Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File:                     oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier:          gMxy6OBxdJ2c0gD5aLEM01Mc77MkrNDUl+zPiP16YhQ=
Subject key identifier:   0B:B5:1D:14:12:8A:26:33:FF:8B:E6:15:4B:A9:91:6B:8D:B6:D8:FF
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer:       /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial:       0198D54DC1B89006917A43CD33595D86FAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number:          0FC5
Signing time:             Sat 23 Aug 2025 05:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:39 +0000
Files and hashes:         1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: mJv33GB5OPP32BgNxkx48izpJcakdZsHYXp3MENbjLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c1:b8:90:06:91:7a:43:cd:33:59:5d:86:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
        Validity
            Not Before: Aug 23 05:01:39 2025 GMT
            Not After : Aug 24 05:01:39 2025 GMT
        Subject: CN=0bb51d14128a2633ff8be6154ba9916b8db6d8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:62:54:df:8b:70:8d:bd:0b:49:7b:16:b8:
                    a7:86:bd:cd:59:1d:76:cc:ed:aa:10:0b:e5:c7:73:
                    f3:63:94:75:1d:bd:3f:15:81:2a:ab:a1:fc:8e:20:
                    57:fa:05:b4:76:1d:ad:20:44:d7:e3:28:d0:12:ed:
                    82:c7:89:7a:6c:e3:71:0a:13:5f:d3:2b:d5:d5:9b:
                    88:8e:d1:54:48:71:74:ae:e5:0a:55:79:3b:3e:49:
                    e9:8e:0b:0a:9c:96:c6:38:4f:d1:4c:c0:04:88:d1:
                    33:09:f2:b0:a1:d2:07:91:8f:e7:7c:ea:92:0a:1e:
                    11:3a:0c:01:e9:de:f6:89:66:30:df:86:7f:53:ff:
                    5d:b5:16:f0:75:df:30:82:dc:ac:90:13:44:90:d3:
                    a3:6e:14:d4:67:46:35:c4:36:31:21:56:6e:80:37:
                    dc:f5:61:d8:cf:0e:de:df:09:c4:2e:71:bc:b8:7e:
                    d0:e2:53:47:f6:80:10:a6:f3:de:05:8c:01:56:02:
                    62:f8:35:34:4d:dc:1a:4a:4f:90:09:af:2c:7e:54:
                    f9:9a:a3:3b:28:76:fd:70:ee:73:d1:4c:cb:bc:e5:
                    d4:eb:fa:36:b7:3b:1c:52:e5:b0:9e:c3:6c:fc:02:
                    03:ab:47:f0:c6:bd:1f:de:09:42:ba:34:d7:01:bd:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:1D:14:12:8A:26:33:FF:8B:E6:15:4B:A9:91:6B:8D:B6:D8:FF
            X509v3 Authority Key Identifier:
                keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:aa:7a:06:1c:97:4a:08:7d:cd:41:30:ad:73:be:c9:4b:
         a5:f4:fe:9d:8d:86:06:4d:4e:42:f4:6f:49:bf:1f:ed:f8:c2:
         0d:07:1e:a6:2a:7d:1b:7d:2a:f4:d7:c1:48:77:b9:3f:39:90:
         be:f5:5c:d4:cd:56:65:37:7d:04:16:cd:12:ef:73:90:00:60:
         36:f4:bc:75:7a:d1:37:f4:03:01:19:46:7a:8c:de:80:ef:b9:
         d3:37:04:c8:f5:54:7c:1d:8f:0d:09:d9:ca:52:c3:c3:5f:2e:
         2d:1b:8a:26:82:ae:f7:bb:d9:c9:ba:84:cc:59:53:ab:be:3a:
         04:c1:2e:d7:a5:0f:9b:8c:d2:b4:13:7d:a4:8a:85:c9:6a:ba:
         af:b6:21:0f:eb:44:da:fd:1e:37:9e:2e:70:45:4b:ab:68:11:
         c4:c3:af:ff:83:94:e1:9c:f2:85:a5:6b:72:93:98:b7:9a:13:
         be:cb:a3:99:45:1d:05:88:07:e0:a7:36:fe:16:58:72:67:75:
         5b:f8:91:a3:15:ca:f0:8d:ea:99:82:c1:82:25:dc:7c:11:57:
         bf:41:ae:38:83:7d:b1:b4:46:d7:fb:fa:ce:07:44:cf:9d:c6:
         41:60:ee:75:0b:5b:cf:83:c0:aa:79:20:11:ab:5b:3a:2b:9c:
         64:90:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:13 2025 by rpki-client