Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          g21jmqqdjVWkOdXrzCJy25nSVZMfkB4bdC3P6M9wqcY=
Subject key identifier:   9B:88:31:1E:AF:56:B5:3E:64:78:50:A1:CA:00:40:77:1B:7B:85:1D
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       0199FAD7FA05BCF839DD6560E01583EA8760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          15AB
Signing time:             Sun 19 Oct 2025 05:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:22 +0000
Files and hashes:         1: HKEHenn7EguAMxlu8X0PMavfllI.roa (hash: Q1kxs4HiA00x+L/BlCzsp0V9iVJn16kS+H5yLVpADws=)
                          2: aW7CIH9THP_A_IUSjPSDQj4OB_s.roa (hash: 3CR9jYGSAUnr8tm9+NOJlM2eXyEyWaUsyQOyrnBdR0Q=)
                          3: cZNThB_jk2noBG8YtvmrQUXM7A8.roa (hash: iXfGM6dzzfNtT7f4YAxIq0/HoZkuUS3xKDy4j4hKu1k=)
                          4: jSOy5FaXl1S-Obr1YdaCignR9a8.roa (hash: yYEGAEpJB4t7L5q86t/lqbzz/tPx+TQT6wXoohYrOVI=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: hLMfB7blZ6P5JZrebc18duy7qb2MBnnmlfkD55EQGPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:fa:05:bc:f8:39:dd:65:60:e0:15:83:ea:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Oct 19 05:01:22 2025 GMT
            Not After : Oct 20 05:01:22 2025 GMT
        Subject: CN=9b88311eaf56b53e647850a1ca0040771b7b851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:5d:52:68:bb:ee:58:44:b6:3d:35:e9:c6:
                    b7:15:fd:f5:bb:ac:d4:3e:86:80:f0:6d:a9:2e:13:
                    37:df:0f:a8:63:db:c9:e3:ba:8c:e3:04:4d:51:ef:
                    1d:77:c8:2b:e6:a0:90:21:78:e8:82:d4:62:36:8c:
                    b0:1a:43:60:2c:18:d3:18:9d:44:c1:d2:cd:ec:a8:
                    27:15:60:af:09:68:5f:17:f0:05:19:ba:c5:25:49:
                    60:5c:a0:83:5a:ec:05:eb:4f:ce:a9:26:6d:28:28:
                    66:69:2b:40:7d:14:1e:ae:c0:54:52:d8:78:4d:77:
                    09:bc:f8:6d:fb:9a:bc:58:ff:34:a1:16:93:9d:c2:
                    29:7a:3e:b5:bf:ab:db:d8:6f:7e:fa:a6:41:22:73:
                    92:ae:09:1c:99:de:e4:c7:cd:7e:21:48:dd:7d:d4:
                    dc:d7:77:f6:15:fc:2b:5b:05:a5:e4:5b:3a:04:42:
                    7c:da:0f:85:0f:f3:03:6f:be:c4:99:bd:97:bd:80:
                    51:e4:10:a8:bf:7b:f3:b1:ee:1c:18:74:b0:7c:fc:
                    b4:37:1a:c6:f7:88:6e:e2:16:1b:4b:90:9d:4f:73:
                    76:40:dd:62:ff:24:c8:69:85:41:0a:b6:da:e2:e0:
                    c8:14:6a:97:3c:f9:8e:ed:e6:2a:a7:ea:49:b5:76:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:31:1E:AF:56:B5:3E:64:78:50:A1:CA:00:40:77:1B:7B:85:1D
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:95:84:54:95:b9:72:60:a1:27:fe:46:84:0f:9e:98:a6:71:
         61:93:c7:ee:d7:31:f0:57:74:d0:68:e0:31:83:bd:9d:89:a7:
         70:b8:1e:ec:27:0b:0a:2a:82:aa:a3:df:f0:49:99:e9:12:15:
         8e:d3:bb:07:f4:40:d0:b9:27:2e:6c:98:2c:77:e9:2a:af:14:
         a4:7f:76:9f:ae:70:c6:09:26:ec:48:9e:dd:d2:37:48:db:f1:
         1a:f0:cf:e7:9a:82:e5:6a:27:78:1f:3a:9d:53:a2:f3:dc:8a:
         82:cf:5f:7c:04:ca:8a:45:89:47:19:92:2d:43:d6:1f:7a:98:
         ce:b5:c8:f0:c7:07:ae:a3:f3:68:4d:6f:e7:24:9d:6d:d2:ed:
         eb:b8:97:f3:a0:ae:a7:9f:e1:ad:63:78:d3:f4:30:8f:1b:38:
         bd:07:dd:fb:3d:e4:19:15:2d:18:cc:6a:43:12:92:e2:d9:14:
         f8:b5:4f:b0:d4:11:eb:30:74:c5:cf:3e:0d:34:af:7c:99:a1:
         28:d5:52:ee:af:24:79:cc:5a:ae:7c:41:eb:5b:26:28:86:8e:
         02:f6:46:f8:63:8f:b3:c8:3b:27:ae:87:b6:99:17:88:a2:13:
         5a:bf:32:c8:d5:a3:5a:88:0c:60:0d:1c:b5:9e:9f:31:d8:a3:
         04:68:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:10 2025 by rpki-client