Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File:                     OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier:          fO1qzvMLMgvK+1R9JZ+D+FDi8UrZUIkP2R+7YiYwl3A=
Subject key identifier:   30:96:C0:89:64:34:EC:E1:EF:3B:78:A9:B6:D5:AB:38:0B:E7:EA:92
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer:       /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial:       0199FB7C7B41DBB241F25301AF749BD42B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number:          1272
Signing time:             Sun 19 Oct 2025 08:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:03 +0000
Files and hashes:         1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: In36Qxc0VOjk9MSx3+NahGI9lJ/WzKiXmN6HB4j6gPw=)
                          2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:7b:41:db:b2:41:f2:53:01:af:74:9b:d4:2b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
        Validity
            Not Before: Oct 19 08:01:03 2025 GMT
            Not After : Oct 20 08:01:03 2025 GMT
        Subject: CN=3096c0896434ece1ef3b78a9b6d5ab380be7ea92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:91:68:db:a1:93:07:c8:96:35:da:a0:c4:
                    bd:53:d6:9c:e7:fe:6b:67:9a:df:32:9c:1b:99:c2:
                    d5:e0:b9:29:8d:c6:9f:93:46:70:91:60:be:cc:76:
                    06:aa:3f:15:bb:df:40:a9:3b:d9:d5:ad:1f:35:11:
                    07:39:42:3d:fe:47:c7:77:61:27:15:bb:7c:07:b3:
                    82:48:e3:8b:4a:a3:32:cb:2d:db:f9:69:4b:8a:ac:
                    ef:0f:8c:f1:c3:3b:7e:65:10:dd:8d:c7:cb:60:6e:
                    7f:6a:d5:d9:3c:13:50:5c:bd:13:df:e9:f7:b9:0c:
                    e2:1f:f2:45:ec:1f:59:88:62:03:eb:2e:e0:5b:ad:
                    41:51:02:98:ff:41:45:2b:3a:35:c7:1b:fd:60:ee:
                    43:f0:f9:63:0d:bc:1d:c2:ce:0e:fe:12:b7:60:08:
                    ba:8c:f1:9c:7a:fa:9e:96:35:60:34:bb:24:3c:f8:
                    dd:b5:3a:63:63:07:46:3f:1a:96:75:e0:c4:01:0f:
                    c3:57:30:45:91:30:38:9c:55:2e:14:5a:35:5c:eb:
                    dc:6a:db:3c:3e:45:30:5c:dc:cc:93:4b:02:ff:dd:
                    39:00:e0:5c:e2:ee:03:cd:2d:7c:19:31:e3:46:7d:
                    b1:22:4a:9d:b0:a3:18:22:33:9c:ea:52:51:e4:ee:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:C0:89:64:34:EC:E1:EF:3B:78:A9:B6:D5:AB:38:0B:E7:EA:92
            X509v3 Authority Key Identifier:
                keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:27:db:99:e3:f4:34:b1:5a:c1:70:90:39:f1:fb:7d:54:43:
         09:d2:c6:ca:48:5a:4b:39:39:bf:58:9b:1c:c1:86:a4:9c:b1:
         f1:cf:d5:e5:dd:08:b4:77:fe:96:db:2d:a7:39:cf:60:b4:ae:
         6a:fc:b5:d3:28:c8:79:d9:eb:63:a2:61:5f:d7:80:66:36:b5:
         50:bb:48:ca:f4:0c:d1:7a:91:c8:8f:c2:50:8b:9c:80:4d:1d:
         f8:97:1d:4f:a1:93:54:f3:f7:fc:13:61:f1:cb:7d:9b:32:21:
         51:d9:c4:cb:59:62:9f:a9:00:35:8b:c1:71:bc:df:ed:7a:87:
         49:d7:f9:8f:89:fd:74:ab:a1:ec:c9:fa:f3:55:d2:a9:d1:f4:
         60:7b:df:d0:c6:08:dd:de:d1:79:33:df:a2:1f:19:6e:ba:56:
         a7:2f:47:a4:32:11:6a:41:76:9d:6f:a3:71:92:26:40:89:01:
         0f:4f:8e:db:03:3b:5c:17:17:f7:ac:d7:d0:4c:9c:fe:f8:99:
         2e:1e:e8:9d:83:a2:dd:40:ac:06:b0:16:af:dc:65:d9:93:be:
         62:a4:c6:a6:49:0d:fd:98:f1:8d:db:05:5d:55:fc:d2:b0:59:
         61:95:c1:f1:41:53:da:ec:87:32:af:59:d1:2c:21:4c:80:27:
         0f:9b:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:20 2025 by rpki-client