:d3:6d:fe:0f:14:47:e7:ae:5b:89:5d:04:
         d7:9d:a8:b6:a9:c5:4d:45:ac:2a:d9:54:ca:b1:c2:09:a0:98:
         b9:8a:24:fa:8d:f5:78:a3:00:62:09:85:bb:6b:13:88:d9:82:
         6a:10:cd:fb:db:d3:68:9e:f4:7d:85:b5:c7:a5:12:fa:88:b7:
         1c:ba:f2:f0:09:ea:43:1b:5d:2d:36:0c:4e:81:f1:40:58:ca:
         86:41:be:bb:ea:12:f2:76:52:ea:20:3f:8a:33:8b:41:96:1d:
         7d:a7:35:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Ppv89nkEUv/rmrvefsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4
OTNjZmMwHhcNMjUxMDE5MTkwMTE5WhcNMjUxMDIwMTkwMTE5WjAzMTEwLwYDVQQD
EyhhMzVhYjdjYmQ5Mzc3YWRlYjczZGY2MGFmMDE1Njg0MTRmZTNiNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTGaGtamXGt4OjuzWikicnotMkPr
d1V6dP/V5QzAu/UCWj0KTPymrW7MCSvRnZPK2W5kK7yzI/qx4GIexoEUTnPhyV7V
LKAHfMRy/dRYjWOoNJ4W+EMbqISP9biH0W3aKlkoqnuZxawcDUNBAiKzMEEvBpjy
qjSHMFB7UUwgDMgolxs/oe/3AF88GQfY+o7K1G6sJj/EYtmQrGLrcaREgMLWfDfo
JIxTEXPLtQpbHkFvhjIqx7FaRhGupYUS+3JlrnypmzUNVhbPu66DTh+cCyk2PKvW
hSATLXajP+9c98nL3GCIzpI30KBOuGPnaJA26TbtSCif2Y/LdydDgimxdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNat8vZN3retz32CvAVaEFP47dBMB8GA1UdIwQY
MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt
MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi
LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqx31nCe
TXCy4ZlBeHF3pkOkFFaqskxk+AuLeaW1RpMYHl2vcfgypq8gyEgnCQLAcyRFgdzI
9bzM9z1dHK2hHbXF/RM+isEDJJ6ZBgeXdLOcrooJvF9VRWTBKaYUOcn27bjIXR6a
+EBIjP1mQsysbT2tnZdsZqdHcN+zRlPmQArME/vEHD5W85sIkI5Z2/pplQGTvDU8
023+DxRH565biV0E152otqnFTUWsKtlUyrHCCaCYuYok+o31eKMAYgmFu2sTiNmC
ahDN+9vTaJ70fYW1x6US+oi3HLry8AnqQxtdLTYMToHxQFjKhkG+u+oS8nZS6iA/
ijOLQZYdfac1QQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:39 2025 by rpki-client