Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          gE/SZNqBUUZFZ3bMitfIpDQrxZnUGCplYE7HEJaxXqI=
Subject key identifier:   F0:E4:59:53:16:02:D0:03:04:A2:6C:EB:4C:B4:11:B6:23:AB:6C:61
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       0199FAA11D69AC6C2505E57F32B46556D4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          0A79
Signing time:             Sun 19 Oct 2025 04:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:26 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: I+MitqjR9TEY3CaLbLRMNLVSXGm6C7z6p4VxufoI1dI=)
                          2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:1d:69:ac:6c:25:05:e5:7f:32:b4:65:56:d4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Oct 19 04:01:26 2025 GMT
            Not After : Oct 20 04:01:26 2025 GMT
        Subject: CN=f0e459531602d00304a26ceb4cb411b623ab6c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:23:b5:9c:85:cd:ee:1b:76:ce:52:b5:57:
                    2d:61:77:37:dd:3d:de:9a:84:85:8b:0e:6d:f9:78:
                    f8:0c:ca:98:4f:3a:84:2d:dc:51:83:c3:31:7c:ab:
                    95:65:c6:e3:8f:e8:23:e0:99:40:22:aa:fc:bd:f1:
                    7e:c1:af:ba:f6:d3:cc:5d:e0:de:d6:49:2f:dd:29:
                    6d:a1:bd:1e:b7:0c:b4:8a:28:b9:ac:26:c7:65:05:
                    c2:7b:77:58:04:93:3e:35:ac:70:c5:0d:0d:ba:96:
                    5e:13:14:d6:0a:92:1e:b1:04:a1:2c:31:6e:d0:db:
                    eb:cc:9f:f9:9e:11:60:a4:5f:b4:c1:8f:70:af:d2:
                    e7:d0:b8:f3:3e:54:52:e0:e6:9b:a9:a9:93:b2:3b:
                    0d:3b:c6:43:2d:a3:35:8e:0d:13:0e:92:7f:42:a0:
                    86:96:78:15:df:79:a6:e8:48:d9:4b:46:92:e9:51:
                    be:cc:3a:4d:d7:fd:ee:94:a1:d6:96:cd:2f:cd:94:
                    40:96:21:7e:59:9c:e9:e2:37:c7:af:30:e8:e0:d7:
                    7a:fb:dc:dd:d4:70:bb:ca:85:34:7a:e8:0a:57:60:
                    f8:6b:54:f4:23:6d:2b:17:60:87:ca:21:5b:59:82:
                    4e:4d:fb:67:dd:b6:08:6e:5e:a0:68:a9:0c:3e:c5:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E4:59:53:16:02:D0:03:04:A2:6C:EB:4C:B4:11:B6:23:AB:6C:61
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:e4:b1:98:65:83:cb:f3:dc:80:88:69:8c:7c:c2:4d:0a:
         7d:bb:87:87:e9:7c:e6:13:94:54:7d:68:7a:90:e6:98:21:5b:
         a8:95:7e:12:5e:8f:c3:2b:b3:9c:e4:56:b9:9f:dd:2a:39:95:
         4b:6c:23:6f:78:41:dc:12:2b:0b:ac:96:1b:bb:dd:20:73:4a:
         a0:43:51:1b:0f:b0:3e:e8:74:c5:f5:e2:1f:a5:74:60:e4:b1:
         ef:ab:86:c4:8e:7e:0c:7d:c7:10:56:65:f7:e4:51:e6:f3:d3:
         15:f0:0e:31:1c:c3:20:3d:91:88:07:45:5b:cc:65:a7:4d:36:
         9f:9c:a8:86:44:b0:d9:4c:bd:b1:c6:52:2f:93:b2:cb:33:12:
         1b:93:55:78:5c:4d:59:3f:0a:6d:e4:ce:b5:b2:26:fb:ab:3e:
         91:e0:15:56:30:93:ee:09:d0:b9:b7:e1:a9:3b:02:df:61:60:
         b2:33:83:68:d4:9e:de:06:ad:8f:a1:f7:e9:6c:c0:8d:51:b2:
         88:46:69:a9:cf:c3:59:31:c6:82:0e:58:27:16:30:5c:ff:66:
         05:f5:36:0c:57:a5:a0:f3:f6:aa:c3:78:f0:9e:91:5f:1b:f1:
         4e:8a:83:08:82:28:b0:d6:6f:04:1b:e6:0e:56:51:b0:73:03:
         21:e6:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:27 2025 by rpki-client