Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          ki2brQUoFJeZsMrZ0Ayl3gG+MFbFilKhStCB5Qux8Pg=
Subject key identifier:   42:14:1E:B5:D7:41:E4:E5:1A:22:3A:67:B4:00:2E:6D:7B:4C:51:CE
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       0199FB0F225826A7433E72FC7655C4686491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          152A
Signing time:             Sun 19 Oct 2025 06:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:37 +0000
Files and hashes:         1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: zWbokuqnJrORkyfIBCR/Bba5JcwMCwKK4ShAm7YrxUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:22:58:26:a7:43:3e:72:fc:76:55:c4:68:64:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Oct 19 06:01:37 2025 GMT
            Not After : Oct 20 06:01:37 2025 GMT
        Subject: CN=42141eb5d741e4e51a223a67b4002e6d7b4c51ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:62:06:08:ab:4d:84:39:8a:f3:45:d9:9c:
                    c1:0e:7b:37:4b:83:0e:a1:ed:4e:20:6c:11:db:ff:
                    9a:67:6a:5e:8d:c4:80:70:6e:08:26:cd:aa:0c:b2:
                    6c:72:ea:b2:94:aa:56:99:73:60:55:7b:ef:b7:32:
                    17:55:87:93:5a:8e:d2:c1:b6:86:54:0c:95:5a:98:
                    e9:99:15:8d:05:b2:e0:56:9e:05:76:a5:f9:4e:58:
                    a4:3e:ff:18:6d:a8:c4:66:82:c6:56:7a:64:a3:b0:
                    ab:41:ce:e7:8a:70:d3:45:75:c1:2b:eb:32:bf:90:
                    0a:28:51:22:85:ce:14:a2:2b:b9:35:b0:e9:26:85:
                    ac:fc:3d:34:b0:47:8d:0f:00:b1:8b:ec:4c:cd:1c:
                    0e:a0:21:1a:b1:8e:4d:42:21:41:3d:9a:95:8f:7b:
                    ff:2e:45:c5:c8:97:34:01:0e:8d:02:b5:28:b9:20:
                    db:87:b2:26:f8:b7:a7:57:86:76:69:92:cf:b2:ae:
                    b8:e5:d4:9f:92:e3:86:61:cd:6e:1d:4f:39:a0:b6:
                    8a:8a:b5:42:92:f8:41:06:31:1b:a3:1a:51:dd:ba:
                    c8:79:67:c2:65:6c:8c:c5:66:e9:e5:66:91:5f:2b:
                    21:0c:67:e8:f4:a0:c9:5f:f5:28:bf:31:4b:fb:0f:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:1E:B5:D7:41:E4:E5:1A:22:3A:67:B4:00:2E:6D:7B:4C:51:CE
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:26:01:fe:57:60:e4:0d:ff:e9:d5:d6:53:77:be:20:3a:96:
         6f:15:83:0c:72:1e:4b:2b:20:32:28:d2:97:35:76:e0:f0:f3:
         ae:6a:26:39:14:30:55:5f:5a:78:0d:b4:96:18:a1:12:90:b6:
         ea:f6:f5:6f:6b:81:95:a6:68:3f:6e:97:13:93:47:af:11:35:
         c2:25:83:ae:d2:34:41:f2:8f:45:1b:87:a8:3b:71:b1:65:06:
         14:e1:4b:fc:61:1f:9f:8f:0c:8b:6a:dc:d7:5d:3c:0e:6f:43:
         c3:c7:1a:6f:1b:37:b7:05:6e:54:51:f3:91:e4:d2:3d:00:2e:
         b3:6b:46:e8:9e:81:2a:61:ff:4b:0d:2a:00:9e:a9:5d:30:09:
         b1:60:14:53:8c:9b:78:97:b5:b0:f7:cb:52:c6:71:86:16:b6:
         1f:f0:83:7b:c0:14:12:61:cb:8a:97:79:88:b2:a1:d6:59:99:
         33:6a:80:b7:31:1f:f8:25:80:7d:a5:1e:98:4f:18:d1:c2:47:
         5e:a6:48:41:86:f5:0e:3b:98:35:fc:66:42:8f:c3:c2:80:ab:
         c8:41:cb:c4:79:46:78:34:97:29:c6:b5:13:c1:91:5e:0c:1f:
         8c:1a:87:1e:f5:f7:73:41:01:da:61:37:1a:be:f9:ce:09:2f:
         19:62:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:36 2025 by rpki-client