Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          4kY7FMejrx8v0ozQKs6cc3+Ty9JVk08KPt/UayVm3GU=
Subject key identifier:   00:7D:B5:F9:C7:1E:EF:91:F9:B1:F5:F5:CA:96:C2:A7:F2:EE:8E:3F
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019A22897BB79EF7EE431A7A2723A066F9C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0772
Signing time:             Sun 26 Oct 2025 22:00:26 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:26 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:26 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: NJEq2H5tds47hkGXSpLsXlffFMsmF1qI5fnSvUPv2pQ=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:7b:b7:9e:f7:ee:43:1a:7a:27:23:a0:66:f9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Oct 26 22:00:26 2025 GMT
            Not After : Oct 27 22:00:26 2025 GMT
        Subject: CN=007db5f9c71eef91f9b1f5f5ca96c2a7f2ee8e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:0c:a2:65:6c:cc:70:95:6f:14:f9:71:45:
                    a2:b2:23:60:f0:7a:e6:38:cf:38:39:2a:bf:b9:94:
                    b9:d6:3f:9a:49:bf:a5:a7:3b:63:90:a0:fb:a8:5f:
                    18:d7:34:89:e4:5c:9a:16:c6:c8:c9:19:bb:bd:46:
                    0c:e6:59:37:fb:49:b8:7f:60:25:c3:7d:09:59:51:
                    c4:4c:ea:6e:ce:d6:93:04:ce:b3:ca:4c:ee:5c:ed:
                    10:eb:58:e6:44:9a:a4:d6:90:e1:0c:86:b0:dc:ad:
                    63:9b:a5:45:13:3a:e3:4a:c2:12:c3:49:25:36:12:
                    a1:a0:39:06:c5:d8:5a:f3:7c:72:c4:a6:7c:13:5d:
                    43:5a:e1:24:e9:8d:a6:e4:e0:ff:fd:42:f9:b7:1d:
                    08:04:4a:35:00:06:de:0b:a0:38:a2:68:28:f0:63:
                    60:e4:7a:21:17:55:91:08:74:cc:39:88:d3:4d:fb:
                    90:a5:6f:a0:a1:79:e3:0b:9b:98:62:a2:74:a4:45:
                    dc:fe:42:9f:61:41:24:83:5c:c9:13:ed:97:86:18:
                    f3:34:10:af:ff:78:85:5b:af:78:78:38:93:cc:ac:
                    14:64:19:3a:ba:5f:61:9b:82:cd:67:46:97:08:e6:
                    d2:eb:70:e9:19:1e:2e:e9:ec:74:62:55:89:c2:01:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:B5:F9:C7:1E:EF:91:F9:B1:F5:F5:CA:96:C2:A7:F2:EE:8E:3F
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:38:8f:3c:78:6a:10:05:fa:d0:ad:28:c0:d2:a2:40:5d:6d:
         22:e3:a0:4e:d9:c0:fc:06:59:32:d3:2f:7f:bc:9f:8e:83:56:
         79:2c:af:53:d2:99:b4:50:5f:9a:b8:e4:99:0e:27:f3:77:b6:
         e6:df:ca:4e:f0:94:14:1b:a3:c0:cb:2e:7b:f5:11:2f:36:9d:
         30:ff:51:79:b1:56:58:a6:90:5d:d5:d3:69:5f:db:db:82:b6:
         cf:23:4a:3d:b7:34:88:1f:65:33:30:9f:78:e4:da:b8:e5:3f:
         77:29:99:9f:fd:21:9a:71:aa:aa:40:80:c8:98:a6:84:2c:69:
         65:d6:b9:ae:ee:e9:22:8f:77:1f:3d:6e:56:26:0d:7f:da:36:
         35:b1:37:05:c2:f5:f9:38:af:87:a7:85:da:93:60:94:54:b9:
         7d:6f:cf:99:45:c9:9f:d4:e7:23:1d:20:d4:4b:de:1a:57:13:
         91:04:71:78:3b:21:56:7a:89:1d:cb:ba:45:26:ab:f5:dd:93:
         56:be:04:cf:d4:6c:f1:f0:08:c6:a1:d5:a2:7c:75:09:34:72:
         bf:d2:6c:5e:bb:f0:d0:15:62:18:62:12:f8:08:96:c4:31:d1:
         a8:4c:8f:79:c8:aa:6e:4e:db:b4:c9:0b:70:d3:ed:ff:28:e1:
         50:90:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:30 2025 by rpki-client