Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File:                     oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier:          YVPaCJHXX7GQHP3anEQIKTvEIKuxgiTZtfsuXcrDz6c=
Subject key identifier:   55:5B:FE:AC:F5:FC:08:6B:A3:C6:79:E8:1A:C2:63:9F:A3:AF:15:F0
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer:       /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial:       0199FBEAAA2196F73DBE8B983F09A56FE3ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number:          0197
Signing time:             Sun 19 Oct 2025 10:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:24 +0000
Files and hashes:         1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
                          2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: HQmkMEMBQgdRTSVBEfeKbX2+zhuDQpC26DqZj0qKCZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:aa:21:96:f7:3d:be:8b:98:3f:09:a5:6f:e3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
        Validity
            Not Before: Oct 19 10:01:24 2025 GMT
            Not After : Oct 20 10:01:24 2025 GMT
        Subject: CN=555bfeacf5fc086ba3c679e81ac2639fa3af15f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:53:0b:57:a4:34:fd:85:04:41:f7:e6:f5:
                    37:32:25:f1:2e:a2:75:8b:12:ca:3a:08:99:67:5e:
                    80:75:9f:7c:d7:f4:f8:40:df:38:eb:f6:88:c7:ea:
                    ba:91:18:f9:85:29:4a:43:8e:f1:ef:d7:be:dc:c2:
                    ed:be:30:9d:cd:2a:54:a8:20:ad:40:44:ff:99:31:
                    a8:42:1f:59:25:48:8b:a7:39:19:97:81:bb:b5:15:
                    2f:48:3f:a9:6b:da:73:e2:be:fd:7c:f3:78:00:69:
                    62:8f:9b:b8:5c:21:ef:7d:9c:74:11:f5:8b:b6:a7:
                    71:c9:9d:72:3c:2b:88:85:3f:2a:45:c8:ea:12:33:
                    7d:51:34:a1:02:0f:df:31:44:32:e0:0d:48:e2:b7:
                    1b:f1:4d:85:79:c4:91:d1:41:32:89:5b:e7:f2:c8:
                    78:af:05:c2:6e:6a:b0:2e:24:10:e1:99:01:e5:6f:
                    dd:30:72:78:8b:8d:e8:fb:43:d7:c0:e3:2b:97:f1:
                    75:04:88:53:7d:09:7f:95:09:fb:fc:5c:9a:48:0f:
                    b3:9f:8c:cd:c9:24:f6:d4:9d:39:59:33:ba:17:39:
                    e7:52:1d:3e:6e:fd:be:cb:5a:90:2f:a4:e2:bc:4e:
                    4c:e3:4b:e9:4c:e8:48:10:af:a1:ac:3f:22:a1:e1:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:FE:AC:F5:FC:08:6B:A3:C6:79:E8:1A:C2:63:9F:A3:AF:15:F0
            X509v3 Authority Key Identifier:
                keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:8f:1a:ad:f0:31:8e:a9:53:b9:17:40:ca:7b:ad:d7:e8:
         f9:ce:32:e1:04:87:b8:b5:df:a9:79:93:1a:bd:8a:68:35:b8:
         a6:0e:d1:b6:1e:d1:4f:97:4e:41:a4:da:5f:d7:30:38:40:7b:
         32:af:1b:ed:90:72:7c:a2:df:54:9a:1b:f8:b6:6b:40:ff:f2:
         21:fb:49:5d:20:1b:a5:1a:a3:05:84:21:de:31:fc:14:38:2c:
         f4:40:0b:19:28:8f:78:55:fb:99:c7:62:e3:05:c1:41:1e:0e:
         53:3a:cc:dc:6f:0e:28:42:29:85:5d:e7:0b:9e:3b:d3:48:19:
         66:87:57:8b:59:0c:b3:39:c6:91:bd:ee:74:80:05:47:b5:9a:
         3a:de:60:1c:99:17:11:ca:45:c5:a9:07:b7:a9:1d:f4:03:1e:
         01:37:e3:a7:e1:d7:e6:3b:d4:bc:fe:bd:11:56:84:88:51:d7:
         a4:a7:fb:21:bb:bf:8e:73:96:fd:b7:0e:e6:b2:7f:f0:00:ee:
         5c:a9:49:0d:2f:f4:73:ea:21:d2:9d:2a:05:67:ef:aa:03:21:
         c7:f3:42:b5:5c:5a:c1:81:ff:0b:00:43:e4:6e:97:19:62:b1:
         f6:40:45:37:b9:ae:9d:34:55:fd:b0:b6:04:c0:f4:00:44:9e:
         e6:3a:fd:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qohlvc9vouYPwmlb+PtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGY4ZTI5ZTA0MjBlNzIzZGQxZGM0MThlODcxM2M4ZTk2
MDQzZDgwHhcNMjUxMDE5MTAwMTI0WhcNMjUxMDIwMTAwMTI0WjAzMTEwLwYDVQQD
Eyg1NTViZmVhY2Y1ZmMwODZiYTNjNjc5ZTgxYWMyNjM5ZmEzYWYxNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx5TC1ekNP2FBEH35vU3MiXxLqJ1
ixLKOgiZZ16AdZ981/T4QN846/aIx+q6kRj5hSlKQ47x79e+3MLtvjCdzSpUqCCt
QET/mTGoQh9ZJUiLpzkZl4G7tRUvSD+pa9pz4r79fPN4AGlij5u4XCHvfZx0EfWL
tqdxyZ1yPCuIhT8qRcjqEjN9UTShAg/fMUQy4A1I4rcb8U2FecSR0UEyiVvn8sh4
rwXCbmqwLiQQ4ZkB5W/dMHJ4i43o+0PXwOMrl/F1BIhTfQl/lQn7/FyaSA+zn4zN
yST21J05WTO6FznnUh0+bv2+y1qQL6TivE5M40vpTOhIEK+hrD8ioeGCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVb/qz1/Ahro8Z56BrCY5+jrxXwMB8GA1UdIwQY
MBaAFKCPjingQg5yPdHcQY6HE8jpYEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYt
YThhYjVkNTczN2RmLzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYtYThhYjVkNTczN2Rm
LzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlyPGq3w
MY6pU7kXQMp7rdfo+c4y4QSHuLXfqXmTGr2KaDW4pg7Rth7RT5dOQaTaX9cwOEB7
Mq8b7ZByfKLfVJob+LZrQP/yIftJXSAbpRqjBYQh3jH8FDgs9EALGSiPeFX7mcdi
4wXBQR4OUzrM3G8OKEIphV3nC54700gZZodXi1kMsznGkb3udIAFR7WaOt5gHJkX
EcpFxakHt6kd9AMeATfjp+HX5jvUvP69EVaEiFHXpKf7Ibu/jnOW/bcO5rJ/8ADu
XKlJDS/0c+oh0p0qBWfvqgMhx/NCtVxawYH/CwBD5G6XGWKx9kBFN7munTRV/bC2
BMD0AESe5jr9Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:22 2025 by rpki-client