Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File:                     4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier:          mvFvkJRk898QF/+ez+PV4REjrg1/jRKR9uORHdIX16Y=
Subject key identifier:   A0:7C:EE:47:12:E2:1C:06:C7:3C:04:54:5C:92:1E:3C:2B:FB:48:3F
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer:       /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial:       0199FB0EDBB54633B0D81DE4ED2914C5737D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number:          080E
Signing time:             Sun 19 Oct 2025 06:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:18 +0000
Files and hashes:         1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: bUsrZFgAhLuS2mkuA5qFn/cnzhXCFdgFlcx/qwVa8V8=)
                          2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:db:b5:46:33:b0:d8:1d:e4:ed:29:14:c5:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
        Validity
            Not Before: Oct 19 06:01:18 2025 GMT
            Not After : Oct 20 06:01:18 2025 GMT
        Subject: CN=a07cee4712e21c06c73c04545c921e3c2bfb483f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:d8:30:42:1e:1a:f8:1a:82:59:ff:29:4f:
                    2d:12:cd:2c:47:03:6d:49:cb:a3:a8:f1:53:99:82:
                    df:6b:e2:16:49:7c:47:ac:7e:38:9c:5e:ed:42:39:
                    de:1b:f4:4c:ae:d9:61:1a:ac:02:b4:7c:f2:83:da:
                    35:73:44:e9:39:6f:81:2d:2b:2a:62:13:24:03:97:
                    ac:74:cd:75:59:6a:9c:19:29:86:74:08:08:e5:1d:
                    39:31:17:30:23:15:8d:da:d6:5e:59:f9:63:fd:30:
                    4b:eb:f2:25:0a:bf:00:b8:25:50:e3:a7:a1:44:6a:
                    b1:d9:94:89:c0:ac:cf:be:dd:fb:4e:7f:f9:50:38:
                    69:8e:19:da:67:60:00:75:aa:c2:5f:31:8c:a1:08:
                    5f:16:79:46:14:e5:bc:c0:5c:a2:88:40:57:59:c5:
                    c2:29:2d:d0:40:0c:0d:47:1e:f0:48:e3:cd:aa:0e:
                    1e:d4:c7:21:3b:8c:71:ec:80:09:49:b7:55:c6:e6:
                    a0:a5:43:02:41:4c:d8:d5:5c:45:3c:4d:1b:a8:d3:
                    64:27:bf:fa:71:44:68:cc:a7:3e:d4:8e:de:22:8b:
                    91:d2:af:da:30:81:53:ec:74:14:19:91:f6:63:86:
                    2d:11:e0:85:e0:46:47:36:3a:c7:fe:16:65:40:81:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:EE:47:12:E2:1C:06:C7:3C:04:54:5C:92:1E:3C:2B:FB:48:3F
            X509v3 Authority Key Identifier:
                keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:04:54:34:da:6c:e9:2b:57:db:e0:ef:b6:03:3f:a3:22:
         f6:d3:7b:11:dd:2d:19:5b:5c:0e:ee:3d:5b:36:a2:ad:04:c2:
         95:36:02:76:b3:44:6f:12:95:54:80:f5:1f:e1:e1:15:d9:67:
         3d:e5:38:f7:cb:e6:81:ce:3a:dd:e1:0d:9f:bd:13:57:38:2b:
         03:d5:75:68:7c:9b:c1:c5:62:b8:f9:03:90:3e:9e:84:b6:35:
         9d:c5:94:a7:e4:e6:8c:f1:f2:25:a6:a3:7d:b1:58:ec:94:79:
         7b:b5:cf:dd:0a:2e:b3:48:31:82:2d:59:d2:3a:f4:66:99:96:
         0e:83:e4:7c:74:7d:cf:c4:f9:45:69:a0:62:4f:7c:9b:a3:92:
         99:85:8b:8f:26:3d:91:8b:7f:d7:fe:2f:b3:08:31:fd:7a:d7:
         32:c3:76:07:a9:ef:63:60:8b:d0:17:92:67:b4:46:9e:47:60:
         90:c3:b6:eb:7c:48:ad:11:8d:10:82:ff:ca:9a:fe:7a:39:c5:
         30:12:1c:eb:e9:7d:d2:75:9e:fa:1a:7d:62:a1:f5:66:9e:97:
         cf:a2:c6:7f:7d:7c:40:aa:33:bb:ee:43:92:d5:3f:0e:f8:e4:
         4c:56:ed:bf:35:0b:be:cb:a1:8d:46:f7:25:c3:10:54:c7:9d:
         f1:3c:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:57 2025 by rpki-client