Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          QSzlpNYAicx8WTnNJzt4W6xlC0fi3EaNjh0FhMPX7Yg=
Subject key identifier:   72:87:95:8F:C0:CE:3D:B1:84:B4:77:FF:47:56:A4:D6:1A:F2:0B:9E
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       0199FBEA87D4C28345A0E7C821BE38C19B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1672
Signing time:             Sun 19 Oct 2025 10:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:15 +0000
Files and hashes:         1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: ZALfQ1tCaLnwLfQxnZFicc05cZKRyBe50cvtOTgcK14=)
                          2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:87:d4:c2:83:45:a0:e7:c8:21:be:38:c1:9b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: Oct 19 10:01:15 2025 GMT
            Not After : Oct 20 10:01:15 2025 GMT
        Subject: CN=7287958fc0ce3db184b477ff4756a4d61af20b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c2:42:5d:e6:83:dc:58:0f:1f:36:6b:95:45:
                    f7:7b:4f:a7:a3:48:67:97:11:c3:c1:03:10:f4:0f:
                    0f:3f:1d:ea:49:da:ca:cc:93:2c:d4:9d:a3:22:86:
                    b5:a8:0a:0e:91:21:f8:5d:dc:cb:35:43:2d:60:4b:
                    72:cc:da:50:ee:00:cb:5f:4a:ca:d3:94:fc:a6:94:
                    e3:dc:24:7d:9b:40:b9:03:e6:a5:4e:5c:2d:42:95:
                    40:99:93:ff:01:80:18:12:75:3c:92:3d:af:b6:f4:
                    72:33:39:83:0c:b5:92:50:02:f6:86:f5:5d:fa:d0:
                    99:3c:7f:1d:e1:65:25:53:19:76:5f:3e:d1:51:4b:
                    b7:f2:d2:8d:51:93:1b:3f:36:16:01:cd:7a:ee:91:
                    e1:f8:6c:27:37:cd:95:4a:c1:3d:a9:57:db:43:71:
                    a5:61:d8:ee:72:0b:19:df:42:33:4e:46:60:13:4f:
                    d5:3c:b1:5e:ff:34:8f:92:4c:43:06:ad:b5:55:66:
                    5c:26:9e:19:79:6d:14:99:48:ec:27:7d:8d:35:1b:
                    6e:e4:f3:96:b8:f9:eb:9f:89:ff:b8:78:a5:05:e3:
                    c8:db:8a:0b:ce:15:1d:fc:21:52:80:87:29:4e:41:
                    22:87:4c:02:8f:e6:22:e8:57:73:f4:6f:69:2b:07:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:95:8F:C0:CE:3D:B1:84:B4:77:FF:47:56:A4:D6:1A:F2:0B:9E
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c6:19:08:3f:24:70:d1:1c:05:83:fe:9f:99:c1:0b:16:5e:
         17:f5:47:35:43:13:2a:57:8d:02:ef:09:64:f5:15:43:3f:92:
         6e:af:d4:d2:ab:51:7f:ec:47:75:fb:c2:82:46:4d:fb:22:20:
         2d:65:f2:c7:16:d0:6d:f3:8a:80:26:f3:eb:81:e9:9f:35:6d:
         89:3e:5a:c0:f7:41:1a:f5:2f:88:1b:fd:f2:7a:d8:8f:20:82:
         80:cf:1a:97:11:5f:25:15:53:26:7c:13:b9:96:43:06:89:08:
         00:00:5e:ce:7d:d7:43:9b:e8:80:ee:b3:6d:f4:91:53:84:93:
         be:75:45:6c:22:ca:29:b9:89:b4:27:c6:11:4a:89:c7:cc:a4:
         ba:f9:56:d9:56:c5:11:82:6f:55:30:56:9f:f9:85:d1:ac:0d:
         fc:4f:de:2e:6a:c1:29:35:67:94:cd:eb:e9:50:07:a5:5f:74:
         58:ac:c1:d2:30:20:57:52:d8:5c:a3:92:16:3e:2f:52:5b:b6:
         a3:71:5a:67:49:e9:81:20:4e:c0:a5:65:b5:8c:15:88:18:63:
         22:8a:ef:29:4f:be:78:1e:8c:2d:94:a7:c5:f9:bb:ee:45:fc:
         bc:99:8c:d8:f3:a4:b8:3f:4b:32:fe:c9:93:72:af:9e:d6:72:
         ec:6b:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:52 2025 by rpki-client