Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File:                     rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier:          rfc7LD4ylAGXqE2vAEUE4LPD216scco3ep7VN+UNFS8=
Subject key identifier:   72:65:47:F2:1B:99:D4:66:DB:20:EA:B1:EC:F0:BD:D4:EF:DA:91:7A
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer:       /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial:       0199FAD8291201491EE848371E919ED1D0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number:          0B1E
Signing time:             Sun 19 Oct 2025 05:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:34 +0000
Files and hashes:         1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
                          2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
                          3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: 0ewpg7s02N7SIkowioR2rSrpHFJR+2F9wy7jpX1oWFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:29:12:01:49:1e:e8:48:37:1e:91:9e:d1:d0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
        Validity
            Not Before: Oct 19 05:01:34 2025 GMT
            Not After : Oct 20 05:01:34 2025 GMT
        Subject: CN=726547f21b99d466db20eab1ecf0bdd4efda917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:65:cf:95:c4:48:ea:c8:53:0c:92:92:5a:
                    46:99:aa:de:4a:88:38:3c:cc:6d:f5:6d:3f:10:5e:
                    21:06:49:8f:06:2b:e9:1c:04:2f:40:10:43:14:65:
                    87:35:a7:7d:09:84:d2:41:53:24:ae:b7:6b:e9:d6:
                    b3:e5:df:5e:fd:d1:ab:09:03:a3:9f:1b:4b:00:03:
                    70:47:92:45:a5:95:2f:e9:59:f1:cf:f9:16:e5:6f:
                    7f:f0:b5:49:3f:15:bd:25:0e:a9:ab:87:92:4a:7b:
                    6a:b5:e9:df:25:fe:b0:95:0a:e1:0b:d5:29:47:2d:
                    41:b8:ca:6e:e9:42:5d:48:bf:2a:32:70:77:74:e9:
                    de:77:4d:73:e4:21:cd:26:c4:77:66:c4:89:e5:57:
                    d7:49:13:3d:b9:8f:bd:de:d2:b0:71:87:9d:b4:60:
                    f3:b5:cc:bd:15:85:e5:11:2d:eb:51:76:75:d8:c0:
                    fa:0a:47:e1:fa:4f:3f:b0:a2:1b:4f:19:ef:2b:f7:
                    5e:da:9f:1a:3b:82:1a:51:a2:8f:2a:95:03:76:19:
                    84:c5:e6:89:8e:c6:48:af:97:11:b0:89:09:bb:ba:
                    5c:2e:f0:86:28:ba:5d:a3:91:13:52:bd:57:99:a7:
                    11:e8:92:93:60:e1:29:8b:53:47:ba:03:6f:46:64:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:47:F2:1B:99:D4:66:DB:20:EA:B1:EC:F0:BD:D4:EF:DA:91:7A
            X509v3 Authority Key Identifier:
                keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:80:c6:a0:c0:59:27:b0:80:f7:ef:87:7f:10:42:ee:6f:
         3b:e1:7f:b3:ef:56:d0:9b:80:79:bd:2a:df:7e:78:85:01:86:
         18:ec:10:83:77:1a:a3:61:47:fc:7d:67:05:4a:15:75:de:79:
         b5:4c:36:ee:50:1c:a0:48:20:50:bb:c4:59:a6:34:e2:e1:2d:
         51:14:d3:d5:a1:75:61:34:e2:95:26:8e:e1:84:66:ca:c8:7f:
         37:78:6f:54:07:ab:3c:8e:a2:41:b2:4b:fd:46:25:1e:66:ff:
         68:57:07:49:73:91:c0:f7:a3:55:15:fc:d1:68:ed:56:a6:82:
         e7:0f:bc:1d:01:d3:82:90:b3:c7:8b:46:41:3a:3e:11:01:14:
         97:35:bc:b1:fa:39:da:d0:9d:9a:88:65:8b:94:b8:3c:5a:bb:
         96:2f:35:3d:84:47:22:e2:69:d8:dd:53:bc:72:15:4b:df:87:
         74:26:60:bf:19:22:6b:d0:7b:56:4f:77:fb:57:58:bb:b2:55:
         f1:e5:b1:51:b7:a0:51:f4:36:2a:ee:9e:e2:dc:65:88:53:7c:
         e6:68:a9:7d:38:6a:e1:d5:be:a8:1d:65:2e:20:41:70:ad:57:
         51:05:b1:b8:50:1a:48:d5:37:e6:49:84:73:0f:07:8f:b9:6c:
         69:1b:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:33 2025 by rpki-client