Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          ig31LM8iiG0R+o/00gBcLIS6C3I/5zUxsInCm8MtPdE=
Subject key identifier:   B8:80:34:5B:1C:F4:F4:4B:D1:25:63:E3:B2:9E:8C:CE:16:2D:D4:21
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0199FAD83A02CC1AB6EF9F8FA6E62211E047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1729
Signing time:             Sun 19 Oct 2025 05:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:38 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: 0v_TkldAbkuv0zKxbXR9JHq6Abo.roa (hash: aY5wvOpBLBGUOgBjS/rDWwirGcgJ19o1tgnJbvlpVEc=)
                          3: 2HcLLIfy1JMDCVGEVTptM8elLd4.roa (hash: LoXji0ZJfkE3eJjr+G7N7ZYdU5+oCyWMzqs03IJOVrg=)
                          4: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          5: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: d0tLq9nyxY4GnOQDCwRBu41mhimL9FbLgXQQD2hkkBQ=)
                          6: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          7: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          8: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          9: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          10: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          11: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          12: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          13: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          14: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          15: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          16: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          17: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:3a:02:cc:1a:b6:ef:9f:8f:a6:e6:22:11:e0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Oct 19 05:01:38 2025 GMT
            Not After : Oct 20 05:01:38 2025 GMT
        Subject: CN=b880345b1cf4f44bd12563e3b29e8cce162dd421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:3d:13:db:a3:d1:c1:0c:d8:e9:b1:c2:04:
                    66:25:66:d2:b0:af:46:12:c2:84:0e:b9:2f:7b:af:
                    d0:1b:7d:56:d3:1d:94:6e:10:84:e7:93:9f:a9:cb:
                    91:04:ae:07:53:43:93:96:ce:0e:42:65:0e:22:05:
                    77:ba:96:cb:eb:b8:b0:fb:1d:8a:ed:37:dc:f3:b3:
                    36:b6:2a:c7:3a:d6:27:fb:93:42:d7:f3:48:e4:5d:
                    d7:b6:75:95:9d:13:92:6d:fb:a4:68:74:10:0b:c6:
                    7a:82:63:76:76:bf:41:37:3d:29:38:62:6d:59:08:
                    4e:16:a3:18:22:51:71:d9:cd:27:d8:8f:21:e9:cd:
                    81:db:83:f8:1f:f8:d7:49:61:ef:1d:74:bf:e8:76:
                    69:b6:fa:2d:7e:21:b0:f0:f4:8b:af:31:8f:d2:63:
                    37:f9:70:27:36:81:fa:17:a7:46:e5:73:93:61:6d:
                    f0:22:3b:3b:b6:4e:4e:73:a4:87:62:a3:80:72:9c:
                    e4:7d:29:96:bd:ec:74:2b:ed:90:6f:ac:08:8e:8b:
                    06:ec:6f:df:31:69:cc:d0:5b:0f:13:ca:8d:9e:89:
                    46:9f:ce:9b:06:0b:17:5f:34:00:e0:c5:3b:89:2e:
                    c4:38:d1:86:15:69:1f:ad:c4:d1:59:35:f7:5a:6e:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:80:34:5B:1C:F4:F4:4B:D1:25:63:E3:B2:9E:8C:CE:16:2D:D4:21
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:33:92:72:30:94:cb:41:bc:1d:6d:29:13:e0:8f:ec:28:
         05:f8:20:e6:dc:4f:d5:6e:85:8a:e0:2d:b4:73:52:07:a5:82:
         ee:08:7f:7f:63:08:4e:cd:33:97:aa:0b:5f:d1:59:f8:be:82:
         42:6f:ea:c8:be:6c:e1:76:7a:23:6d:67:56:07:ef:61:7b:c6:
         ac:81:83:19:35:ca:ed:b0:c0:c3:85:1d:f2:77:0e:dc:7f:57:
         0a:8a:7d:fe:d3:23:c2:d2:52:8b:4e:2b:fa:20:50:b7:f5:10:
         71:eb:23:93:54:f9:b2:56:58:8f:5f:b2:a6:e2:52:7a:91:df:
         b0:be:92:7b:5c:bf:72:be:3c:af:2f:e8:fb:14:bf:0b:26:53:
         15:ad:80:f7:0e:b0:72:31:df:f4:ae:96:49:7f:66:e6:43:41:
         50:e4:b0:a0:ba:46:b8:16:b3:4b:c3:30:ef:51:48:79:3d:78:
         8c:68:3c:ce:5c:d0:53:aa:44:18:f3:0e:a2:b3:16:e5:de:b2:
         31:45:6f:9e:67:16:da:17:83:dc:e7:6e:a0:51:46:ca:24:32:
         21:be:54:2d:44:3e:7e:af:c1:d0:43:1f:c7:a3:d7:6f:65:ca:
         60:b7:86:8a:72:66:e7:d9:8c:32:17:b2:b1:0f:0c:53:e0:bd:
         db:f4:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:28 2025 by rpki-client