Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          XuQc6/FLoTPswDDwCh6XPfY5f45Z9LGrd6q8Ouv4WmM=
Subject key identifier:   1A:57:CA:32:A7:A3:67:6E:C0:DB:B7:31:15:57:77:49:FC:34:A0:40
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       0199FC588D77EE39736E77C17EF658011674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 12:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:25 +0000
Files and hashes:         1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
                          2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
                          3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: 9Osl3cBdi+vLuMJLMmf1zHNXkZrg55Yq2oLb5X4zFKE=)
                          4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:8d:77:ee:39:73:6e:77:c1:7e:f6:58:01:16:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Oct 19 12:01:25 2025 GMT
            Not After : Oct 20 12:01:25 2025 GMT
        Subject: CN=1a57ca32a7a3676ec0dbb73115577749fc34a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:c9:0f:65:f3:91:ef:cf:da:40:42:83:5b:
                    b6:34:55:c0:7f:c2:71:a2:51:65:30:09:b8:7d:3b:
                    8e:f8:19:0e:4f:83:5b:1a:b5:3b:9c:67:c4:0f:ac:
                    1f:32:b0:8d:ad:99:3a:6f:89:6e:76:22:0a:60:58:
                    30:32:c2:27:d1:54:7a:62:77:f3:03:ce:8d:2b:27:
                    21:d3:8b:53:0b:3a:2a:b1:b6:26:e0:93:f9:ca:df:
                    7d:74:a1:18:0e:68:3b:c3:d8:4a:06:42:e1:36:39:
                    27:65:e6:a1:62:c7:98:c2:6b:e8:18:b9:a9:16:68:
                    a4:a0:ce:fc:3d:57:27:c4:6d:99:9f:32:c7:03:60:
                    6d:95:de:6b:3f:e7:2d:56:a7:48:e1:73:ef:fc:2e:
                    5c:35:58:20:84:e1:a3:54:57:67:97:b8:21:c2:e3:
                    bd:4c:c5:62:0f:f1:b0:31:07:df:d7:6e:bf:7f:2c:
                    74:b9:94:51:68:14:5b:ff:ab:5c:cb:9d:dc:29:9b:
                    be:d7:2d:ed:8e:93:e6:24:59:f1:66:ce:b5:09:8a:
                    23:44:08:23:2e:1c:bc:e0:3c:9e:dd:88:8e:f5:b5:
                    f2:7f:c5:e6:fe:7a:0d:aa:05:08:f4:3c:77:2f:80:
                    ae:3e:dd:29:fa:2b:66:33:82:ef:cb:ff:95:d0:c0:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:CA:32:A7:A3:67:6E:C0:DB:B7:31:15:57:77:49:FC:34:A0:40
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:de:6b:fd:22:96:3e:74:71:d4:39:46:fd:ab:03:d3:bf:
         60:9c:f7:c1:17:18:e1:cc:ca:ec:60:66:ea:e2:df:83:9b:b3:
         64:27:a9:2f:17:61:c9:a9:6b:85:22:9f:30:92:6a:6e:57:12:
         2d:3d:c0:96:52:34:63:13:59:30:b4:90:c6:74:fd:c1:ae:dd:
         de:f5:f2:d1:87:54:f9:aa:ab:ca:b3:e1:52:67:62:29:36:e6:
         cc:8d:57:e9:f9:cf:0b:b3:36:db:86:d3:ef:e0:d1:f7:28:82:
         18:94:c7:e6:48:21:12:8b:14:83:3b:b0:51:bc:de:da:49:a9:
         8b:fb:6a:2a:63:96:20:f4:4d:4a:c1:ed:50:be:ea:30:d7:3f:
         b1:a9:e5:9f:01:d9:1a:7f:90:e1:07:25:74:65:2e:32:4f:55:
         ed:07:fd:47:60:e5:b3:e4:6f:0f:52:4f:31:9c:6d:f4:ac:46:
         f4:8b:d5:f3:cd:c5:e7:ea:c4:49:06:64:2a:dc:2d:30:3f:9a:
         e2:18:fa:6a:88:03:8e:e2:0b:87:b4:43:1b:e3:49:b5:31:7c:
         22:41:f0:81:c4:e4:df:77:cd:f3:32:5c:be:01:e8:f8:38:68:
         fd:cb:bf:d8:ea:bb:47:73:68:18:6b:85:4a:5b:0b:ed:00:3c:
         bd:ee:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:58 2025 by rpki-client