Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          DqByREICgo4fzNLvpYau7v8X+CX9y6cDF8Kty55Nnm8=
Subject key identifier:   2F:8F:29:A9:E2:1B:12:BC:D2:AC:BF:9E:BF:49:66:36:8A:53:6C:17
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019A5307CE5FE7236E67A6FD7FF17731C493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0316
Signing time:             Wed 05 Nov 2025 08:00:11 +0000
Manifest this update:     Wed 05 Nov 2025 08:00:11 +0000
Manifest next update:     Thu 06 Nov 2025 08:00:11 +0000
Files and hashes:         1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
                          2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
                          3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: xjh5bPfQqvRmYbiNGX4MZs76kcurTj4OYw2q48jVstk=)
                          5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:07:ce:5f:e7:23:6e:67:a6:fd:7f:f1:77:31:c4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Nov  5 08:00:11 2025 GMT
            Not After : Nov  6 08:00:11 2025 GMT
        Subject: CN=2f8f29a9e21b12bcd2acbf9ebf4966368a536c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:03:ce:b8:6f:88:0a:cb:00:05:be:a0:b1:
                    b3:6b:14:f7:f9:73:12:e2:76:00:df:c3:c2:61:93:
                    af:dc:fe:ed:2d:f5:e6:6a:9e:8c:71:ad:a2:f1:3b:
                    35:57:30:53:4a:b6:85:41:f8:6b:51:88:08:e9:19:
                    47:9b:15:8e:92:d3:a6:86:82:9a:39:8e:66:3e:13:
                    9b:92:13:0f:65:cc:2c:bc:ea:87:25:fd:45:8a:43:
                    7c:47:5b:7d:95:cb:25:68:ab:50:dd:0e:fc:05:33:
                    dc:ff:8d:01:f9:96:c6:41:d7:7a:e2:c3:61:6a:13:
                    6d:53:c6:a8:94:f1:c7:a5:b0:92:9c:68:62:db:3c:
                    51:0e:bb:bf:72:fe:a8:1b:40:9e:61:a2:22:35:52:
                    24:ff:e9:65:2c:73:c3:7d:a3:cf:0f:72:40:33:f6:
                    42:3c:68:46:6d:56:ab:f4:a0:ef:45:62:9c:91:16:
                    fa:81:04:49:8b:48:a4:79:ef:f7:40:00:a9:8e:cd:
                    5b:f5:4a:32:b1:96:96:3b:7d:7b:0e:03:76:cf:ae:
                    09:84:c3:43:5b:98:7d:5a:e1:d7:d9:56:d8:f7:76:
                    1c:69:8d:fa:eb:e6:80:d4:c0:b4:b7:18:fd:59:01:
                    fc:35:5f:88:b4:f5:03:15:c7:33:c4:83:74:ca:d8:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:29:A9:E2:1B:12:BC:D2:AC:BF:9E:BF:49:66:36:8A:53:6C:17
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:f9:42:3e:47:23:06:76:81:0d:d4:34:5c:d6:a7:51:d9:
         9a:5e:e6:dc:08:cb:b4:0b:88:b3:c3:67:71:e8:04:43:22:87:
         c8:a2:3f:7e:44:e9:1b:6a:87:98:14:37:69:72:14:43:40:8f:
         64:db:77:8b:7a:a2:64:7d:43:8d:3f:bc:e6:ae:26:75:fd:a7:
         fb:04:a4:7c:09:37:9a:5f:4c:aa:87:f2:02:3f:2e:ac:48:ee:
         14:c7:14:27:11:b0:60:16:27:e8:96:e4:8a:9c:71:58:fb:de:
         3d:9a:f5:9c:f5:0f:5f:04:f9:3a:5d:14:0e:68:db:15:0d:50:
         51:df:81:ef:5b:97:86:48:95:c7:77:46:31:ad:0c:a0:76:63:
         7a:bf:1e:21:4d:86:01:b7:6f:10:9d:44:83:61:3e:ae:51:e1:
         37:37:06:69:d5:fe:89:83:b5:1b:5c:d0:ef:b0:7a:c0:c7:59:
         95:e6:b2:2f:c1:65:16:f3:1f:32:ef:15:fc:b2:f4:7a:50:f6:
         a6:96:40:af:c4:85:92:b1:b1:a0:d2:3d:9a:3b:a7:59:f9:87:
         c8:67:dc:81:13:db:a2:66:31:d5:cc:07:cb:81:8e:15:1a:7b:
         4d:a0:fe:23:da:5c:81:0f:07:40:95:b2:66:c8:4e:57:13:91:
         ee:b6:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:26 2025 by rpki-client