Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File:                     aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier:          HO2nyQyTDS6ALAx/osf21bpQcAurU0UTazd3phflXrs=
Subject key identifier:   8E:14:F9:89:7C:3A:8C:60:7F:8C:62:A7:3D:ED:FE:57:41:C7:5F:69
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer:       /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial:       0199FE7DE6CD07DB0DF8D0D75F446A5C9E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number:          05A1
Signing time:             Sun 19 Oct 2025 22:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:27 +0000
Files and hashes:         1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
                          2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: S+MoWSFBFNg87NjYibCoxdGeAJW4NaCyO2buxrRGOA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:e6:cd:07:db:0d:f8:d0:d7:5f:44:6a:5c:9e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
        Validity
            Not Before: Oct 19 22:01:27 2025 GMT
            Not After : Oct 20 22:01:27 2025 GMT
        Subject: CN=8e14f9897c3a8c607f8c62a73dedfe5741c75f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:d6:33:f0:c1:02:f0:01:3d:f3:a9:ef:6a:
                    d9:5c:2b:90:0c:14:87:71:e4:20:f3:ef:30:7f:84:
                    b6:4c:a9:c6:bb:49:7e:9d:22:1e:4d:ad:52:2c:6b:
                    e7:ce:5b:d0:bc:73:75:ce:4a:cf:6f:07:25:ba:a6:
                    d4:47:2b:1b:48:85:ea:46:37:e2:91:f3:89:2b:fe:
                    da:2d:6b:56:93:e4:6e:0a:df:46:9d:af:f2:ad:70:
                    d5:bc:c4:f9:ce:ad:74:91:a9:14:c7:8f:91:46:03:
                    d3:3d:26:6d:3e:42:c3:d0:2c:42:ec:1f:62:a0:8f:
                    16:08:e9:8a:55:e5:e4:de:36:f9:d3:17:0a:16:b7:
                    ce:4c:17:e1:2b:dc:f0:ee:cf:c5:1b:2b:36:8e:7d:
                    6a:77:b0:5a:8b:37:39:d5:db:ba:3d:ce:a0:78:e3:
                    d3:f9:f5:c0:24:1b:75:2a:b4:e0:8e:8a:34:19:89:
                    e8:14:e9:d7:17:02:2a:e7:89:18:40:58:94:fb:8c:
                    81:1c:bc:dc:cb:5a:ec:9f:f2:45:21:eb:14:eb:15:
                    93:36:fb:52:74:00:b2:de:08:6b:6c:af:df:f3:ca:
                    7f:96:ec:3a:25:9a:05:e8:09:1b:14:67:1c:5b:fc:
                    91:d8:05:c8:f7:c4:2f:93:61:cb:39:ee:4f:74:44:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:F9:89:7C:3A:8C:60:7F:8C:62:A7:3D:ED:FE:57:41:C7:5F:69
            X509v3 Authority Key Identifier:
                keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:4d:af:bc:5a:fc:b7:d5:ec:ab:cc:83:9f:17:04:ce:8f:
         61:2d:21:e5:f1:86:27:78:33:5b:68:e0:77:5e:b5:b7:88:e6:
         4a:99:b5:0f:f4:c5:67:ed:1e:49:13:2e:82:13:28:7e:ce:ed:
         52:c3:ac:ac:87:c0:ac:54:be:0f:e6:8a:73:78:cf:a8:73:8a:
         be:15:c0:27:fd:be:9b:a0:d2:fd:69:4b:61:e1:14:7a:45:85:
         b4:ff:06:d5:6d:95:ea:d0:b1:b7:b1:fd:88:47:aa:b4:2b:b7:
         a3:68:66:81:ea:37:8f:a1:95:0b:51:cf:70:b5:39:a1:7d:3b:
         28:60:d5:2b:72:6c:55:55:fe:12:43:f7:8e:57:cd:54:de:11:
         e5:f4:e1:37:a5:7e:f6:1e:ed:d6:81:1b:44:60:b1:75:23:31:
         a0:be:ae:56:5b:d5:15:dc:0e:09:6d:e4:b9:fe:cc:16:52:4a:
         5e:3a:0d:99:38:3a:9d:c0:7d:dc:e1:99:9f:fe:06:02:7b:d5:
         14:b5:6b:cc:03:86:69:7e:88:da:d8:d2:1c:d3:46:ce:4a:ba:
         b5:38:c7:c4:fb:04:de:2e:3e:85:73:c2:83:c7:8c:9e:80:79:
         bf:9c:20:ca:96:1c:03:85:f4:3c:f6:58:e2:c0:95:72:da:bc:
         00:77:86:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:46 2025 by rpki-client