Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File:                     OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier:          8FTJbd3S6P0Q9RTx6hEFVPWlxM+SenH+S7rAhxaq9ug=
Subject key identifier:   AA:A3:F9:5B:49:9F:B0:25:17:9A:7B:55:74:2B:15:C4:4C:E5:31:B1
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer:       /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial:       0199FDD9FAFB1891DA139FA83B75A41B629D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number:          164A
Signing time:             Sun 19 Oct 2025 19:02:24 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:24 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:24 +0000
Files and hashes:         1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
                          2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: /U3OzMDTBn/7937bLWXDOdOfrRmN/0PfAZWa0P+Mcdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:fa:fb:18:91:da:13:9f:a8:3b:75:a4:1b:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
        Validity
            Not Before: Oct 19 19:02:24 2025 GMT
            Not After : Oct 20 19:02:24 2025 GMT
        Subject: CN=aaa3f95b499fb025179a7b55742b15c44ce531b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:36:45:79:bf:fb:b4:24:7a:0c:93:53:d2:
                    7d:b0:2c:6b:43:1a:0c:e4:55:d5:e3:15:7c:fa:38:
                    2f:e7:f3:f7:a8:df:46:e1:6d:c7:aa:67:c2:7b:c7:
                    1e:78:25:51:84:11:fc:fc:48:5d:12:28:e0:c4:7f:
                    5f:6f:d1:75:ef:6c:a7:e2:32:ca:6c:de:db:d5:20:
                    83:46:84:19:36:22:c8:ba:c1:05:5c:44:cc:75:fe:
                    7f:78:9a:64:e1:9b:0d:ab:29:f9:87:60:68:29:8d:
                    36:51:7f:a3:4d:76:64:20:5a:87:5c:b8:3d:7a:36:
                    97:fe:62:ed:85:c3:28:da:62:3d:14:a1:bf:eb:a6:
                    11:5e:39:5f:24:b2:59:96:a9:8a:62:fa:d5:02:db:
                    99:e8:95:e9:33:50:80:cf:28:51:b7:0e:7b:71:ee:
                    41:50:f9:87:de:bb:e9:fa:da:dd:90:15:4b:60:7e:
                    87:68:7a:c8:40:e9:e5:64:45:c0:35:d3:90:67:12:
                    f5:37:80:31:b4:ec:9b:6a:55:7e:93:e8:04:4b:37:
                    cb:d0:83:4e:a5:27:d8:29:b9:86:91:f6:9f:14:7d:
                    54:00:c8:57:cd:32:e7:6b:25:4a:e4:24:f0:1a:97:
                    e9:2f:68:62:e3:7c:7f:76:1d:c8:cd:42:32:58:cb:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:F9:5B:49:9F:B0:25:17:9A:7B:55:74:2B:15:C4:4C:E5:31:B1
            X509v3 Authority Key Identifier:
                keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:33:71:21:36:43:d9:0b:7d:7a:55:fe:8a:7e:da:a1:60:c6:
         35:ee:0b:ce:7e:67:75:57:43:3b:2b:ee:a6:68:04:1b:73:e4:
         e8:b9:69:9b:40:91:bf:fe:99:80:d0:8b:70:b2:4c:06:5a:c7:
         1a:a9:c7:cb:1d:4f:28:49:ae:ef:bb:00:0a:10:54:f4:d5:a3:
         10:25:d7:5d:0e:38:6d:40:91:f4:51:99:5b:10:c3:34:89:e4:
         44:dc:cd:ea:75:06:60:8b:eb:d5:bf:c3:28:1f:54:6b:14:d1:
         59:76:16:3a:56:76:20:84:a8:53:78:c1:ae:9d:c7:c8:06:4b:
         40:70:40:ea:13:ca:d9:1c:70:65:ce:06:46:e4:a8:50:e0:f0:
         c2:40:5a:e7:17:ed:8e:f7:22:cd:34:51:aa:a7:fa:ab:e1:fb:
         5c:ad:f1:97:22:e1:53:cf:2a:f5:15:b1:df:f2:81:25:b0:d2:
         0a:b0:03:bf:64:c0:8f:2d:d7:d6:fd:a6:b0:91:15:ed:3a:57:
         69:fc:73:3f:59:ad:7b:75:80:c0:2c:d0:bf:bd:66:be:68:48:
         b5:79:64:78:b3:16:c4:fa:c7:fc:e4:34:d4:64:58:26:4f:3d:
         84:cd:c0:4e:55:90:23:e4:5d:d3:48:30:9e:d6:6a:4f:96:b2:
         bb:b6:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:37 2025 by rpki-client