Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File:                     RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier:          zzvRzhwgU9KI45XFtxO7u+ewNOH1G5HDUzsFiKgQExk=
Subject key identifier:   6E:28:F6:BE:D9:55:92:58:B1:15:34:03:8B:8B:52:CE:95:8E:51:45
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer:       /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial:       0199FCFD3385239D95A6FFC554EDE286FDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number:          124E
Signing time:             Sun 19 Oct 2025 15:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:16 +0000
Files and hashes:         1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
                          2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: vHiBM1ZoaRSZPrmsLPgWhAi+Fz0vqyCJO+YEXFUs4L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:33:85:23:9d:95:a6:ff:c5:54:ed:e2:86:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
        Validity
            Not Before: Oct 19 15:01:16 2025 GMT
            Not After : Oct 20 15:01:16 2025 GMT
        Subject: CN=6e28f6bed9559258b11534038b8b52ce958e5145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:02:fb:5a:45:24:76:71:1b:49:3c:3a:b5:
                    7a:b3:61:0a:95:f0:35:94:14:90:37:5e:e6:76:07:
                    28:56:45:1f:e7:d6:28:eb:51:6b:82:d0:cb:ed:63:
                    d2:1f:4e:48:d2:64:9e:4d:a0:e4:8a:ff:75:56:00:
                    66:7e:36:5b:ef:14:bf:65:f1:a9:d3:54:18:f9:0f:
                    8f:c3:45:47:ff:38:6e:f6:61:a8:14:45:f9:d7:20:
                    f6:3e:52:3c:01:17:da:b5:15:84:53:a2:af:9b:8f:
                    f9:49:ee:ff:cc:92:39:56:d8:01:9b:87:85:db:8f:
                    5f:df:ae:a9:61:cc:ef:c1:d8:76:34:ca:cf:9b:b1:
                    80:ee:95:d3:f3:e4:02:05:23:da:20:a7:c5:80:7d:
                    fb:64:60:8e:df:24:3b:4f:7e:5b:68:c7:bb:34:7c:
                    46:b4:98:e4:69:9d:9d:ea:04:91:75:f5:60:f7:b1:
                    01:af:43:bd:68:5d:62:c2:6e:29:ae:ae:b6:68:e3:
                    2c:7d:4f:74:81:49:87:16:d7:7a:4a:41:37:ae:c6:
                    50:63:19:39:ed:71:4f:68:e4:03:18:bc:7a:1b:14:
                    3b:a1:ff:e6:ef:0f:28:71:df:41:e7:e6:c8:15:08:
                    3e:b3:5b:56:a3:c6:c1:4b:b6:9b:40:3e:42:cc:4c:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:28:F6:BE:D9:55:92:58:B1:15:34:03:8B:8B:52:CE:95:8E:51:45
            X509v3 Authority Key Identifier:
                keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:3e:76:3d:78:0f:01:8f:4c:b8:f2:3c:9a:cd:45:e7:09:
         ee:e2:60:c1:58:7a:4f:26:c8:18:f8:b2:ff:ef:19:de:36:35:
         96:bb:14:d1:d2:95:96:ac:0b:c1:c8:3c:35:73:e8:0b:dc:e9:
         36:de:3a:b7:d5:60:3d:80:24:88:42:bb:e5:e0:11:fd:c8:8d:
         da:b6:53:d8:94:ab:65:b6:4a:3e:b9:3f:56:ea:69:49:03:a0:
         3f:7e:69:d4:eb:c2:db:c0:24:de:29:56:42:55:1a:22:93:e4:
         49:a7:f9:ac:1c:cf:32:88:72:a5:9f:99:64:5a:e8:b4:a9:7b:
         d3:67:17:85:1e:5b:85:14:0d:39:7f:68:58:65:f6:1c:6c:9b:
         81:21:60:c8:d6:5d:b0:ca:d0:1b:d7:73:06:a2:48:b5:63:99:
         82:64:3c:0b:27:4e:02:02:69:f8:b9:1c:85:27:6f:3f:49:48:
         aa:b2:01:2d:f3:9d:ac:3d:08:4b:76:25:36:da:3c:43:13:9c:
         77:d8:88:24:7f:41:0e:27:83:c3:80:e6:aa:72:0e:be:c4:a2:
         12:38:de:d1:94:e8:93:6e:24:4c:e5:ce:1a:f2:4c:a7:65:40:
         21:27:99:96:ee:10:81:a9:4f:9e:76:8f:7e:a2:00:bd:17:44:
         2a:70:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:36 2025 by rpki-client