Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File:                     oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier:          F1LgWSJC/jrr55Ln+QiR229N4ylpKhDPw1sa25iKDes=
Subject key identifier:   DE:23:9D:53:D8:76:1B:1F:0F:1F:BD:A5:D9:16:12:CD:C0:AE:BF:23
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer:       /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial:       0199FC21B5BDAE8EB0E929E3A86B0140B74F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number:          03F1
Signing time:             Sun 19 Oct 2025 11:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:31 +0000
Files and hashes:         1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: LH44uW7hmIfIeR/QUFYOeQg24HYlktD5ojnUYMEDBqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b5:bd:ae:8e:b0:e9:29:e3:a8:6b:01:40:b7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
        Validity
            Not Before: Oct 19 11:01:31 2025 GMT
            Not After : Oct 20 11:01:31 2025 GMT
        Subject: CN=de239d53d8761b1f0f1fbda5d91612cdc0aebf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:75:ec:3c:76:5b:0d:a2:ec:87:1e:ae:4f:
                    5d:df:9f:a8:7e:c0:9b:b8:e2:42:1a:c3:05:ac:1e:
                    1c:3b:ee:c4:b0:65:16:c4:65:3d:70:4f:3f:e6:b1:
                    d6:91:bf:e5:53:cc:89:1d:95:45:68:92:dc:e1:e8:
                    8f:40:47:b4:53:dd:2a:cd:8c:e4:a4:e6:87:b1:16:
                    7f:1b:7f:a0:9f:c6:1b:7b:3e:31:f3:93:a9:e1:46:
                    38:05:6d:f3:fb:d3:fa:17:1f:51:72:6b:c3:8d:6a:
                    d9:5c:e5:be:9d:59:94:e0:55:97:34:0d:1c:95:c2:
                    05:c7:d4:60:48:41:48:8e:dd:6a:c6:c8:c5:8b:83:
                    19:0d:39:da:86:77:28:a3:0c:8c:9b:2a:dc:28:04:
                    4a:57:ba:c8:c4:3b:b1:4d:1f:b0:76:c8:69:81:df:
                    f1:1e:4a:87:cd:84:de:13:d2:c9:e1:8d:d5:bf:97:
                    2f:98:a2:c0:29:8f:d9:dd:05:2d:2b:81:fa:61:48:
                    de:a0:a9:c4:f7:f1:5f:8d:ca:37:e4:30:95:85:e0:
                    0e:b6:58:f0:bd:94:e9:1f:2a:7e:dc:8f:ef:28:1a:
                    b8:d7:a0:c0:ee:91:d9:95:c7:5d:77:9b:16:a5:6a:
                    50:af:7d:e8:69:ed:ca:96:fc:26:03:08:0b:d0:4d:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:9D:53:D8:76:1B:1F:0F:1F:BD:A5:D9:16:12:CD:C0:AE:BF:23
            X509v3 Authority Key Identifier:
                keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:50:76:b9:28:8a:40:44:e6:a1:1c:bf:ce:f4:4f:47:ab:ef:
         7e:c4:a5:bf:f2:1d:b0:81:a6:5c:06:4c:d1:3a:8d:bd:58:83:
         50:fb:94:2d:06:78:6d:dd:c5:e3:ac:83:3e:61:af:10:b0:30:
         3c:ee:34:84:49:c0:c7:6b:d2:ee:74:e2:c7:64:45:5f:86:a9:
         a3:3f:78:36:6b:f8:1f:b6:06:a8:03:5b:9d:40:1c:df:14:bb:
         f3:66:2a:75:93:c0:53:f6:6b:f7:c1:4a:a7:1b:ad:94:bc:c5:
         81:80:9a:89:00:e1:15:3d:4d:b9:e8:66:b8:bd:be:da:1f:89:
         ad:d8:85:05:c2:b6:fc:ff:75:9f:67:4c:3a:bc:97:29:ca:84:
         d5:18:6c:3d:51:ea:65:e6:db:a9:0a:c3:39:d9:a7:b4:4b:16:
         b7:84:fe:5f:75:36:fa:1d:c7:5f:ea:1e:88:66:b0:6a:7f:eb:
         95:6b:86:ee:03:b1:1d:b5:fc:6e:c8:65:28:e0:90:63:4b:ce:
         1c:6d:9e:b4:16:34:9f:0d:93:7c:9d:45:51:de:34:92:c2:7c:
         79:2f:60:de:f3:7b:22:68:00:2f:e1:33:1c:aa:72:bb:6c:22:
         6c:9d:47:b6:f0:64:a1:d1:4e:46:0a:b3:29:ce:00:18:53:c4:
         bf:ae:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:32 2025 by rpki-client