Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
File:                     SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json)
Hash identifier:          7N7lDb50eqqlgDuflxdJwEfwbCEXFJYC+s7EBEsxgE4=
Subject key identifier:   ED:28:9F:96:DF:14:8A:C9:47:12:46:AF:15:64:58:19:87:E6:4E:D6
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Certificate issuer:       /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial:       0199FC8FA7C2BA8E80C39169B26EE16545C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
Manifest number:          12E0
Signing time:             Sun 19 Oct 2025 13:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:36 +0000
Files and hashes:         1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=)
                          2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: BAjnRWA7qu3RV3uEKd+TJt6ZDnJ3hDT/KSlT4mLBHlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a7:c2:ba:8e:80:c3:91:69:b2:6e:e1:65:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
        Validity
            Not Before: Oct 19 13:01:36 2025 GMT
            Not After : Oct 20 13:01:36 2025 GMT
        Subject: CN=ed289f96df148ac9471246af1564581987e64ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:21:0c:35:db:0a:7b:e1:ce:c9:87:5a:86:
                    d8:cd:79:85:a6:5b:6e:d8:6e:9d:cc:52:42:6c:76:
                    99:c6:93:24:50:e7:7e:e8:bf:76:18:29:d9:6d:f7:
                    b1:fd:23:8c:e1:55:ca:16:67:4d:ae:2a:c4:a1:bd:
                    41:e0:b9:ca:62:6e:57:95:5a:c0:0a:11:7a:82:b8:
                    2f:83:05:59:a4:fa:2e:d4:84:c5:0c:e3:d2:f2:3c:
                    1c:de:db:e1:18:e7:da:83:38:bb:81:5f:c5:06:10:
                    f4:68:0f:a4:b4:cc:a6:de:24:cb:fb:8b:96:f2:68:
                    bf:05:c8:ad:d7:8a:44:db:c9:23:84:f8:9c:28:17:
                    a5:26:2e:4b:a2:40:a8:c8:af:b8:e1:5c:cc:49:01:
                    1f:23:83:da:e7:e8:6f:f3:25:f8:5a:8f:9d:97:18:
                    fb:f4:1b:b3:f2:39:27:37:ec:c2:1c:65:8f:e2:2e:
                    a3:44:09:3e:30:8d:2d:70:f2:2f:95:34:53:b2:54:
                    32:27:28:47:ee:fa:09:1d:3f:43:cf:a6:8f:bb:62:
                    cb:5a:8a:8b:c7:e0:3a:f7:1c:65:d5:d2:98:d8:82:
                    d9:89:de:23:41:08:d4:88:b7:2d:1c:8a:0e:45:b5:
                    dc:be:5e:fd:51:7f:92:8c:47:18:5d:2a:81:4f:da:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:9F:96:DF:14:8A:C9:47:12:46:AF:15:64:58:19:87:E6:4E:D6
            X509v3 Authority Key Identifier:
                keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:e2:bd:0c:d6:61:8c:38:9b:5d:b7:f1:55:68:e2:df:56:
         60:da:63:52:1e:64:a9:4c:d7:42:ec:c6:b8:e2:ac:7e:04:5a:
         6c:62:41:18:58:c1:25:21:f9:c0:c8:55:5e:9b:2a:04:66:a4:
         67:a7:d3:3b:ee:b7:8c:ec:37:ed:5e:cf:b3:d2:b6:7f:a1:89:
         6b:ad:64:d1:8c:fc:08:87:3a:01:d7:a7:56:b9:f6:95:62:4d:
         55:61:15:f4:d3:2a:15:d4:00:d2:41:a3:ef:68:cb:ed:53:c4:
         c0:01:72:49:79:47:55:6f:75:65:e2:45:5a:ef:e6:30:54:40:
         17:eb:42:dc:4b:4e:ca:5e:0a:d7:f1:c3:24:63:80:d4:a9:9b:
         18:da:f6:c2:47:41:cc:97:96:5c:63:68:d7:5d:b7:a0:f8:a8:
         97:58:f6:e6:ed:7f:07:a2:b0:73:ea:12:a1:a5:16:75:27:25:
         f4:da:8b:fa:d7:78:31:0f:b4:62:27:41:f0:58:29:d9:47:26:
         0d:88:9e:cb:47:71:67:cb:e3:7f:d8:20:4f:93:a9:f2:f6:48:
         5f:4e:12:46:5a:21:7e:dd:52:5a:ec:10:6f:21:da:e5:cf:18:
         0a:89:e4:be:22:b4:bd:65:36:2b:00:5e:90:5e:b5:9f:8b:36:
         fe:2f:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:25 2025 by rpki-client