Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          Q2w9IeLP1/LH8IiUCmrnf9Av18TxqtEoTWJFkTMwotU=
Subject key identifier:   63:BF:EF:0D:1B:B5:F8:1D:97:5E:D4:81:AD:DE:EA:B4:7B:B5:DE:C3
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       0199FC8F3F6D23512C0F05C7F89D7794255D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          0364
Signing time:             Sun 19 Oct 2025 13:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:10 +0000
Files and hashes:         1: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
                          2: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: meYv9FcY/Z+LUUVidxnfLmgUtqEDyo/5iI5+e/tHjao=)
                          3: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
                          4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:3f:6d:23:51:2c:0f:05:c7:f8:9d:77:94:25:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Oct 19 13:01:10 2025 GMT
            Not After : Oct 20 13:01:10 2025 GMT
        Subject: CN=63bfef0d1bb5f81d975ed481addeeab47bb5dec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:db:57:8e:6f:10:b4:4c:0d:21:49:42:95:
                    4f:81:13:33:13:26:93:9c:87:b6:eb:91:29:6e:7c:
                    97:8d:45:85:88:1a:60:2a:f4:d5:c2:09:17:21:c4:
                    8f:ad:35:cb:a4:19:f0:63:ff:15:b3:32:af:30:72:
                    58:b8:2d:52:6a:cf:62:f7:bb:96:ef:0b:11:7e:36:
                    09:01:f7:2e:1a:ef:66:16:19:e0:69:7f:f2:4f:4f:
                    38:c3:ac:e0:08:18:70:2b:67:9e:de:8a:82:e1:77:
                    f6:52:f9:39:3f:3a:df:d2:68:b5:97:c3:75:42:62:
                    e6:ce:d2:67:f9:89:71:c0:78:b8:76:ce:4f:2b:55:
                    2a:68:7d:07:cb:8b:8d:e1:ec:23:af:6b:66:31:9b:
                    b4:3b:6b:65:80:3d:bc:22:98:f7:f0:b9:db:21:fe:
                    6c:62:ac:32:74:29:07:ac:a8:3b:7b:fa:42:f9:85:
                    c2:a0:46:36:3c:a7:1f:04:ba:cd:af:d9:0c:93:76:
                    76:db:6d:2b:23:39:a8:7e:31:74:7f:7f:23:7d:6c:
                    30:21:0f:c0:33:74:d4:f1:38:dd:4a:1f:6f:c4:f2:
                    4a:c3:d7:ba:89:89:30:74:82:7d:a1:ce:f8:bc:bd:
                    5e:2d:be:53:48:40:e4:e1:ef:4f:d8:e2:c5:58:9b:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:EF:0D:1B:B5:F8:1D:97:5E:D4:81:AD:DE:EA:B4:7B:B5:DE:C3
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:5c:ca:75:a4:c7:7a:9d:ca:6b:91:96:26:92:d5:24:e3:
         26:ab:2b:77:77:35:5b:77:fc:6a:63:ba:0b:38:05:e5:45:f0:
         38:47:39:84:e3:95:55:1c:c9:4b:44:57:2c:32:47:7a:04:d0:
         43:08:33:4b:e5:17:7a:da:6e:9d:39:99:65:8e:5e:d3:42:ca:
         ed:ed:f2:7e:6e:6d:22:be:de:60:db:41:59:d4:42:e0:d3:c6:
         05:4f:8a:f8:a5:dc:72:2e:67:ae:7b:f7:05:53:1c:93:5a:c8:
         a4:af:90:8d:c4:a1:6c:11:09:4e:9d:d3:ce:26:e4:4e:f7:42:
         0d:69:05:f7:a8:8b:1f:31:4c:38:0d:e9:2f:a8:5f:0f:2d:d0:
         82:73:ef:c0:6a:ab:df:d0:b8:ff:c0:1e:2b:fc:39:99:5c:98:
         00:02:d7:03:5b:f2:f5:3e:ca:18:63:c4:a4:d6:d9:3e:73:62:
         d7:2a:1c:b3:dc:20:2f:7f:06:54:ce:fb:1f:3d:9c:db:80:a1:
         9d:8b:2b:82:e7:5e:76:d9:16:c7:a8:81:96:44:00:e8:87:2d:
         f4:9b:90:ca:29:10:f0:11:c2:14:9a:c4:2a:d5:2f:01:ab:33:
         f7:c3:0c:71:fb:30:32:08:1c:9a:69:4f:19:19:c6:23:a4:26:
         c6:f6:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:49 2025 by rpki-client