Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File:                     lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier:          nP+DRfB9zc0nCPwwJtQz2sXi+FsRJ5wYH63WRJdOJ/A=
Subject key identifier:   82:31:19:DD:D8:38:88:BE:D6:8B:17:C3:56:61:C2:68:05:9A:AF:31
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer:       /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial:       0199FE46A79F94EE929304C5964A7303F823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number:          075F
Signing time:             Sun 19 Oct 2025 21:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:07 +0000
Files and hashes:         1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
                          2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: b8FOrkEQYpL6oaLYvaxkwTzknrlzur8M8TuTeU5Crjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:a7:9f:94:ee:92:93:04:c5:96:4a:73:03:f8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
        Validity
            Not Before: Oct 19 21:01:07 2025 GMT
            Not After : Oct 20 21:01:07 2025 GMT
        Subject: CN=823119ddd83888bed68b17c35661c268059aaf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:ab:43:94:c8:98:cb:49:6c:b4:4f:3f:54:
                    a7:1b:7c:05:07:30:d4:73:35:84:43:47:63:1a:9a:
                    55:59:b1:cb:53:e0:9b:be:fb:1e:57:69:a2:30:6f:
                    54:70:2b:53:7e:f9:f3:78:2d:60:16:47:f1:51:7a:
                    a2:36:96:45:fe:ce:bb:6f:b9:6b:2b:90:b3:2c:54:
                    17:1f:6e:34:b3:7e:e3:0e:03:c7:77:80:41:39:0e:
                    ca:ea:4f:30:1a:35:72:4e:64:b6:d5:19:4b:90:09:
                    7e:32:b2:f7:55:5e:f9:ee:19:b8:87:65:36:dd:06:
                    19:2d:58:2f:a1:09:76:99:70:82:36:23:15:21:73:
                    04:2e:76:9a:ea:28:fa:7c:69:92:ba:ca:ab:9d:91:
                    4e:36:08:64:03:8e:04:09:a9:86:3f:93:f5:f5:f1:
                    6e:ec:5d:17:7d:c5:5e:a5:bd:fb:8f:e8:4d:0c:90:
                    69:85:0c:05:ab:c2:da:10:64:39:dd:ab:3f:d1:32:
                    34:3b:9d:7a:b3:ca:7f:1d:27:6e:fe:93:8b:41:e2:
                    e3:16:a0:3d:84:ce:79:a3:a9:2e:e8:d8:7b:65:87:
                    22:7f:8a:36:c3:0b:90:a9:c0:1e:e6:c4:bd:b2:b7:
                    1e:2c:eb:bc:86:c5:6b:c5:92:66:1b:49:92:7f:12:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:19:DD:D8:38:88:BE:D6:8B:17:C3:56:61:C2:68:05:9A:AF:31
            X509v3 Authority Key Identifier:
                keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:83:9e:ec:4d:8a:35:12:29:68:41:5d:6e:c7:34:79:74:
         d8:3c:f9:79:3d:7e:26:7c:4a:c9:bd:3f:65:19:d9:24:cd:24:
         71:41:42:1b:40:37:ba:ff:45:ce:23:2b:5f:63:6e:7a:f5:0c:
         fe:74:dc:09:67:92:54:82:aa:dc:c9:c0:db:a3:81:f7:86:26:
         6f:a9:bf:12:23:84:71:d2:7a:d3:e8:7d:1f:bd:93:72:9e:1b:
         40:bc:31:78:89:dc:31:39:3a:82:97:dc:1a:e0:08:cd:06:c5:
         a9:60:c6:4c:5a:44:70:5d:ae:a9:bc:78:bb:c8:d3:71:d1:cd:
         89:a6:fa:9f:63:d5:03:d3:7d:c1:4a:e2:28:70:25:84:b1:a9:
         b3:0d:11:5a:4b:99:4f:db:7a:91:e2:31:91:5c:36:ef:a8:ed:
         8a:15:5c:22:f7:d4:8f:49:25:e6:ca:61:cd:58:06:64:be:db:
         85:70:50:8b:46:65:4e:bd:bd:2c:16:fb:20:35:11:5d:be:bb:
         1a:0d:c7:7d:8d:39:43:9c:e8:3c:ec:09:1e:8c:15:01:c4:6f:
         e7:95:5e:f9:3c:b3:7f:12:78:e3:12:8a:72:24:2b:b3:95:96:
         89:0c:74:96:fc:ef:92:fb:02:05:e4:49:6a:cc:2c:4b:1c:0c:
         04:b3:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:30 2025 by rpki-client