Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          9ro3xGcT0jDoIWAKpg0sBK7bZQcTgGCZwr4oylxl4p0=
Subject key identifier:   52:60:DE:D7:7F:2E:D6:5C:14:C6:A5:88:63:45:AB:08:24:DC:9B:D7
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019A168554A7B23A0D0971146AD38C7D7300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0CC5
Signing time:             Fri 24 Oct 2025 14:00:27 +0000
Manifest this update:     Fri 24 Oct 2025 14:00:27 +0000
Manifest next update:     Sat 25 Oct 2025 14:00:27 +0000
Files and hashes:         1: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
                          2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=)
                          3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: OfnkH0M2zabuObP/dm6gcxhOLi5FoDcz3VCEuLLfzbg=)
                          4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
                          5: atNz0WdRnHANtOvahe4tYSXD9RA.roa (hash: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=)
                          6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
                          7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:16:85:54:a7:b2:3a:0d:09:71:14:6a:d3:8c:7d:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Oct 24 14:00:27 2025 GMT
            Not After : Oct 25 14:00:27 2025 GMT
        Subject: CN=5260ded77f2ed65c14c6a5886345ab0824dc9bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:05:ea:51:2b:b7:f3:3b:e2:53:ec:90:09:
                    d4:ad:13:95:31:be:3d:a5:97:86:59:b2:7e:4d:2c:
                    1c:7f:fb:f4:53:df:cc:45:c4:8c:c3:63:5f:73:48:
                    01:b6:74:b3:1c:9e:a7:20:29:b6:54:87:a9:e7:8c:
                    6a:5c:f5:e8:7d:40:0d:8c:ce:02:2b:d2:a7:48:b3:
                    01:50:9f:17:16:dc:62:74:0f:54:50:5a:d3:80:28:
                    2f:38:ec:0d:c4:0b:4c:1e:9c:07:e3:b5:d5:09:f1:
                    7c:c6:b5:9c:f3:7c:51:f9:dd:ed:f2:90:50:d0:64:
                    00:07:95:d5:66:4e:31:a0:82:a1:d7:cf:24:43:f3:
                    85:5f:f3:b1:c6:da:26:19:6e:1f:fe:94:16:6f:f5:
                    d5:6a:87:fd:b6:40:da:a4:8b:9b:aa:98:5a:ca:93:
                    93:65:37:32:7b:23:86:3d:c0:ad:f5:26:91:80:a6:
                    c0:40:16:b6:37:65:e2:f8:3a:e4:ab:ef:40:fe:bd:
                    9b:fa:b3:87:5c:dc:df:e4:ff:ea:19:bd:16:c9:9a:
                    1f:37:80:c5:e1:fc:6a:bc:85:9e:06:33:e7:92:08:
                    99:e4:0c:2f:57:49:d6:41:1b:b8:05:d7:a0:ec:21:
                    07:2c:c2:88:d4:3c:41:f8:dc:20:67:07:ea:26:64:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:DE:D7:7F:2E:D6:5C:14:C6:A5:88:63:45:AB:08:24:DC:9B:D7
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:6e:fa:cb:fe:4d:7b:69:e7:b1:3a:d0:6b:56:2d:bd:65:
         28:f1:fe:ed:0d:e7:8b:19:ea:40:b0:21:cc:ba:1e:8e:82:e9:
         25:a2:a7:70:b5:3d:b9:ee:3c:c5:c6:bc:bc:15:9c:13:20:6a:
         51:03:bf:07:6c:7a:c8:14:2c:f6:4a:5b:5e:6d:5d:f4:a4:83:
         f4:f5:ec:6a:e1:f1:e8:e8:7e:62:48:5f:8e:db:26:e0:85:e0:
         de:bc:ab:68:61:a4:ee:a0:a8:34:24:3b:ad:32:7e:0b:36:e1:
         c4:57:4f:d2:f6:1e:e0:3f:d4:e9:89:89:89:df:9b:91:88:e3:
         84:ed:3d:7a:1b:fd:41:3d:9a:03:f9:70:e3:09:d3:a1:b8:76:
         cf:e8:f3:37:ae:d0:99:4c:e0:55:a2:df:8a:2b:50:77:24:9c:
         4c:9f:8d:3c:d2:66:66:ac:21:11:10:5b:fe:74:5e:26:5d:40:
         92:36:9e:ab:61:bb:f0:12:1d:05:83:6c:49:86:0f:09:d6:e8:
         af:d3:08:c0:e3:97:cd:36:ab:3b:ca:59:12:04:08:c0:33:ca:
         97:b7:c1:3d:ca:63:32:3a:31:4c:3c:07:9d:50:a8:b7:25:f0:
         d2:df:86:18:65:97:c6:5f:5a:ba:23:84:12:7c:31:c9:2a:c3:
         db:01:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:01:45 2025 by rpki-client