Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File:                     IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier:          REM0J7xv2SzAdD0071DMngDSBus2P8lLH88MJPTjVdE=
Subject key identifier:   BD:8B:6A:C9:A7:99:F0:B0:CB:8F:EF:96:99:82:8E:7C:9D:97:B3:47
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer:       /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial:       0199FAD7CD4DE6D78ED1A41EBCDC9CAF6328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number:          0B78
Signing time:             Sun 19 Oct 2025 05:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:10 +0000
Files and hashes:         1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
                          2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: jTQ5e6YMeJpMZIKTmK1hbDyYogEdqkx4seQXG8nakoo=)
                          3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=)
                          4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:cd:4d:e6:d7:8e:d1:a4:1e:bc:dc:9c:af:63:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
        Validity
            Not Before: Oct 19 05:01:10 2025 GMT
            Not After : Oct 20 05:01:10 2025 GMT
        Subject: CN=bd8b6ac9a799f0b0cb8fef9699828e7c9d97b347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:05:a4:d2:7a:c6:73:80:69:c5:27:cf:6f:
                    aa:bf:fc:5f:59:6e:50:92:55:7d:56:08:e6:09:a5:
                    84:3f:ae:10:1b:19:ff:77:8a:1e:df:08:47:a1:a6:
                    22:a4:e6:0a:a5:62:54:42:9a:0a:73:be:46:10:db:
                    71:be:2c:1f:dc:4e:36:a9:40:4b:25:43:cf:0f:ff:
                    6a:47:6c:99:ae:94:be:d8:15:9a:d7:35:04:86:a7:
                    5a:2d:6b:55:97:fa:1b:c4:b2:d4:21:bb:6a:e4:04:
                    0f:f4:d4:78:8b:52:01:00:c8:8d:a3:4d:52:4e:78:
                    f8:3d:ea:bd:a6:5f:c5:c0:55:b2:c8:09:b9:61:80:
                    13:a6:54:46:55:30:79:56:53:b3:f8:88:e9:33:63:
                    0c:b1:4e:82:8c:85:0c:a2:ed:6c:90:45:b3:ba:da:
                    20:75:a0:b6:d2:2b:69:00:8c:fd:89:49:f4:04:06:
                    d0:a0:5e:da:0c:6d:73:59:38:74:59:b4:b4:5c:a7:
                    d3:47:ea:09:9d:95:14:27:97:d8:42:0b:e6:46:28:
                    b0:b9:42:a1:da:e6:e4:9f:12:b4:ac:a1:38:8a:4e:
                    c9:13:d3:06:a9:66:ad:7d:4a:67:64:55:75:ef:69:
                    ef:38:21:e9:a5:c8:90:ec:e6:6d:ff:13:50:f8:e7:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8B:6A:C9:A7:99:F0:B0:CB:8F:EF:96:99:82:8E:7C:9D:97:B3:47
            X509v3 Authority Key Identifier:
                keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:07:c9:b4:bb:6b:ae:32:03:ab:1e:65:42:c1:62:a3:6d:cb:
         86:90:1b:be:f2:1a:ed:49:73:ec:c0:dd:8a:45:57:76:53:1d:
         90:d5:97:15:8c:e1:31:5f:a9:d2:4f:4a:8b:14:c0:3c:0d:77:
         9b:94:46:ff:8e:17:b6:7b:35:05:f6:19:8f:aa:0b:e0:27:7c:
         05:ad:ed:88:38:89:ad:a8:ec:97:5d:7c:ac:ca:ae:c6:34:90:
         a5:21:8d:3d:a9:44:7e:cc:ad:9c:96:b8:ed:9b:99:4e:45:7f:
         10:29:c6:fd:22:e2:22:81:74:3a:d2:9b:0e:09:03:5c:ca:49:
         15:c1:d8:f0:ff:74:1e:7b:cc:f9:d8:08:2b:3e:de:14:4f:f8:
         12:84:21:05:5c:1e:de:36:b1:c6:85:1a:a8:99:f5:2b:78:fd:
         f1:55:44:85:ab:eb:05:98:d1:01:8d:01:5e:36:4e:f9:2b:b3:
         b6:09:70:f0:a7:2f:f4:f8:27:3d:53:86:c6:3a:8b:fb:54:85:
         b3:01:2b:12:1c:09:57:21:05:39:9f:55:44:ae:be:09:4b:e5:
         a2:f8:97:39:c9:63:d8:83:19:ad:63:07:7f:26:06:6c:fd:fe:
         06:e8:f4:3a:94:42:7b:46:77:75:c3:6a:08:93:dc:c2:e1:ad:
         94:89:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:15 2025 by rpki-client