Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File:                     OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier:          OYRS4bHR3piVh4ECuR67VkvEkpGD+L1cODT2DUx3ASs=
Subject key identifier:   FF:FC:69:1C:8E:3C:27:15:5F:89:F2:6F:3A:CA:38:57:25:93:8B:0E
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer:       /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial:       0199FBEAA27CB6F9FECDE9BB300CBBAA2C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number:          05D4
Signing time:             Sun 19 Oct 2025 10:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:22 +0000
Files and hashes:         1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: rgaCWmEZ3/RSEsWRuqySV31MaYya89skh5aJTnKIYC8=)
                          2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a2:7c:b6:f9:fe:cd:e9:bb:30:0c:bb:aa:2c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
        Validity
            Not Before: Oct 19 10:01:22 2025 GMT
            Not After : Oct 20 10:01:22 2025 GMT
        Subject: CN=fffc691c8e3c27155f89f26f3aca385725938b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:31:78:cd:31:db:5a:a5:3b:d4:32:1a:31:
                    ae:bb:b4:e5:b8:01:e9:c1:86:0f:68:c4:0b:01:45:
                    f2:6c:85:6f:21:3d:f7:c2:83:e4:7b:c3:df:48:9c:
                    b1:f2:68:50:53:8c:78:70:17:16:27:66:ef:dc:54:
                    7f:51:da:9d:5f:6d:ec:a6:00:40:64:75:47:8b:5d:
                    1b:54:d0:71:c7:25:81:46:c6:5b:6f:bf:32:b8:ec:
                    68:8f:ad:41:9f:20:f8:06:23:c0:a0:8f:2f:93:e2:
                    f1:56:e9:c6:ef:db:cb:4a:01:66:7e:bb:75:82:ea:
                    74:c1:48:53:6a:ca:7d:7a:e1:10:6b:5c:bd:fe:0e:
                    24:0e:6b:91:b6:48:3a:f9:8c:d1:12:fc:06:d5:05:
                    bf:ee:90:6b:e6:6c:d6:a6:39:06:cc:c8:41:68:d9:
                    58:63:40:82:9f:c8:39:49:a8:44:04:fc:a5:da:22:
                    32:a7:64:10:ac:c3:7b:ed:a3:06:49:28:a4:73:2b:
                    3e:f7:c1:36:4b:7e:da:ba:e5:7e:aa:5d:b8:f0:50:
                    c8:32:23:36:ce:ca:95:3e:e6:98:47:1a:c9:8e:44:
                    89:9f:1e:6a:43:8e:d0:6f:9e:70:eb:02:64:b7:c5:
                    94:bf:a0:f8:36:04:76:55:eb:b3:a8:55:24:78:0c:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:69:1C:8E:3C:27:15:5F:89:F2:6F:3A:CA:38:57:25:93:8B:0E
            X509v3 Authority Key Identifier:
                keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:0c:c1:02:de:37:6a:4e:c3:81:97:cd:ab:44:03:ed:aa:
         4a:14:8a:6c:57:a8:2b:3b:50:38:71:84:31:b9:d7:d8:52:76:
         5f:46:09:ed:d8:1a:98:ed:65:f6:60:c0:f3:9f:2c:f2:23:0d:
         3a:f1:8e:a3:cf:a6:c5:8a:c1:19:39:eb:0b:a7:6c:e7:69:10:
         43:72:df:ed:7a:77:9b:4e:73:5c:ff:d9:3b:b4:fa:e8:ea:00:
         5c:d0:5a:a9:fc:a5:a3:56:3c:a2:f8:14:e1:d2:64:af:31:fb:
         25:5e:b1:83:10:13:9e:fc:37:da:a6:8a:11:a2:1a:e6:b3:ab:
         2b:4c:fb:85:a0:6a:89:70:68:16:df:e1:ca:04:9f:1d:ea:07:
         f4:fe:59:fd:00:e7:ea:87:60:6a:9a:d8:d1:4f:2f:95:6c:ad:
         5e:00:7e:36:ab:dd:d8:f7:f7:84:75:2b:3d:48:38:2c:e6:4d:
         4b:91:fd:b2:d0:95:36:27:b6:7e:51:e0:47:66:9b:03:20:0f:
         bc:a6:8c:5c:2a:f1:31:e1:16:95:b0:ec:ba:d4:91:dd:44:66:
         73:79:e2:4f:36:82:99:f8:e2:6b:5d:c2:2b:a8:db:d6:38:c8:
         ae:64:ec:60:d3:92:a4:fd:52:1c:83:7b:10:ef:27:d7:11:6c:
         e3:2b:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:45 2025 by rpki-client