Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File:                     FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier:          YBEO6Nz5FebU8TGJ5bd5rdX5hWr/b7LYx/FIEHE8xsM=
Subject key identifier:   19:F6:94:9A:1D:0E:91:81:2A:0E:E2:4C:79:F7:E3:A4:90:A3:BC:D3
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer:       /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial:       0199FC8F32128FEF5ACD6B86234BC23BCDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number:          145E
Signing time:             Sun 19 Oct 2025 13:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:06 +0000
Files and hashes:         1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: vSpSat22X9TMNW6exjsdM4JmN7DxnmssTNELNodMQ8s=)
                          2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:32:12:8f:ef:5a:cd:6b:86:23:4b:c2:3b:cd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
        Validity
            Not Before: Oct 19 13:01:06 2025 GMT
            Not After : Oct 20 13:01:06 2025 GMT
        Subject: CN=19f6949a1d0e91812a0ee24c79f7e3a490a3bcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:72:91:43:94:53:44:14:bc:d0:a4:f6:02:
                    1a:8f:66:28:83:1d:da:0a:1b:e0:a0:73:4e:ae:c9:
                    7c:22:9a:0c:9f:96:6b:f0:9c:eb:c3:3c:ae:c2:63:
                    47:8b:f2:4f:e3:64:70:4d:3f:87:1f:5e:0e:43:a0:
                    77:93:73:e2:05:a7:93:b3:e1:90:75:fe:5e:56:f3:
                    bd:77:a5:c1:ca:56:4b:37:e6:0f:c8:60:b5:d3:a1:
                    6b:38:76:83:1f:00:d6:71:c7:dd:d5:7a:71:21:27:
                    b0:c3:2f:77:b8:ad:16:d3:bc:fe:30:04:7c:46:f2:
                    d0:3f:71:2e:08:44:2b:01:f0:6f:0a:4e:e9:ff:de:
                    0c:38:d0:1c:7c:bb:72:9c:cf:9c:9b:33:2e:27:4a:
                    74:3e:34:3b:9a:b4:fb:0b:76:96:1c:48:7e:6a:70:
                    44:a3:13:18:16:74:e2:8f:b8:e7:a0:20:47:9d:57:
                    22:7b:57:af:e4:58:27:e3:37:8e:44:9e:f1:03:e5:
                    02:00:54:98:77:a4:d0:83:f1:4f:a0:14:84:96:9e:
                    cd:b6:e4:9c:c8:91:1f:3c:7c:5d:9e:b8:9f:9b:da:
                    74:4f:cd:8e:f2:3b:73:5b:70:56:be:ae:98:67:01:
                    e3:90:a1:fb:9d:e2:70:42:6a:62:2a:ea:6c:8d:63:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:94:9A:1D:0E:91:81:2A:0E:E2:4C:79:F7:E3:A4:90:A3:BC:D3
            X509v3 Authority Key Identifier:
                keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:d4:d0:8f:fd:7c:51:0d:e0:4d:84:ec:dc:5e:65:7f:bb:
         4e:20:ac:80:df:21:01:d6:0e:11:50:52:e7:20:c4:92:8c:b2:
         92:ef:b5:a9:73:38:fd:93:51:8b:5b:c0:b6:1c:47:de:4d:d9:
         0d:94:7c:d8:64:01:7d:29:72:bf:be:a5:bd:7f:09:b1:22:4c:
         cb:5e:51:42:20:07:cc:86:76:82:17:7e:de:07:82:2b:01:75:
         d7:d6:88:2c:49:b2:9e:67:64:61:0d:89:2e:d6:a5:32:ff:39:
         0b:62:ab:70:c2:05:da:76:7d:ac:60:29:1c:e9:01:dd:b5:dc:
         70:03:a8:58:e4:c0:b1:0e:2b:b4:9a:3d:8f:5d:79:14:17:5d:
         1d:83:11:7c:5b:92:bd:a4:75:44:7a:23:a2:ff:bc:db:62:c7:
         99:3a:6f:95:d3:cc:4e:f2:3b:57:fc:f5:21:13:52:2e:b7:01:
         6f:31:70:72:d7:7f:78:e6:af:89:e0:7f:e5:b0:f4:f4:f5:14:
         39:45:ad:fd:d5:39:0d:2f:57:19:57:c8:35:db:9d:5f:11:76:
         56:d8:ce:a2:23:90:4e:5d:2d:84:81:a2:d6:83:3f:ac:cd:bc:
         d5:9a:4d:ea:07:ec:41:06:7a:7c:6f:e8:63:bb:3a:82:03:6a:
         bd:9b:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:57 2025 by rpki-client