Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File:                     kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier:          rZ6RUpzOwqgTFavOOQq16GNJUAImPKOH3wJpTNHT1YY=
Subject key identifier:   ED:9C:9B:8A:6F:15:F1:FD:52:64:89:8A:6B:0D:6B:0D:13:05:09:C9
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer:       /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial:       0199FBEBEEDE20D9BA7020E45F8154F971DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number:          1551
Signing time:             Sun 19 Oct 2025 10:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:47 +0000
Files and hashes:         1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
                          2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
                          3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: If8tVir4J6CoWYuoEQiNXbxJCjAw7emOM95MG43uE/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ee:de:20:d9:ba:70:20:e4:5f:81:54:f9:71:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
        Validity
            Not Before: Oct 19 10:02:47 2025 GMT
            Not After : Oct 20 10:02:47 2025 GMT
        Subject: CN=ed9c9b8a6f15f1fd5264898a6b0d6b0d130509c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:0f:17:b5:68:41:93:16:42:95:bf:d9:95:
                    db:90:f2:07:79:80:c6:fa:1b:5e:64:3c:08:57:3d:
                    70:3a:14:ca:b3:4c:db:28:ef:7d:4e:e8:f4:6f:e4:
                    3b:a0:54:de:9b:f9:96:99:d3:c1:ec:a0:36:ba:18:
                    bc:61:39:c4:4a:6b:d3:e2:61:a0:aa:d3:bf:83:6a:
                    7d:bd:d6:97:04:28:9c:22:fb:46:d8:cd:2b:5e:28:
                    94:d7:1c:cd:a0:1f:d7:63:ad:bc:75:1a:c2:5c:92:
                    b0:67:f7:d9:d2:20:3c:c8:7b:ae:0d:46:04:34:45:
                    ef:26:27:a7:91:77:6f:ad:d3:06:a8:dc:1a:2c:7e:
                    e9:ca:95:7d:97:c9:9f:6f:18:5f:ae:f1:72:9b:e5:
                    cb:73:50:ba:42:ca:b1:b8:d1:13:dd:e3:6c:af:50:
                    a0:23:0c:0a:1d:a3:1b:3c:5a:7d:d8:a3:85:ea:a5:
                    87:34:9a:96:6c:ba:f2:84:6a:3e:2c:9e:61:6d:f9:
                    76:5d:ca:7a:19:7b:1f:57:9b:a4:10:e9:4f:4b:8d:
                    ec:33:2f:21:6d:79:d6:1a:38:65:82:1f:2a:5d:0e:
                    96:e7:d2:74:dc:77:15:95:b8:b4:e5:35:7f:5e:0e:
                    86:7e:05:5d:94:c4:1e:bf:ab:42:76:ce:de:ab:16:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:9B:8A:6F:15:F1:FD:52:64:89:8A:6B:0D:6B:0D:13:05:09:C9
            X509v3 Authority Key Identifier:
                keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:3e:95:37:74:2d:d2:bd:b4:46:65:1c:b8:d6:2c:a7:96:
         fc:4e:8e:27:cc:4c:40:d2:40:25:29:ef:c0:35:14:ee:b5:7c:
         7e:47:d7:9e:5d:34:8e:4d:6e:09:45:83:ca:bb:8d:b0:15:fc:
         34:a1:c7:1f:23:d1:56:2b:ce:3a:a2:6e:52:0b:49:00:a0:5c:
         ec:88:f3:2a:85:fa:a4:70:2c:9b:ff:59:c8:e6:df:23:db:c4:
         b2:57:db:30:fc:d6:1c:06:8d:cf:ed:b2:7a:23:c5:00:82:9b:
         2a:91:75:41:a1:51:b6:0e:85:a9:2b:ca:ed:a9:e6:73:42:d4:
         4b:2b:25:3c:e2:71:27:b0:9b:b1:9e:f0:0b:2d:4d:a7:75:97:
         ec:fa:f0:c3:21:f2:6e:ac:1f:a5:43:49:fa:ae:c0:2f:51:ab:
         76:49:99:71:db:aa:d6:dd:33:eb:bf:90:0d:5f:23:54:8a:3b:
         39:68:83:85:d2:3a:2d:92:cf:4b:1c:20:df:93:46:9d:2f:33:
         b2:65:35:c5:39:40:9e:4b:7f:7e:b6:4f:3f:0b:3a:a9:89:37:
         25:22:ac:e5:26:39:5a:39:c3:46:0a:08:15:28:ec:dc:c1:4b:
         36:da:b7:35:cf:34:6f:fd:1f:f3:ae:94:bc:be:8b:fb:7c:fb:
         97:f4:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:06 2025 by rpki-client