Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          /S/N5fgyBDQahqj9og3QmyiMeef4pdA6lF1MRCVPvHw=
Subject key identifier:   20:67:30:D9:36:43:5B:BC:CF:23:EE:51:CF:3E:31:0C:2C:69:BC:28
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       019A4F98D1B8BEE05639AF6F3DBDD30FC630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          145D
Signing time:             Tue 04 Nov 2025 16:00:06 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:06 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:06 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: EAi5O3EgSnkdr1bWh1dQn2kU6r3g0uZfkKLWmwyjN7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:98:d1:b8:be:e0:56:39:af:6f:3d:bd:d3:0f:c6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Nov  4 16:00:06 2025 GMT
            Not After : Nov  5 16:00:06 2025 GMT
        Subject: CN=206730d936435bbccf23ee51cf3e310c2c69bc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:96:6a:95:42:e0:ac:59:29:ec:44:ca:bd:
                    93:9e:de:4e:2e:c4:da:3d:cf:bb:4c:b2:3f:41:3c:
                    bf:98:cc:c4:bd:5e:81:81:af:7c:a0:15:33:fa:31:
                    88:ce:a3:28:0f:7f:2e:92:45:4d:35:10:be:96:37:
                    d4:e5:95:31:15:c5:ac:24:92:99:f6:a3:47:ce:33:
                    f1:8b:28:38:1e:4e:43:8d:0a:a9:1d:33:04:e7:e5:
                    c0:f0:74:c5:c2:6a:db:44:3e:69:46:95:9d:2f:8e:
                    c0:15:2f:de:42:dd:ef:a2:1c:b3:4d:4c:0f:07:40:
                    60:11:da:a1:29:de:fb:7f:b1:7b:6a:de:9e:52:1a:
                    f5:25:7d:a9:ab:7f:5a:98:96:aa:3c:61:d1:35:73:
                    c7:c9:d8:5e:7f:61:4f:49:42:ad:c5:76:3d:52:bf:
                    ad:aa:4a:7a:08:e7:e0:72:66:d3:74:f1:bd:f2:78:
                    e0:60:a2:0f:0a:14:b7:d7:1d:9e:f4:bd:cc:e9:a3:
                    83:f7:2b:3d:f8:ee:2e:2b:05:7b:6e:59:25:c4:bf:
                    99:2e:97:8b:22:cb:86:08:2a:c3:41:b1:bb:87:af:
                    01:ff:4e:66:2d:53:aa:c0:91:db:ef:5c:4d:41:94:
                    3e:67:e1:c4:c2:ad:59:42:4f:4a:7f:d8:ff:3e:59:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:67:30:D9:36:43:5B:BC:CF:23:EE:51:CF:3E:31:0C:2C:69:BC:28
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:7d:7b:cc:36:7f:78:fd:9a:2e:2c:e4:b2:94:fc:84:df:
         14:c3:48:4d:78:a0:e4:16:76:ee:77:64:83:18:25:01:61:45:
         1b:d6:3d:ab:03:16:c4:f1:7c:1e:3f:2e:25:e7:b3:97:db:59:
         38:a6:a5:25:80:59:e5:8f:33:46:be:d4:a5:c9:42:20:95:f2:
         b3:8f:58:4f:5d:65:f1:38:79:f5:fb:fb:0b:f7:c1:ce:69:db:
         9b:b5:5c:59:c6:60:34:19:42:c5:f8:d2:a1:c2:f1:07:fa:a8:
         e4:44:71:61:9e:93:70:26:fa:d5:60:e9:6d:aa:f8:1d:7e:f5:
         1d:9c:8b:34:1a:83:7c:4d:42:8e:5a:c4:fd:ee:74:05:3d:5d:
         b0:9d:b8:a2:50:72:37:51:9e:ae:c7:26:ac:83:23:ad:36:6f:
         79:a7:94:ed:ae:6c:44:38:79:51:48:97:0c:52:52:62:77:35:
         97:07:34:05:30:80:32:3b:b0:69:fd:1e:ef:9e:4e:a0:7b:4f:
         83:fe:a0:c3:32:5e:61:fa:5a:51:4f:8e:82:0b:b9:69:ee:ef:
         52:38:c6:b0:6d:cf:42:cd:50:74:8a:1f:92:77:8d:3b:98:c4:
         c7:b8:18:f7:62:98:d5:b0:65:aa:47:39:fe:4b:37:32:b9:da:
         6d:3f:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:08 2025 by rpki-client