Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File:                     _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier:          sZnsq6ATDX0WHFn8Q+tv+EUGkZ6aKm5/Siuo3WD9c7U=
Subject key identifier:   C4:CB:6F:BB:13:96:D7:87:EB:5A:45:4B:5B:2F:4B:92:10:F5:E3:50
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer:       /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial:       0199FC582EDD9A0EE91A930047A8EB821FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number:          0177
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (hash: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=)
                          2: Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa (hash: a0cw7dhkqyFjfij3KupwibkS70jrF4XOR8zbXlfILTw=)
                          3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: K6j/uZwtNfAFQXEN0QpdXV2D0u2mxQzulvWKyhlWGyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2e:dd:9a:0e:e9:1a:93:00:47:a8:eb:82:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=c4cb6fbb1396d787eb5a454b5b2f4b9210f5e350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:1f:da:49:f9:59:ab:07:a6:05:0f:f0:c7:
                    61:47:86:5f:e8:ac:ce:85:4b:7d:6d:00:4d:f9:0e:
                    b7:c1:c2:8b:f7:f7:d0:8f:9f:16:4a:91:b0:bb:5f:
                    ba:da:4d:b2:d7:5b:93:40:b8:34:ee:c7:c3:a9:9a:
                    0b:32:0d:1c:68:89:15:c2:89:d0:75:95:de:f7:cf:
                    0b:64:88:48:5f:b8:ff:36:d3:d3:95:64:17:5a:fc:
                    da:21:78:25:59:ed:82:64:66:d1:2f:6a:3f:6f:67:
                    8a:e9:8c:6e:a9:80:d8:62:59:2e:a0:6a:73:af:eb:
                    fe:28:9c:ee:4b:ad:98:20:3d:c4:a9:40:f0:dc:fb:
                    b9:1d:e8:29:83:75:26:84:6a:cf:15:a7:87:35:01:
                    8c:c6:8c:29:f2:cd:31:c1:68:e4:bb:5e:f3:b3:4d:
                    0b:a4:a5:f1:e1:a3:47:f3:d8:91:19:b6:8b:5b:af:
                    fa:01:8b:27:e9:67:0e:51:87:8c:63:19:4e:a2:1e:
                    8f:cc:9d:9b:d4:86:2b:27:eb:81:32:1d:cd:0a:c5:
                    5c:68:cb:2e:60:0a:d2:2c:76:ef:2a:a2:d9:77:e9:
                    39:ca:6b:2f:79:21:5e:30:87:f7:4a:ea:4a:ef:83:
                    f8:be:39:85:dc:cc:d3:9c:da:fb:1e:bf:d6:43:c1:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CB:6F:BB:13:96:D7:87:EB:5A:45:4B:5B:2F:4B:92:10:F5:E3:50
            X509v3 Authority Key Identifier:
                keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ac:85:00:ed:be:a3:ed:2c:e9:9b:8f:21:02:94:d2:16:e6:
         27:1e:aa:26:bb:4b:f2:c2:13:6f:c3:42:ce:57:41:33:d9:0e:
         29:29:af:ce:12:a9:b5:c4:d8:1d:7c:d0:ee:80:12:13:35:97:
         3b:79:ed:4a:93:dc:51:c1:f4:49:d3:b5:aa:a7:6e:1a:b5:17:
         83:05:2d:53:fe:25:ca:69:a2:ad:c3:8e:2f:7b:3c:26:c6:03:
         35:76:83:88:d6:cf:ee:c5:ac:c8:81:b9:e0:fd:db:d7:0c:29:
         72:5e:b3:81:80:27:22:75:c4:80:0e:fc:cc:71:8b:2e:be:7b:
         88:61:e1:0f:9a:b8:dd:c6:87:36:1f:5d:4a:89:81:0e:80:d7:
         a2:50:66:b9:9d:80:eb:16:05:7a:d7:2e:11:47:6b:99:aa:1b:
         68:da:ec:56:e7:c0:12:89:5f:55:3e:91:bb:9b:35:9e:e1:6c:
         9f:8c:6c:ae:03:4f:44:7e:d0:e9:7a:bd:90:8f:ca:60:e8:cc:
         8c:ae:1e:8b:e5:67:26:63:3f:76:68:9d:5a:b6:84:70:f7:84:
         56:75:1c:8e:65:64:0a:71:77:46:ec:9c:c3:4a:20:8a:c9:3e:
         de:26:d4:5f:b7:4d:0b:13:8f:91:65:04:3b:b3:4c:1c:b2:c7:
         76:f6:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:17 2025 by rpki-client