Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File:                     odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier:          LTCDFMPOkjal3W5Zxgmf/FFPWDGKoge6Hk36WPT8iNk=
Subject key identifier:   69:42:E7:3B:E5:02:D8:A7:BD:F3:76:FF:28:08:A7:4C:B0:EE:4C:2F
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer:       /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial:       0199FCFD971009F261ACFE00ABF5C9977989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 15:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:41 +0000
Files and hashes:         1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
                          2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: nzeP8LcLZVZa1McthGTlf02ReXP0oCpaLbCUrto372I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:97:10:09:f2:61:ac:fe:00:ab:f5:c9:97:79:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
        Validity
            Not Before: Oct 19 15:01:41 2025 GMT
            Not After : Oct 20 15:01:41 2025 GMT
        Subject: CN=6942e73be502d8a7bdf376ff2808a74cb0ee4c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:35:dc:d2:3d:ac:8b:a0:1e:7a:2a:9e:93:
                    4f:d1:68:bf:97:18:91:c7:d8:c8:46:c8:d9:e7:3d:
                    88:1c:d5:de:81:e0:84:a9:61:7c:3d:79:df:a5:d2:
                    ca:92:d7:b3:e4:fe:d4:6f:bb:7b:85:d7:b1:8b:7f:
                    cc:04:01:94:b3:a6:16:50:d3:d8:95:5b:5f:74:2b:
                    23:39:93:79:5e:5f:f5:53:4a:72:da:3f:47:b1:82:
                    04:db:e9:ac:8d:f1:71:1c:06:32:d9:a8:a8:fd:15:
                    93:f6:1c:f4:39:54:1e:c1:ba:d4:fe:d8:0c:e9:37:
                    71:f0:d1:fd:6a:09:49:35:8f:f1:25:57:91:82:89:
                    c0:46:c6:d8:4e:bb:c6:c7:44:d6:1d:60:95:2b:cb:
                    c8:d9:58:e9:73:9f:5e:3c:17:89:ab:a2:fc:ba:c2:
                    21:3f:f2:f1:57:7a:c3:22:fd:43:9f:20:58:d8:6a:
                    bd:62:6d:8a:d8:da:92:58:aa:25:f3:50:32:d1:b8:
                    cf:e9:2b:1c:96:4f:cb:89:1c:ae:72:5c:04:d7:23:
                    2d:98:83:f3:2e:90:58:f3:cb:a1:7d:09:4f:72:ce:
                    c6:36:91:95:09:97:93:31:e4:fe:68:3e:e0:32:77:
                    5d:49:bd:e1:2c:89:66:f1:f4:2e:52:14:10:18:b6:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:E7:3B:E5:02:D8:A7:BD:F3:76:FF:28:08:A7:4C:B0:EE:4C:2F
            X509v3 Authority Key Identifier:
                keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:be:69:e6:f9:90:a5:1a:93:7b:df:ea:53:4b:73:ce:53:30:
         10:55:82:39:e6:8a:63:7e:cd:1a:56:6f:4f:f4:a2:65:9d:4c:
         e6:54:64:53:12:ec:41:97:0d:14:fc:40:68:3f:0c:50:5f:cc:
         17:f5:ec:f3:e1:37:6c:ac:70:fa:d0:68:8d:12:b7:7d:0c:b3:
         21:1a:cf:d0:41:21:a7:1b:05:f4:3a:5f:89:3d:73:6c:df:9c:
         13:3e:be:34:bc:78:ba:11:ef:70:ca:d0:6a:42:8e:9c:83:a4:
         21:da:c0:d0:12:d8:f8:7a:29:3a:e8:a5:39:06:ae:bb:62:fe:
         18:fb:1e:69:fe:a2:8f:f4:88:18:97:06:0f:f0:73:6c:95:ec:
         3a:b9:58:dc:a5:96:1e:36:31:5a:35:5d:57:2b:86:66:71:ba:
         5e:32:ea:a5:2c:a9:c8:90:1b:5e:0e:e9:36:8e:33:af:bc:6e:
         a7:4d:82:d8:e7:66:74:3e:e7:d4:83:ca:04:82:d0:1f:1c:92:
         11:ff:b7:4a:2a:02:e6:8d:9a:49:68:89:17:90:6f:e6:52:54:
         6d:18:63:64:a5:2f:36:ef:d6:51:7a:df:bb:ca:3c:c5:a2:c9:
         db:51:7a:82:99:92:26:c9:68:8d:99:af:a8:11:7e:32:59:77:
         c6:5d:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:25 2025 by rpki-client