Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          Z1HcPdjjPk6n0l+zgYsMwg4YiljUlsjjieFTuwWKA5Q=
Subject key identifier:   8F:5E:2F:41:8E:B6:23:CC:F0:2E:7E:8D:A6:FC:5D:9A:C1:5E:15:5C
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       019A5FB159E7F31EC5938170DD278AED58BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          072E
Signing time:             Fri 07 Nov 2025 19:00:49 +0000
Manifest this update:     Fri 07 Nov 2025 19:00:49 +0000
Manifest next update:     Sat 08 Nov 2025 19:00:49 +0000
Files and hashes:         1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: a9BD/SIiGmW0prv1wfnq6hjvurt6pmO16xVMeKJeq+Y=)
                          3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5f:b1:59:e7:f3:1e:c5:93:81:70:dd:27:8a:ed:58:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Nov  7 19:00:49 2025 GMT
            Not After : Nov  8 19:00:49 2025 GMT
        Subject: CN=8f5e2f418eb623ccf02e7e8da6fc5d9ac15e155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:11:60:6c:0c:9a:2b:8d:ab:c2:31:b7:7d:
                    eb:45:f3:cb:7d:e3:5f:45:08:f0:63:5b:14:aa:b1:
                    ed:18:28:33:50:db:cd:ff:e6:1b:c4:58:ed:98:5d:
                    cf:01:01:4c:24:c5:19:76:0a:47:45:08:2d:fb:80:
                    7a:94:c1:59:0e:eb:ec:ac:ef:ad:77:3b:dd:00:19:
                    6a:ae:4d:0b:fd:a2:f3:5f:1b:a9:14:f4:8a:ae:96:
                    c0:f6:3f:a0:f9:e1:d9:a9:e5:a3:b4:df:c9:d0:de:
                    3e:97:76:2e:ec:33:f6:f6:75:95:e8:41:6f:2c:8a:
                    22:f8:b5:46:54:75:de:a2:2b:3d:77:d5:f8:f9:d9:
                    36:09:9e:60:0b:76:75:5c:f5:5e:9c:f5:ab:2c:20:
                    8f:43:e6:6d:68:6d:e5:db:ab:1b:9d:88:5f:15:bc:
                    31:d2:73:c5:82:ac:9f:0a:54:91:16:63:a4:ea:c3:
                    90:d4:64:1b:e0:32:46:e2:83:c1:29:25:27:b2:e8:
                    a0:6a:c1:4c:da:6c:b3:26:2f:d1:51:8d:bc:3d:55:
                    a6:54:e8:e5:39:31:f6:71:e6:f2:77:40:6d:40:da:
                    59:03:4f:ca:f5:80:43:0d:cd:8f:cc:3f:92:19:4b:
                    f2:06:85:fb:98:87:da:fb:d9:6e:0a:fe:25:bb:56:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:2F:41:8E:B6:23:CC:F0:2E:7E:8D:A6:FC:5D:9A:C1:5E:15:5C
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:73:b5:7d:41:cc:be:5f:a7:66:29:f1:9c:f9:be:14:99:
         4f:44:58:8b:da:16:a8:f0:46:c6:71:1f:a1:22:fe:bb:91:72:
         f6:94:1e:31:bc:20:4f:3f:ab:ce:6d:97:b0:9f:53:f2:a0:15:
         30:d8:de:9e:3f:98:49:6a:bb:e9:15:ce:4e:85:a7:e0:1f:a9:
         4d:e9:43:b7:ac:9b:23:b2:9c:57:4f:f7:39:31:69:3b:94:e0:
         d5:db:e4:ac:58:0c:79:22:e4:cd:3f:fe:c0:cb:f0:68:7d:0c:
         c4:56:b4:66:59:be:55:96:4e:8a:bd:26:d2:21:2b:47:24:b9:
         c4:c7:7e:e7:7f:9d:d8:71:08:cf:c8:44:04:a3:d9:75:23:c7:
         e0:66:58:41:15:f2:40:70:f5:2e:28:e8:d7:6f:ee:72:6b:f5:
         01:da:f9:da:56:0c:e9:cf:fd:c7:b9:b9:cf:2f:4b:50:b4:2f:
         d4:ef:f7:bb:8b:13:cd:cb:35:25:ef:ac:34:9d:9e:76:63:c5:
         3d:45:e0:0f:af:f4:f6:6d:0c:13:7a:e9:84:b7:57:ab:81:28:
         bb:3a:10:61:0c:ae:5e:81:30:80:d2:76:87:a6:51:51:e1:ad:
         bb:06:05:32:59:5c:99:cf:95:d4:ad:98:d1:22:d3:b0:f1:ef:
         15:11:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 03:34:26 2025 by rpki-client