Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          DQJMGj7Uve1tbUruC5sLbIEXMTo2KBAh4vEOy61Q3zs=
Subject key identifier:   D1:ED:6F:60:E7:95:E6:75:EA:92:1E:BA:06:D5:DE:6B:A2:EF:1D:DE
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       0199FD6B07FB2296519C067079E5452490CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          102A
Signing time:             Sun 19 Oct 2025 17:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:13 +0000
Files and hashes:         1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
                          2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=)
                          3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=)
                          4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
                          5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: tNgM8qDS/DNpInKp6x+7Xl8gwjOF33wwTZsdKdpWIZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:07:fb:22:96:51:9c:06:70:79:e5:45:24:90:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Oct 19 17:01:13 2025 GMT
            Not After : Oct 20 17:01:13 2025 GMT
        Subject: CN=d1ed6f60e795e675ea921eba06d5de6ba2ef1dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:0d:21:3f:cc:68:3f:16:45:10:d3:de:5f:
                    47:9c:b6:a9:df:b3:5f:76:c8:4b:0e:c6:60:b3:11:
                    5c:03:42:16:d9:ba:34:69:2f:7d:5d:7e:e4:6d:5d:
                    e4:49:a8:76:fd:d2:61:7b:4d:bc:30:2c:42:a2:84:
                    62:4a:99:d5:ab:59:7b:df:6e:72:31:d2:54:eb:9f:
                    04:09:da:71:13:ca:53:60:e7:12:ba:86:31:45:d7:
                    5f:ec:6b:d1:4c:70:08:9f:a6:47:bf:8d:71:47:07:
                    17:fe:21:25:f6:94:f5:2d:8d:ab:f5:87:3a:51:bb:
                    44:62:81:8b:b0:4f:92:ba:89:72:b1:eb:32:3b:5c:
                    d6:59:87:f9:ac:88:30:6a:ba:95:28:c8:61:49:96:
                    ee:e5:7a:7f:c8:3b:49:f0:cc:a9:f4:95:41:a8:bb:
                    7c:db:74:1c:a5:04:0a:ef:00:2a:8f:61:93:73:3b:
                    49:6c:86:05:bc:36:43:95:ad:6b:02:1b:af:5f:44:
                    e8:29:b8:13:c7:12:ed:7d:3c:18:52:de:7f:3d:b6:
                    68:32:50:4e:1c:d7:3e:f5:75:3f:7f:62:b1:64:71:
                    e2:ee:44:1d:cd:0a:7b:1b:4c:e3:a2:93:fe:d7:cd:
                    68:db:24:f8:dc:f3:ea:3a:60:b4:fd:63:66:17:81:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:ED:6F:60:E7:95:E6:75:EA:92:1E:BA:06:D5:DE:6B:A2:EF:1D:DE
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:ce:6c:6f:9f:79:a1:f7:a0:27:c0:af:b3:57:57:de:92:
         4a:28:b7:3f:46:77:14:ea:82:60:04:94:12:58:79:5a:26:f5:
         78:be:38:5b:57:d7:26:31:57:ba:ed:86:f2:d1:2f:27:29:e3:
         19:3c:49:56:a3:e5:83:da:60:26:8e:97:d7:d3:d4:c8:5d:18:
         3a:ca:9f:af:f8:d2:14:94:6c:0c:45:62:79:2c:88:f9:d2:b4:
         4c:5c:78:98:24:d3:74:c1:e6:0c:c9:98:58:f5:58:ad:2d:47:
         48:30:c9:21:05:1c:63:38:a4:be:f2:68:15:78:4f:22:71:47:
         72:82:f8:59:9c:b2:dd:f9:f5:82:a8:00:f2:21:1e:77:a8:46:
         c3:9b:66:48:d1:0b:18:94:ee:89:7f:0e:d0:63:ba:f4:c4:3f:
         66:24:4a:8e:7a:4d:16:89:e5:5a:68:98:d9:6c:5f:97:a7:63:
         0d:cb:9b:9b:97:03:9f:53:1f:fc:8f:40:29:ca:93:96:9f:9f:
         83:20:f4:d1:99:05:aa:d1:d2:25:f9:56:f5:dd:9e:15:da:e3:
         fe:e9:89:8b:91:bc:74:d0:8f:30:1a:6e:b5:72:e5:b3:86:30:
         aa:06:91:11:8c:33:5c:69:3d:7b:c3:4b:53:8b:7b:25:c9:18:
         af:2d:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:01 2025 by rpki-client