Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File:                     OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier:          ArP/9XsG1KBmgRpeDhT+ML3qPfnfRTzJXY6T+0Ix+Lw=
Subject key identifier:   26:69:55:93:E1:20:35:D5:E4:8A:61:29:19:09:6C:57:F3:AA:3F:30
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer:       /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial:       0199FBEA76BBEF094DFD6C05C7D61F489B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number:          16AB
Signing time:             Sun 19 Oct 2025 10:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:11 +0000
Files and hashes:         1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: gjtdleX6xg0kEaCe4axlPdIZGMCM9VjGT/yBqPX+M98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:76:bb:ef:09:4d:fd:6c:05:c7:d6:1f:48:9b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
        Validity
            Not Before: Oct 19 10:01:11 2025 GMT
            Not After : Oct 20 10:01:11 2025 GMT
        Subject: CN=26695593e12035d5e48a612919096c57f3aa3f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:60:fa:5c:6a:de:06:48:2d:3e:15:9a:56:
                    f6:ce:dc:54:d4:16:21:00:9d:3d:27:30:64:48:a3:
                    4d:99:f5:b3:57:d1:c8:c1:8f:b3:54:2c:13:f3:4c:
                    e3:6a:2f:f7:98:02:37:03:0a:a9:c6:68:e3:19:c7:
                    b9:9c:e9:27:37:18:f4:14:ea:03:ce:80:91:91:ec:
                    7c:c4:65:5d:83:3e:f8:53:94:b7:f5:b0:bf:e8:21:
                    04:4a:d7:99:74:1f:81:db:ff:db:59:5b:bb:ce:88:
                    31:8d:9e:aa:6d:a4:b9:2f:82:b3:cc:dc:70:83:b9:
                    3b:10:e0:c3:b9:55:b1:3f:10:69:e8:00:01:76:8f:
                    37:20:f9:58:00:19:b6:b6:55:99:61:7b:41:ad:5a:
                    df:3a:b8:7a:12:59:e8:f0:53:cd:b9:92:ac:af:68:
                    ab:0a:d6:51:2f:14:06:9a:86:30:3b:d7:20:87:ef:
                    ab:2c:2c:a3:38:ef:52:05:92:0e:65:76:04:7a:3d:
                    65:18:cb:ce:96:09:6f:e7:e0:c0:fc:6f:32:a4:41:
                    fc:cd:48:7e:85:b3:c7:1c:51:4a:f9:2d:bd:44:08:
                    16:b4:14:c6:9a:1f:55:db:98:f5:43:72:11:e0:94:
                    bd:ce:28:d8:bf:77:90:02:b2:79:ea:21:c4:1b:a6:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:55:93:E1:20:35:D5:E4:8A:61:29:19:09:6C:57:F3:AA:3F:30
            X509v3 Authority Key Identifier:
                keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:5e:87:2c:e5:23:e9:15:3e:ee:12:eb:16:09:4c:9e:53:
         c4:bd:d5:64:4a:68:d4:fb:94:e2:ad:b1:77:65:b9:f4:97:37:
         5a:da:51:93:48:24:ec:0b:d2:81:d8:e5:3e:9d:de:2b:e6:99:
         4b:95:9a:ed:ae:52:34:8c:4b:83:8c:72:a5:22:cb:f3:fc:f3:
         9c:89:02:49:3d:3e:57:db:8b:e5:52:0f:2b:90:15:66:30:08:
         95:fd:87:3a:ac:40:ec:82:3c:fa:1b:24:86:73:8e:b0:17:22:
         a3:25:b0:c0:58:bb:9f:09:8d:fa:32:86:fd:54:f6:22:55:a6:
         d8:3f:b2:eb:cd:17:4d:e3:92:4c:6d:0e:d9:ad:60:0d:2a:87:
         5e:4d:c0:9f:26:fe:c4:c8:a7:29:51:9a:02:08:df:8c:ac:aa:
         74:5c:31:f7:63:56:6b:d8:24:8b:5c:36:49:5f:ab:d9:b1:f2:
         7c:90:d0:a0:d3:25:d9:08:bf:88:94:df:09:49:50:a6:94:33:
         77:c3:31:68:d1:4b:ac:09:f1:9a:04:d0:6b:62:1d:8b:b9:a1:
         71:5f:67:78:f9:24:70:09:04:68:ac:c8:1a:9d:46:fc:ce:da:
         7e:d8:fc:e9:6e:d7:9b:ee:5f:6d:81:e9:05:85:9e:68:1d:29:
         90:46:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:45 2025 by rpki-client