Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          Ji7w7s2Rlz7eou0uwBRF5TNL6FrmM/9NHVMXoHmesRI=
Subject key identifier:   17:9C:CE:B4:2E:88:BB:5A:8A:F1:1A:18:25:3A:96:95:7C:A8:18:49
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019A0035201622892063BD571840BFF1E4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          060C
Signing time:             Mon 20 Oct 2025 06:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:12 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: XLiMWiyBZyshf3deGPrnIGNoSCN9JTsio/PShU83hwk=)
                          2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:20:16:22:89:20:63:bd:57:18:40:bf:f1:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Oct 20 06:01:12 2025 GMT
            Not After : Oct 21 06:01:12 2025 GMT
        Subject: CN=179cceb42e88bb5a8af11a18253a96957ca81849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:58:f1:b6:71:f1:c6:84:ca:6a:9e:e6:0b:
                    93:db:f5:de:98:51:97:55:3b:21:0d:92:ff:7e:20:
                    94:54:19:a2:59:a1:d1:62:d2:9c:a3:b5:89:69:10:
                    cb:eb:90:19:13:e1:99:f3:41:73:25:88:89:6b:19:
                    16:02:41:c6:e1:fe:e0:79:4d:24:27:0d:90:55:8d:
                    14:56:42:32:2a:cf:00:88:84:00:d5:b1:1b:0b:53:
                    de:11:22:b6:8b:19:53:3a:f7:bb:f9:e7:cd:57:8c:
                    ea:d2:70:22:b2:11:18:7a:e2:32:a2:13:77:e5:8a:
                    ba:47:e3:6f:dc:60:19:e5:c9:f5:da:dc:01:f5:c5:
                    a2:57:c5:08:38:c2:78:e3:3f:13:2b:d9:2e:c2:01:
                    15:f1:8e:6f:36:d0:85:83:1a:10:d2:c1:42:e6:1b:
                    74:69:07:28:3c:e6:c0:a3:08:20:45:20:07:5b:df:
                    ed:1e:76:1b:f1:c7:94:06:8e:d3:6f:fe:07:8c:c8:
                    fb:39:54:48:2e:10:98:ca:e1:d5:4f:52:f4:3b:4c:
                    dc:fc:ec:d9:9c:64:50:a4:33:66:9d:d4:6a:d5:c8:
                    cb:14:32:51:81:25:42:1a:65:a0:76:56:b0:5e:77:
                    e9:83:7b:5f:cb:2b:c0:7e:a4:e0:c6:ad:69:47:08:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9C:CE:B4:2E:88:BB:5A:8A:F1:1A:18:25:3A:96:95:7C:A8:18:49
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2e:17:d3:b0:b1:96:43:4d:39:02:f1:ef:89:a5:63:1c:b2:
         18:ca:c2:d2:5f:14:32:09:cb:8e:2b:f8:11:42:12:81:10:cf:
         81:dd:76:08:d1:60:1a:b6:8d:91:5b:9f:2f:89:6f:59:62:e3:
         a0:6c:c5:4b:fa:cf:d0:ac:ce:c4:81:88:5b:65:9a:fb:70:b1:
         cf:02:3e:f5:79:51:1d:c2:1e:41:03:f3:e8:69:bf:6e:a0:de:
         d5:3c:f9:60:22:1b:e7:6b:6e:05:ba:ee:68:b4:c7:75:d3:e4:
         b6:ef:94:7a:8b:5d:d0:b1:98:87:ba:b4:db:01:d5:ed:e4:6f:
         ab:e9:b4:a4:9f:aa:f5:6e:6d:b9:66:cb:bb:8e:dc:7c:ba:7d:
         9b:1e:24:88:9b:f7:92:a2:0e:36:12:44:fa:fa:fd:76:a5:3e:
         a4:7f:e5:ac:79:57:f9:58:eb:af:31:5e:f4:7f:c1:77:ea:3c:
         0f:cc:cd:97:09:90:f7:5d:ea:11:14:60:f1:57:2b:ff:7a:8b:
         c0:ec:64:26:93:d1:4e:f1:39:fb:0c:f1:d6:6e:ab:13:5b:75:
         11:09:36:04:08:31:42:82:02:0e:df:82:38:82:df:80:3a:f4:
         dc:88:cc:b8:fc:2d:26:72:3d:a9:39:ce:6c:0f:df:21:e4:e9:
         31:02:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:09 2025 by rpki-client