Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File:                     Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier:          zkxkJct5LPd/5PIrdere1lfSH5JFW0NFYolfxy1UbgA=
Subject key identifier:   9C:B3:5B:41:A4:57:4F:A3:FA:76:ED:BA:BB:7A:B4:98:BF:8B:50:25
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer:       /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial:       0199FF22AD17D21CCA7E31B457ED4697C7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number:          14E4
Signing time:             Mon 20 Oct 2025 01:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:26 +0000
Files and hashes:         1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
                          2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: NeN9V8aDtKpdmAbLhv9GkL7bTJp6dEcPrqGMIMtFIoU=)
                          3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:ad:17:d2:1c:ca:7e:31:b4:57:ed:46:97:c7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
        Validity
            Not Before: Oct 20 01:01:26 2025 GMT
            Not After : Oct 21 01:01:26 2025 GMT
        Subject: CN=9cb35b41a4574fa3fa76edbabb7ab498bf8b5025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:a3:cf:d0:88:ba:10:49:a1:2e:72:ef:e8:
                    a7:07:7b:fb:11:bb:64:d7:52:02:36:fc:e0:c2:81:
                    42:37:6b:d0:b6:cc:21:47:f4:5b:09:7d:c2:8f:15:
                    b3:03:b7:99:62:79:01:36:e1:95:33:61:10:fa:f3:
                    c6:c2:77:d3:b2:d9:9d:b6:a7:65:09:e7:8b:4d:61:
                    76:31:5a:e9:a2:fb:80:8c:fb:55:be:18:2d:ed:e5:
                    56:d8:1c:d5:d8:47:a8:f9:b7:0b:f4:cf:60:70:5e:
                    90:c3:08:65:fc:8b:c2:46:75:da:1d:b8:92:65:cc:
                    db:37:06:3a:ba:01:d8:e1:53:fd:09:8f:41:4d:3f:
                    a4:eb:f3:93:e7:54:93:1d:04:79:62:88:9f:c9:ac:
                    02:8c:94:5b:63:2c:f5:a4:c2:56:52:6c:4c:58:2a:
                    0a:91:01:69:01:76:e7:04:19:ec:db:8c:16:ae:6c:
                    2d:9d:d3:ab:c6:c8:66:13:45:27:ec:6b:a3:51:07:
                    fe:ab:cd:1c:31:0b:25:47:03:38:7f:eb:a1:96:c6:
                    be:ae:c0:56:ba:e8:bd:aa:3e:d6:b4:8e:a6:92:e1:
                    48:4a:2d:b5:54:72:e9:72:50:aa:95:41:ae:45:4b:
                    99:26:ed:5a:b9:b0:d2:6b:e2:96:69:22:21:18:9a:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:5B:41:A4:57:4F:A3:FA:76:ED:BA:BB:7A:B4:98:BF:8B:50:25
            X509v3 Authority Key Identifier:
                keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:ff:a3:f2:74:bb:4d:a4:19:8d:32:be:a5:f8:19:35:27:
         0e:f6:86:80:2a:d0:0e:aa:bd:32:9e:48:7f:c8:89:3f:f1:5d:
         4f:06:f7:80:3d:a3:03:f8:c4:2f:3c:43:c9:5f:67:25:b0:1b:
         d2:56:8e:e9:76:6d:5f:0e:97:ba:60:b4:68:d6:19:6a:41:8f:
         e5:87:41:b1:ad:29:62:f3:60:12:52:fd:14:8d:4b:00:07:bb:
         42:72:b0:74:9b:26:93:73:8b:13:67:76:3d:37:e9:b1:8e:0b:
         27:84:d8:c2:ec:6c:83:d8:02:d2:73:80:33:83:de:fd:e2:5f:
         62:8f:d0:94:7b:4e:31:63:45:20:9c:fd:89:c7:c3:f4:32:38:
         a2:c5:0c:48:59:f1:5b:50:9c:74:e6:f4:3b:c5:c8:90:cf:f0:
         94:fe:07:ee:1a:7b:19:41:e6:8d:b3:78:d7:34:58:17:b5:88:
         07:55:5f:99:28:60:07:87:a2:50:24:b8:69:dd:7e:5c:b8:0b:
         1c:83:99:c0:e4:36:6c:ee:a0:44:08:20:08:f5:40:8d:c8:56:
         1b:f9:98:ea:ef:cf:87:af:a8:b9:67:49:c9:1a:77:c6:e3:8c:
         e0:22:d1:88:91:19:89:34:e4:34:d4:f1:5b:11:9c:b1:7d:19:
         05:90:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:49 2025 by rpki-client