Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File:                     O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier:          MTk32hR3TZT/CxmU6DuBzqISj2270baNnWH0oVsZ8yM=
Subject key identifier:   31:C3:86:45:14:5A:4D:66:10:78:4A:07:6E:27:B5:FF:94:4C:85:E7
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer:       /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial:       019A4F9924B8AB9F39C61BB702E1DABC801B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number:          0736
Signing time:             Tue 04 Nov 2025 16:00:27 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:27 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:27 +0000
Files and hashes:         1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
                          2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: QuJFhL/jzD5O5w3DH/Wy+OHBDutLEDWW3mY3GkP+aw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:24:b8:ab:9f:39:c6:1b:b7:02:e1:da:bc:80:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
        Validity
            Not Before: Nov  4 16:00:27 2025 GMT
            Not After : Nov  5 16:00:27 2025 GMT
        Subject: CN=31c38645145a4d6610784a076e27b5ff944c85e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:d9:a2:e4:dc:79:d2:15:dd:08:1d:3a:f1:
                    4f:18:91:93:d0:6b:04:87:79:90:d1:8f:35:31:cd:
                    17:12:0b:01:9c:6a:5c:01:ec:f9:7f:ff:58:24:ef:
                    68:1d:aa:cd:c6:11:d3:87:cd:0a:9d:6e:f4:4d:74:
                    c0:91:0e:cd:ae:fb:dd:62:31:96:e3:de:fc:b2:bf:
                    ec:3e:23:75:14:34:17:39:04:d5:b3:f8:7b:83:4b:
                    92:36:06:2d:9d:8f:c9:10:79:9c:8a:91:3e:35:e2:
                    b1:b2:f0:15:0c:34:90:d1:8f:54:3f:b7:ee:de:81:
                    c7:07:86:1e:43:71:56:e3:e1:ca:44:ca:59:e0:54:
                    78:0e:a6:a1:3e:6d:a7:9a:c0:4f:87:5f:f0:58:ca:
                    9d:6f:54:cf:a4:fa:9a:f3:8b:92:71:26:47:6e:e9:
                    c3:6d:c4:0f:0e:b3:e3:a4:4d:b6:71:64:ff:df:de:
                    8c:b1:e3:37:44:a5:2c:64:2d:a5:48:cc:b6:d4:61:
                    a4:88:6d:29:57:8c:a1:57:c0:15:47:44:76:6b:27:
                    f4:7d:d7:98:a5:10:4d:b2:a8:c3:49:f5:e0:c6:52:
                    c6:de:33:ac:88:69:36:4b:7b:f0:29:7f:1c:8c:c9:
                    7b:96:cf:e3:99:1c:46:0d:52:50:98:e3:d3:85:66:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C3:86:45:14:5A:4D:66:10:78:4A:07:6E:27:B5:FF:94:4C:85:E7
            X509v3 Authority Key Identifier:
                keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:53:be:ce:10:2f:4d:0e:2d:30:00:b5:ba:47:2d:06:6d:b4:
         da:a3:f3:71:6f:15:92:7f:37:b7:ec:6a:c2:fe:5c:72:bf:e7:
         a9:d6:93:dc:e1:fc:54:c4:ec:c4:2c:5d:2e:9c:9b:6b:60:12:
         4b:88:6f:d1:dd:19:04:90:f4:b4:41:6e:32:dd:b7:7d:b3:32:
         94:db:7d:b3:af:69:d5:1a:a9:e9:8d:1d:06:c6:c8:5b:19:c3:
         75:51:be:02:01:9d:e0:d5:da:f4:e9:4b:61:82:e4:3a:d2:6f:
         48:b6:ca:87:ca:57:22:7c:ae:bb:5f:c1:c1:33:74:30:01:9b:
         db:20:10:a4:be:6a:c5:44:0e:9f:b2:0b:f1:ac:d2:fe:ac:a2:
         a2:d0:56:ad:fa:de:58:f6:57:61:92:81:9a:9b:2a:61:33:5a:
         b3:7f:ee:d9:59:63:14:5e:c4:3d:1f:09:b2:c2:00:a3:65:98:
         be:9c:65:64:5a:57:ba:7b:95:1f:b7:40:3d:64:04:67:cc:b6:
         f3:70:dc:9c:e8:59:28:d0:92:f7:f1:9d:ff:7b:d4:b3:dd:db:
         4f:73:94:a9:2b:0d:80:4d:f0:3b:f0:6c:df:77:6c:57:bf:c7:
         c6:80:b4:20:95:69:b8:b0:c3:87:48:43:4c:7a:50:97:83:d5:
         d9:0b:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:02 2025 by rpki-client