Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File:                     ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier:          8r1V0qqS0oqP3LIcx9LcdnHOM9dc/4fjwSXbiG6XLv8=
Subject key identifier:   D3:8A:01:19:33:4A:80:D2:B7:48:79:D7:FC:0D:AD:43:24:A2:8D:3E
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer:       /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial:       0199FBEBFDC473420BFB0278B1C38736777F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number:          0859
Signing time:             Sun 19 Oct 2025 10:02:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:51 +0000
Files and hashes:         1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
                          2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: JLZDRSdl3hHvNeBFeRgFwI+WGpqh+3T+87QvwEvqoo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:fd:c4:73:42:0b:fb:02:78:b1:c3:87:36:77:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
        Validity
            Not Before: Oct 19 10:02:51 2025 GMT
            Not After : Oct 20 10:02:51 2025 GMT
        Subject: CN=d38a0119334a80d2b74879d7fc0dad4324a28d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:18:86:d6:67:87:54:cf:5d:8c:43:f0:34:
                    4e:e6:26:73:e6:88:b4:2f:c8:ad:19:16:f9:9a:9e:
                    b5:17:ca:32:47:3c:47:92:91:81:c9:f4:f4:5f:15:
                    37:46:cc:0b:33:9a:f6:e0:5a:79:06:21:cb:32:11:
                    8f:fc:32:66:e6:8a:00:b5:64:08:a0:29:85:a2:08:
                    6b:fd:bc:a3:e5:fa:dd:4d:87:d9:af:d0:5b:44:bd:
                    35:e5:6a:c0:6a:8f:a2:3b:c9:e9:41:5e:49:13:61:
                    01:6e:59:57:03:e3:59:cc:4e:dd:df:4e:05:d7:96:
                    4d:8a:f5:5d:4d:86:ba:fc:ec:d5:0a:a2:46:3c:8b:
                    32:d2:00:28:9f:ad:ff:4c:c7:cb:78:7e:55:46:f1:
                    36:14:22:3a:8d:22:a2:6d:5a:f3:a9:93:ac:3d:c7:
                    22:8a:7b:b2:97:23:25:98:79:8b:65:ff:3c:18:a8:
                    14:51:f0:38:01:1f:bd:a8:5c:09:8e:f1:c6:b3:00:
                    1f:77:e4:6c:ae:7d:3d:df:2b:96:ee:33:2b:af:42:
                    58:ff:ba:46:1c:6a:36:81:00:8e:2a:d0:8c:6c:69:
                    9e:6a:0f:bc:ab:51:15:11:71:92:6c:35:33:cc:16:
                    6f:33:c9:17:d4:46:30:f7:8c:dc:e2:5d:30:36:56:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8A:01:19:33:4A:80:D2:B7:48:79:D7:FC:0D:AD:43:24:A2:8D:3E
            X509v3 Authority Key Identifier:
                keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2e:43:52:6d:a4:6c:83:15:8d:fd:4f:68:33:c5:a8:a1:40:
         e4:0f:82:43:de:3b:76:cb:33:95:80:dd:5f:97:c6:cd:86:0f:
         0f:f2:b4:fa:7c:da:76:77:23:de:86:ec:1a:fa:72:50:f3:07:
         f8:a2:86:1e:a7:42:7f:9e:a7:6a:57:a9:b5:ee:a3:bb:71:aa:
         cd:ac:b3:4e:9d:71:ef:6a:f9:d5:f2:ff:f1:1d:9a:5d:27:d0:
         f5:af:4a:62:6d:e9:49:2f:31:a9:c1:de:00:cf:f3:a4:5c:de:
         bd:ea:62:ea:55:d0:2b:f9:31:ea:45:98:bf:e9:75:da:df:75:
         9f:d3:b6:0a:72:a1:84:6f:8a:3e:cc:19:d8:18:9f:d6:62:61:
         e7:2f:a4:0c:37:97:00:a9:b6:7f:1c:c3:a5:f9:35:64:7b:5e:
         d0:91:ab:58:e8:37:63:79:17:7a:16:19:16:14:3a:25:a4:65:
         9c:b0:ff:f2:72:cc:b6:6d:c6:56:ab:9f:24:4d:37:52:33:02:
         88:a7:da:8c:b7:29:25:15:8e:d5:61:7e:5e:c0:fa:eb:a5:78:
         8e:07:b0:f9:ec:e4:30:61:8d:ef:38:19:0a:fd:0a:f3:ee:6f:
         20:43:fe:61:23:9f:8f:b1:15:54:ce:4a:4e:d6:3c:3a:6d:ad:
         81:9f:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:37 2025 by rpki-client