Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          gMUJXOOZ5ZSqEXj8/utgjVXqhXIwIOVGypauOCYs5KM=
Subject key identifier:   AF:3C:6D:4B:66:D8:40:34:13:F9:7F:86:BD:71:12:BA:8E:D0:48:93
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       0199FAD84E1C1F2006023F4335BA1A05DE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0E33
Signing time:             Sun 19 Oct 2025 05:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:43 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: V5bYb0AsJI/pj3Dh3aDwyKu5DjIuRE0gmDMHA8/L0A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:4e:1c:1f:20:06:02:3f:43:35:ba:1a:05:de:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Oct 19 05:01:43 2025 GMT
            Not After : Oct 20 05:01:43 2025 GMT
        Subject: CN=af3c6d4b66d8403413f97f86bd7112ba8ed04893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:d9:9a:38:a0:76:59:d5:a6:c6:a7:8d:37:
                    d5:c3:5b:02:7f:62:79:38:2d:3e:5a:60:04:b2:6e:
                    fb:ba:f6:8b:e2:b4:4e:bf:0f:33:f1:d1:03:5c:16:
                    b5:9a:40:dc:cf:bc:c1:9b:ab:1b:a2:d9:ad:7f:ce:
                    f4:fc:7d:81:b1:23:cd:af:31:53:90:d0:3e:d8:66:
                    c3:0f:eb:e1:fb:60:8e:e2:16:8c:5c:e6:30:6a:dc:
                    ba:96:b1:06:b4:79:cf:88:e9:5c:b3:f8:86:de:2b:
                    d9:e2:c8:a6:24:f4:c6:75:41:c3:51:62:14:f8:a3:
                    c8:ee:8e:e4:71:67:b7:8b:e6:9e:27:2f:bd:82:13:
                    7f:4e:95:a4:09:03:90:8d:26:46:35:48:53:5e:02:
                    88:0d:de:ef:39:96:92:44:59:cf:39:28:0b:4e:ec:
                    c0:f8:14:ef:af:ba:66:d3:f4:db:8a:05:a3:b6:4b:
                    7c:97:ef:e7:60:46:98:a4:00:8e:c8:b3:b2:70:0f:
                    08:b4:5f:2f:ee:d1:66:93:5b:54:43:cf:27:66:1c:
                    63:1a:91:97:a4:24:67:8c:81:d2:56:e6:74:3e:de:
                    e8:c3:15:b3:d8:e4:4a:8c:21:ad:d0:34:28:cf:45:
                    fc:b9:53:f9:84:a7:72:1d:cd:b3:80:25:2b:c2:99:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3C:6D:4B:66:D8:40:34:13:F9:7F:86:BD:71:12:BA:8E:D0:48:93
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:9c:f9:8a:3b:0f:c3:43:6e:5f:32:d5:f7:cb:b1:61:05:
         87:31:9e:d2:06:20:f4:8e:66:ff:7d:a4:d8:9b:49:67:09:ad:
         d9:c3:f3:f1:dd:e3:f9:7b:95:2e:3b:f6:c9:1a:3d:75:40:6d:
         5f:04:2f:0c:e6:08:d8:4d:c4:68:cd:70:6a:5c:82:a5:8a:8f:
         8e:90:72:06:db:f8:82:57:33:33:de:c5:6e:95:a2:7b:cf:a6:
         38:0d:78:9b:8e:60:8d:b3:80:e7:16:cc:40:3d:f2:1f:32:d4:
         f5:79:b7:22:6b:a2:52:e2:29:1b:1b:b2:22:4a:da:d8:09:87:
         3c:a3:d2:24:92:42:17:a3:9d:e1:38:ad:71:65:d7:d6:a0:f0:
         94:7a:17:31:2a:24:38:c8:85:43:fa:e1:99:67:fa:14:1f:c7:
         08:52:44:4e:b5:42:b5:a9:bd:be:97:bb:5d:b1:1d:4e:0d:ed:
         0f:7e:3f:2d:38:b9:dc:b9:48:c9:7f:7a:6e:33:0f:78:b0:34:
         32:e1:68:26:c5:75:c1:59:e0:2b:97:6f:ed:be:33:a3:51:8b:
         95:46:bc:2a:b7:af:a1:b4:ba:9b:3c:d0:b6:66:29:fc:4f:4f:
         33:73:b0:07:51:39:8f:a6:64:a3:4a:92:d7:5f:e6:9a:3f:be:
         96:7c:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:49 2025 by rpki-client