Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          NXyVgVo1n1Txe1EVyUuv/Yx2fOZyD9FczNBvzU/bGBI=
Subject key identifier:   DD:72:44:B4:91:6E:C7:70:F1:3C:21:7B:DA:A1:53:21:1D:E4:31:74
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       0199FF225C83E63547D7D07564DCFC53F5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          094B
Signing time:             Mon 20 Oct 2025 01:01:05 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:05 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:05 +0000
Files and hashes:         1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: g+iOUM077ots2aFsPUa6uVsQ9E468965BDy0H8m1Clg=)
                          7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:5c:83:e6:35:47:d7:d0:75:64:dc:fc:53:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Oct 20 01:01:05 2025 GMT
            Not After : Oct 21 01:01:05 2025 GMT
        Subject: CN=dd7244b4916ec770f13c217bdaa153211de43174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:d3:44:9a:e1:61:60:d1:58:69:41:fa:63:
                    8c:b0:e6:03:7f:32:13:89:27:c9:57:83:17:1a:27:
                    17:5a:2f:c2:90:5d:0b:2d:82:a1:a2:59:82:95:ed:
                    56:33:00:da:d3:15:a1:5f:b3:4b:39:66:78:66:18:
                    78:8d:cc:ad:96:e0:49:84:8c:1c:85:c1:3a:42:75:
                    6a:40:46:72:50:30:5a:1b:0c:17:71:b5:18:87:71:
                    a5:f6:47:ad:36:6a:21:91:d7:66:80:57:a8:45:fe:
                    cb:9b:1e:9b:f5:2c:d7:2e:e1:bd:42:c8:98:1f:3f:
                    41:6e:62:cd:e3:a6:91:fc:72:03:20:20:bf:0c:ac:
                    bf:30:e4:1c:a8:10:a2:43:66:f3:cc:49:4c:07:dc:
                    e3:04:35:46:18:4e:ad:ae:59:9e:1f:a0:a9:ab:b6:
                    9e:28:94:78:9f:cd:95:80:6a:55:7c:8a:fc:ec:20:
                    64:85:ed:a2:9b:50:30:00:8a:4e:68:1b:e9:e6:02:
                    21:56:92:00:e7:f7:a2:48:55:e0:07:0c:f0:03:21:
                    6b:a7:de:d4:4c:5f:e5:f3:5d:f9:f4:73:75:c2:67:
                    cc:f6:a3:a6:00:36:99:a0:6b:41:a5:66:8c:4d:f2:
                    dc:6a:35:b2:29:51:be:fe:8a:e0:c4:88:f9:0f:99:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:44:B4:91:6E:C7:70:F1:3C:21:7B:DA:A1:53:21:1D:E4:31:74
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:86:91:92:96:3f:0c:b3:2d:d5:b3:5f:a8:37:86:29:5c:a8:
         49:0f:53:98:5c:b7:14:a8:ea:20:4c:2f:bf:5a:a1:d2:b6:ab:
         41:49:80:85:cd:44:01:c1:c9:22:67:a5:3d:15:58:4d:32:17:
         3f:7a:e8:4d:cd:b5:de:31:a2:00:ef:d8:6d:70:d3:ac:14:bf:
         14:82:78:a8:de:d1:57:98:b4:59:40:f9:52:6f:27:3f:8b:79:
         0a:a2:8a:57:dc:ad:0e:83:60:1d:9e:91:9b:e4:b2:de:7e:c6:
         3f:1a:3f:e6:1f:f7:1c:42:13:f1:63:e2:d0:40:d3:75:1e:14:
         bc:dd:1f:81:11:f6:96:2e:77:eb:e6:1a:7c:9a:45:3c:c6:e4:
         9c:aa:ca:c3:44:b6:6d:33:5a:50:e6:08:25:c9:37:0b:15:fd:
         37:24:e4:3e:f6:8d:9c:e2:8f:2d:bc:7b:2c:65:c3:0a:46:f4:
         f7:39:c4:74:a1:e2:0e:b6:58:ba:cb:78:77:df:90:f0:63:81:
         d3:87:74:af:2a:36:fe:80:7b:ab:99:13:b4:1a:90:0f:7d:c3:
         19:b8:c3:b0:45:66:de:b9:28:98:8d:6d:a3:84:62:10:1f:3d:
         a7:e2:65:9a:dc:6b:97:92:8f:54:b6:71:c3:d0:fa:bf:ac:17:
         88:42:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:12 2025 by rpki-client