Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File:                     Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier:          MK8m3DChxW5yJuTlALP8wkLGYHmVvgPleALGzk1WHeU=
Subject key identifier:   AD:CB:8D:99:A5:2D:6F:5F:F7:26:4D:E9:46:60:F8:1D:8C:6A:7F:22
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer:       /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial:       0199FBEAC175CABD55E00F2282245D14F539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number:          0B5A
Signing time:             Sun 19 Oct 2025 10:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:30 +0000
Files and hashes:         1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: P5rN0grZBTLoPZN1Llghoeh56hI0kOhzDKl1dnUJ0Cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c1:75:ca:bd:55:e0:0f:22:82:24:5d:14:f5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
        Validity
            Not Before: Oct 19 10:01:30 2025 GMT
            Not After : Oct 20 10:01:30 2025 GMT
        Subject: CN=adcb8d99a52d6f5ff7264de94660f81d8c6a7f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:c2:76:b6:ca:cb:36:a7:f2:38:6f:c4:2e:
                    e4:b0:3e:da:ea:24:62:00:a2:a7:7b:d3:2d:f1:3c:
                    48:a5:5b:17:fb:dd:0d:34:5b:5a:17:94:1b:12:7c:
                    94:10:39:1f:b2:34:bf:d6:33:2b:33:95:87:b6:7e:
                    d8:eb:3f:56:d1:79:d3:51:97:d0:51:fc:71:22:b6:
                    53:6a:76:a2:51:1b:45:e9:b9:f7:1e:a1:69:e1:9c:
                    64:4a:95:cf:52:cb:0a:25:96:be:aa:05:2b:59:86:
                    28:39:a9:0d:d2:c4:35:f4:da:e1:59:c4:68:9a:39:
                    13:a9:c4:2e:1f:09:65:b2:df:c2:80:51:51:32:49:
                    20:5e:e9:31:74:6a:db:da:5f:53:9c:ab:95:1a:50:
                    30:61:21:a5:4c:c1:de:6a:a4:56:10:e0:db:60:0f:
                    af:db:41:c2:0e:24:60:f6:8f:b0:60:51:59:47:2d:
                    65:45:7b:58:40:ae:c8:53:a3:5b:9e:dd:8f:80:51:
                    f1:d5:a1:5e:03:93:0c:37:07:8e:bf:8e:90:ed:71:
                    6d:90:e8:33:b3:48:e6:e0:19:bf:de:5d:11:04:af:
                    b0:ac:77:82:11:34:96:cc:78:3d:78:b1:39:8f:bb:
                    8c:75:c9:be:fa:df:6a:da:89:f3:f3:d5:5a:81:3b:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:8D:99:A5:2D:6F:5F:F7:26:4D:E9:46:60:F8:1D:8C:6A:7F:22
            X509v3 Authority Key Identifier:
                keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:57:3d:93:18:da:9a:f9:31:6f:9c:34:0b:ca:bc:b8:dd:
         f0:2f:94:bb:2c:8c:16:80:57:a8:30:9d:52:cd:a8:ea:00:77:
         a0:cb:9c:60:3f:60:e0:0c:0c:d5:01:e2:f9:5f:5a:7c:55:23:
         e6:14:34:7b:68:7c:2a:e5:97:74:ed:1b:c7:38:63:1d:4f:b3:
         bf:ec:3a:29:41:36:02:1e:00:81:74:59:5f:8c:bc:db:fb:a7:
         14:67:7b:ee:24:5a:cc:e4:4f:2c:1b:4d:75:d4:be:12:89:e9:
         0d:bd:32:b3:5c:f8:1f:2f:d7:7b:c9:0a:a2:86:86:df:05:ca:
         8f:8b:98:1f:b9:d8:ae:6f:47:87:77:1e:22:89:44:e8:3a:ea:
         39:ad:9f:7c:d6:22:69:5f:22:70:a5:a2:2e:ae:e8:aa:a4:21:
         38:1d:79:17:35:58:a8:39:61:8c:e7:a3:79:23:f2:67:80:a7:
         47:a7:83:c1:cf:5b:93:48:ca:79:b2:5f:1f:f8:59:6d:db:49:
         8e:ba:0a:29:75:d7:3c:6c:66:4f:d3:a6:33:4d:98:2a:82:4b:
         87:04:fb:93:2f:c0:74:f7:a3:fb:ce:ef:8d:a5:ee:9a:6b:f9:
         a4:70:65:e1:b5:53:16:b5:a3:e3:9c:7b:ac:bb:3c:b1:62:3e:
         dd:14:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client