Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File:                     ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier:          wK9QDxJ9UutryTPt9QIoFEmpYUMnANWMptH2yPr9p/c=
Subject key identifier:   D9:49:17:41:42:68:C6:5F:B6:ED:EB:A4:3A:5C:B3:02:F7:93:AC:7B
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer:       /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial:       0199FC8F9DCDA77995B73DF2B861BDC9E326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number:          0A75
Signing time:             Sun 19 Oct 2025 13:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:34 +0000
Files and hashes:         1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
                          2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: /uazWMJ1RWhULZtMJv2oYL6npFZ83LvZcUjNXOg78Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:9d:cd:a7:79:95:b7:3d:f2:b8:61:bd:c9:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
        Validity
            Not Before: Oct 19 13:01:34 2025 GMT
            Not After : Oct 20 13:01:34 2025 GMT
        Subject: CN=d94917414268c65fb6edeba43a5cb302f793ac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:38:f1:41:2a:fc:15:45:cf:ed:13:b6:d8:
                    f2:88:b6:2a:34:dc:85:18:f9:7f:bb:75:20:fe:1d:
                    c8:7e:fc:1f:30:aa:f0:fc:d9:2f:46:e4:2e:a0:50:
                    f4:87:32:4d:41:df:ca:92:9a:ae:12:79:e7:1e:27:
                    bf:a4:ff:bc:60:aa:7b:e7:88:b6:15:3e:13:e4:e0:
                    fa:ee:02:d3:ae:e1:83:4e:9d:34:93:d0:c5:11:dc:
                    0c:bc:ba:39:80:e5:1e:23:1e:87:ef:a4:f7:d3:63:
                    65:a8:a1:08:cf:aa:0e:ee:b0:f0:9b:cc:60:b8:fd:
                    0f:39:03:5d:67:dc:3b:85:eb:d3:da:50:67:70:ea:
                    ec:52:54:9a:61:0d:68:28:4a:5c:9f:aa:99:8a:38:
                    86:d7:2b:f8:de:24:92:5d:1b:fc:f1:0e:d1:95:91:
                    de:7e:d4:82:e9:5b:ea:ab:a7:1a:8a:89:86:75:86:
                    e1:61:23:84:18:ab:ad:ec:c1:9c:9c:5b:f3:73:94:
                    53:14:81:27:a2:fe:59:de:31:1c:9d:c0:75:d7:35:
                    0e:7e:e1:3f:30:b5:31:66:37:4a:ad:75:f8:46:3e:
                    cc:62:60:5d:62:83:9c:32:11:62:9f:e5:60:7c:f2:
                    60:ff:b6:50:16:6b:54:09:71:55:a2:f2:86:2c:75:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:17:41:42:68:C6:5F:B6:ED:EB:A4:3A:5C:B3:02:F7:93:AC:7B
            X509v3 Authority Key Identifier:
                keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:aa:c2:c5:ed:f7:b7:d7:39:88:55:97:82:ce:25:f6:c6:
         be:4e:a5:dd:a7:e9:a4:aa:87:b1:5a:51:36:61:0b:c3:4c:83:
         d9:7b:27:07:c5:cc:ba:db:80:89:af:15:39:76:66:49:3d:60:
         3d:df:9b:b5:f7:45:3e:57:b7:cb:76:de:3a:e3:67:95:e7:c4:
         31:54:f6:97:fe:0d:ee:c8:54:14:65:f5:94:07:25:6e:a8:40:
         58:ae:a2:08:70:6a:3b:6e:4a:1e:24:8e:43:be:d9:ee:a0:d9:
         45:6a:d2:5d:06:96:7e:98:cd:e4:a9:53:1e:fa:7c:f0:5f:d5:
         a5:01:03:e6:3f:71:47:fd:65:cf:fb:10:d5:ed:32:7d:53:86:
         08:d5:04:b2:7b:33:f9:7f:b3:b5:10:66:d5:37:e5:c1:59:cd:
         0a:58:b1:ee:89:bd:c6:46:e5:6d:56:09:86:7e:a6:21:b1:f4:
         c9:e2:62:3f:0b:ae:f0:f1:9d:de:1f:f8:c1:49:7f:ed:4e:60:
         88:ac:a1:61:48:13:41:56:84:58:8d:8f:e8:b9:39:e1:a9:ef:
         9f:ec:d9:db:db:63:cf:ea:81:ed:08:f4:52:eb:b5:3a:13:07:
         2b:53:d9:09:ed:7e:8d:13:c3:98:09:1a:44:9d:63:16:cf:6c:
         2b:39:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:56 2025 by rpki-client