Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          3bp59FsniioAwvrli088aD9ZptXfeRabfg+C3OfODZw=
Subject key identifier:   55:F7:92:67:69:E0:96:C8:0C:C0:DE:76:A4:B3:5A:92:A9:C1:F4:89
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       0199FCC622A980A425D29A076A2EEDA5733C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          09EC
Signing time:             Sun 19 Oct 2025 14:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:07 +0000
Files and hashes:         1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: ctNVIJC4t5WEqhN2+EBRUHhmOHiYdXJ9bxvgDgm2W84=)
                          2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:22:a9:80:a4:25:d2:9a:07:6a:2e:ed:a5:73:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Oct 19 14:01:07 2025 GMT
            Not After : Oct 20 14:01:07 2025 GMT
        Subject: CN=55f7926769e096c80cc0de76a4b35a92a9c1f489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:c9:4e:da:8f:a8:55:6a:1b:08:8a:ea:fc:
                    ee:28:08:20:d9:e5:d5:74:6a:04:52:c3:cc:7c:f9:
                    55:45:16:59:35:93:a2:3b:7d:ce:54:9b:6d:63:ae:
                    75:50:11:94:df:e8:a3:84:0b:fd:dc:ef:6b:eb:14:
                    43:9d:a1:c4:62:91:94:08:2e:86:b5:76:de:ee:c1:
                    39:c6:7d:5f:a2:b1:13:1f:4b:ad:7a:cb:f0:ae:59:
                    d4:b0:75:42:89:88:7d:65:64:88:32:9a:f7:b8:c0:
                    be:b6:8e:61:12:b4:89:3c:22:cc:fe:13:c0:c6:5d:
                    ee:60:2d:60:7c:e5:6a:59:18:28:60:d7:53:7a:2d:
                    12:5e:87:75:0d:2f:24:4e:cb:af:9b:ee:dc:b6:30:
                    69:6e:96:5e:08:22:f9:9d:1b:19:f8:13:3b:fa:e3:
                    15:c6:90:13:ca:bf:ed:b3:5e:38:05:95:09:f4:20:
                    cf:94:96:61:1e:6c:82:3b:f3:31:44:97:c5:05:6f:
                    a2:82:1c:80:20:8f:3e:83:4d:63:92:19:34:ac:53:
                    eb:49:29:6e:96:d7:fd:f9:4b:16:8f:8d:60:ff:5f:
                    d8:5c:f6:35:24:16:12:cb:a8:48:29:b6:2e:42:e0:
                    a7:09:5e:32:88:b4:11:25:cd:b7:3b:fe:1c:d0:05:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:92:67:69:E0:96:C8:0C:C0:DE:76:A4:B3:5A:92:A9:C1:F4:89
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:cc:de:79:88:ab:85:0b:04:4e:b0:aa:c3:14:72:7d:ca:
         66:58:62:6b:84:e3:ed:34:03:04:d6:a4:04:0a:83:cd:97:2c:
         cc:41:1c:c2:78:09:ad:3d:a4:cf:83:19:69:b7:fb:62:9f:55:
         14:ef:89:55:4e:7e:51:2e:c8:47:12:fa:08:d3:86:10:c6:dd:
         b5:9f:2d:f2:70:3e:67:fc:51:34:16:9c:cf:06:0b:be:7c:bf:
         a2:22:1c:f8:99:0d:ae:8d:57:73:28:63:c4:bc:a1:e4:40:af:
         91:99:c8:d2:97:de:67:9f:c4:eb:eb:a7:56:d1:6e:c4:4e:8b:
         23:98:47:36:37:6b:72:c2:82:58:07:6e:45:7c:fc:c1:56:b2:
         40:97:24:1b:58:d9:07:38:41:d2:d0:be:58:8d:05:72:1c:f3:
         1f:9c:2b:c4:f0:bd:0f:dc:31:0a:e2:cc:8b:24:e3:da:5c:f7:
         f6:75:2c:f7:1f:65:f9:24:04:ec:b7:34:89:97:3b:59:cd:d1:
         ed:a5:50:41:14:bd:12:a0:84:63:be:f1:25:a7:50:b1:e3:c7:
         56:38:74:c3:6b:72:47:fa:3c:e5:3e:c3:ea:da:a8:d1:97:46:
         65:8a:40:87:ad:dc:00:f5:82:b4:89:01:fe:7b:a4:35:5d:66:
         2c:b7:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:13 2025 by rpki-client