Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          S3To8vEkdYAGqhxwzxNOHfb4SFWco/B5XVRfr2mD4TY=
Subject key identifier:   E2:C8:E8:02:B0:AA:90:E8:25:DA:B7:61:5D:D9:42:12:BF:C7:52:20
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019A1D639862491668BD0A45A0081949CAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1701
Signing time:             Sat 25 Oct 2025 22:00:57 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:57 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:57 +0000
Files and hashes:         1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
                          2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
                          3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
                          4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: Vwb6MTniW3lMKLg+9hcoNagPQLBfuXJkquvLE3v0NaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:98:62:49:16:68:bd:0a:45:a0:08:19:49:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Oct 25 22:00:57 2025 GMT
            Not After : Oct 26 22:00:57 2025 GMT
        Subject: CN=e2c8e802b0aa90e825dab7615dd94212bfc75220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:57:f9:6e:ed:dd:38:7e:d9:a0:e1:da:56:
                    c8:25:2b:a0:40:58:14:a8:38:1a:80:df:e4:6e:1d:
                    8e:d8:1e:9c:1d:19:3f:1d:ab:22:f0:78:cf:c4:a5:
                    fa:67:99:29:f2:67:71:37:28:b5:3a:11:68:e4:46:
                    db:b3:7a:3e:61:bc:5a:1c:b1:be:91:de:ea:4a:4a:
                    2c:8d:b8:6b:06:80:8f:68:16:88:0c:70:9f:06:8a:
                    e3:38:5b:2e:de:50:4b:f4:06:90:47:c7:40:b0:5e:
                    11:6b:30:9a:62:22:c2:60:60:1f:e3:45:6c:11:0a:
                    cd:98:38:7c:69:bd:62:3d:52:fe:b7:19:96:a0:61:
                    1a:12:fe:ee:29:5e:17:ef:e5:08:6a:60:65:f5:47:
                    46:fb:9a:80:13:3d:7a:05:3c:9f:4a:da:06:4c:1c:
                    f6:35:f7:ce:ec:87:ed:cd:b8:2d:51:93:57:8c:2b:
                    8e:8c:9a:7a:ab:31:73:5b:18:6f:52:bf:f2:e3:2f:
                    81:e7:8d:2a:bc:f8:c7:81:1d:0e:09:b8:01:e6:89:
                    de:d2:a6:b8:9b:de:85:0f:6a:25:91:77:b9:72:88:
                    ea:7d:5c:e2:17:8f:4e:65:2d:bb:68:2d:09:3c:3d:
                    40:87:82:cc:29:12:0a:5e:ad:d7:7a:3a:f7:a2:03:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C8:E8:02:B0:AA:90:E8:25:DA:B7:61:5D:D9:42:12:BF:C7:52:20
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:03:e8:30:bc:d0:d6:a8:05:95:fd:21:a9:65:ea:6d:d5:
         9c:ce:15:cb:1a:26:5b:6b:7c:aa:9e:09:87:80:37:ed:92:cc:
         76:dd:d3:e7:e7:e8:4d:45:85:96:8e:07:16:3b:06:25:b2:e7:
         09:1d:17:9d:29:cf:9a:08:6e:2b:fa:dc:16:d9:b0:4b:4f:33:
         13:86:66:b8:4f:93:3f:63:aa:b6:c0:23:7a:b5:32:0c:53:2f:
         67:96:8b:03:ba:9d:96:d6:13:b6:4a:82:22:f5:d3:71:37:7f:
         c7:d5:49:f9:54:bc:58:3a:94:c9:21:ac:b7:9f:44:d2:01:bd:
         75:ea:8b:24:a2:87:03:af:4c:3b:76:9d:67:ec:86:28:0e:a7:
         f4:40:16:56:ef:82:04:20:d0:ca:ba:f3:c3:f1:fd:2a:16:7d:
         6c:ce:ac:be:41:b3:56:36:0f:83:e5:90:ac:d5:ac:50:99:31:
         12:53:1c:62:f6:ed:84:11:9a:03:b1:05:73:c8:ed:4f:a8:7d:
         08:ac:fd:71:58:59:c6:36:1b:86:eb:df:9e:ac:4b:73:29:e3:
         2a:d2:47:8d:2a:ac:6a:ac:df:e6:ee:c0:ea:e8:53:b8:68:da:
         ec:ef:3e:57:5d:82:28:0f:0d:bb:d6:5f:5d:66:19:0f:b8:5b:
         2d:10:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:17:33 2025 by rpki-client