Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File:                     OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier:          TNJt/CPIKrI8C2Ol0lLZ2VwLszyESc9r93sFMTwJAmY=
Subject key identifier:   F8:1B:14:47:9D:F8:E3:D7:C8:92:D4:7D:C1:99:27:EC:B7:C4:84:FC
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer:       /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial:       019A72CA43106C99D045BEAF6098DBBF88EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number:          1030
Signing time:             Tue 11 Nov 2025 12:00:49 +0000
Manifest this update:     Tue 11 Nov 2025 12:00:49 +0000
Manifest next update:     Wed 12 Nov 2025 12:00:49 +0000
Files and hashes:         1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=)
                          2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=)
                          3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: qiwzf5IWzp6CC14Yo97elMJkjt9CrbgRHcfqtOn6H14=)
                          4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:ca:43:10:6c:99:d0:45:be:af:60:98:db:bf:88:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
        Validity
            Not Before: Nov 11 12:00:49 2025 GMT
            Not After : Nov 12 12:00:49 2025 GMT
        Subject: CN=f81b14479df8e3d7c892d47dc19927ecb7c484fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:e3:e6:8a:0a:e1:78:a6:25:58:a2:bd:b6:
                    21:f8:34:71:cd:87:48:67:da:12:ef:b3:bb:f3:8d:
                    ba:c1:e0:08:51:ce:0b:3a:0d:a1:8b:f6:1e:be:cf:
                    c2:55:69:77:a2:45:14:de:29:27:00:2f:12:79:bd:
                    2e:45:39:ad:fc:fe:ed:ae:79:e5:b2:28:67:46:26:
                    70:17:4d:b3:24:22:61:6d:dc:6b:d0:b6:2a:05:52:
                    5f:29:ed:f0:6d:3e:6c:c4:f7:2a:de:09:26:10:da:
                    af:ba:8b:14:39:e8:6e:51:45:cd:0b:c4:36:e2:f5:
                    9e:23:69:c7:62:53:a5:d8:61:79:99:05:88:fe:85:
                    0b:8b:f3:a5:bf:03:d5:60:c1:13:bd:93:cd:b6:ef:
                    e0:88:5e:60:2b:c3:5b:db:3e:5f:7d:75:38:9e:e7:
                    22:05:98:98:6a:aa:d5:51:bf:49:4e:f6:f8:64:14:
                    4d:74:e9:60:d6:43:95:46:18:cb:43:55:a0:a5:fe:
                    86:e4:99:12:a0:9c:73:2e:21:cf:bd:3f:42:21:33:
                    01:1b:fe:4f:7e:86:ef:d6:8c:d2:cd:73:56:e8:87:
                    5b:7d:3e:b2:32:13:c9:3a:50:3f:9c:bf:ce:e3:71:
                    a2:19:cd:80:e2:5e:a7:ba:78:7c:c3:d1:5f:38:07:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:14:47:9D:F8:E3:D7:C8:92:D4:7D:C1:99:27:EC:B7:C4:84:FC
            X509v3 Authority Key Identifier:
                keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:5f:fc:de:5f:eb:67:e3:bb:9e:0d:d5:4f:b2:65:18:47:
         25:1d:58:a1:6f:ab:8d:0d:43:69:53:89:bd:23:ac:cd:71:41:
         47:0d:66:94:55:40:1a:9f:bb:bd:5e:74:05:79:f3:2e:59:cf:
         f3:af:b1:46:e3:f8:6a:77:80:05:67:23:1b:63:7a:e1:ec:2a:
         45:9f:85:01:39:6f:dc:25:b1:6a:f4:17:51:95:b1:00:f6:86:
         79:ea:21:88:52:64:db:b0:2d:97:99:9b:c4:c3:35:2a:77:15:
         53:a1:6e:cd:38:fe:a5:92:75:1e:a5:3b:8e:6d:ad:21:ac:3b:
         1c:d3:f7:dd:24:08:26:b8:64:2b:e7:2d:b9:84:bd:91:af:bc:
         7f:ef:cb:94:92:30:b7:61:c9:00:80:f0:e5:8b:46:f7:bd:5f:
         d2:a1:a9:fc:ef:14:b7:62:4d:bc:22:0b:df:a0:1b:04:1d:f0:
         97:24:f2:75:9b:46:d9:a7:6c:73:97:9b:21:17:53:e4:1c:ad:
         cf:10:80:c5:dd:b8:fe:d1:7b:b4:38:35:66:d6:52:b4:eb:19:
         12:b5:08:06:41:9a:e0:c4:7e:9c:0a:86:43:ff:04:c0:b0:be:
         41:cf:58:63:93:75:08:59:e7:06:eb:0a:a6:e5:21:98:52:df:
         a1:48:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:37 2025 by rpki-client