Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          /AoMyCZj7GASngg7z3Se9y2x18cB2a9Szxy+BI5hrBI=
Subject key identifier:   DB:30:93:41:32:57:F6:56:AD:B6:A0:00:C2:86:18:32:C5:08:50:15
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       0199FB0F4896120B9A08839723C4BCFFA2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1706
Signing time:             Sun 19 Oct 2025 06:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:46 +0000
Files and hashes:         1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
                          2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
                          3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: dEbCVOt3GAlx4ykloKLQz9WWlrAVaeAgmM0eAa92d48=)
                          4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
                          5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
                          6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
                          7: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
                          8: v2G3M562D4aa-fcy5N8BIvKP6Qw.roa (hash: yF4Vq9anZc2BqQhoqalVt7u7GMXvQAYlbam4m09u8XY=)
                          9: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:48:96:12:0b:9a:08:83:97:23:c4:bc:ff:a2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Oct 19 06:01:46 2025 GMT
            Not After : Oct 20 06:01:46 2025 GMT
        Subject: CN=db3093413257f656adb6a000c2861832c5085015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:23:93:fc:8d:fe:ec:2b:39:e0:9c:21:0f:
                    4f:63:cd:23:9d:0c:b3:6f:0f:c0:cc:c4:32:1b:da:
                    d7:f0:67:fa:b8:29:80:cc:ae:51:cc:52:74:d3:12:
                    bd:aa:c6:9f:51:2b:56:ff:14:ad:8b:a3:aa:a3:78:
                    ad:52:54:b7:70:31:9b:f3:60:21:18:6e:30:fd:e2:
                    a3:f4:b7:cd:db:6f:f4:3e:6a:dd:c9:78:12:8d:ca:
                    40:93:3c:2d:e6:d4:56:a4:bf:67:a4:58:15:66:b5:
                    28:ee:08:58:a6:74:d3:30:ed:fd:7e:f6:b3:d6:64:
                    68:d4:a5:05:cc:1d:5e:7a:bd:ad:b4:a9:5c:ed:58:
                    84:c7:55:5d:2e:b6:22:a7:84:84:c3:a1:b3:b7:e6:
                    20:65:9d:be:aa:ae:e4:1d:76:29:31:8d:74:4d:82:
                    43:3e:e0:34:b9:e5:9c:84:07:3a:77:99:f8:20:15:
                    21:92:a3:79:3a:b9:b5:87:14:50:4d:84:ef:d8:37:
                    b5:07:1e:d0:a4:9f:63:cd:59:b3:aa:c0:e7:09:41:
                    cd:0f:ea:08:dd:57:c0:1c:28:a4:2f:4d:49:53:f0:
                    77:84:87:9e:fd:8c:58:97:9a:4d:ee:5c:81:dc:4c:
                    ab:ed:12:4d:36:22:f6:31:b7:eb:10:aa:2e:d3:93:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:93:41:32:57:F6:56:AD:B6:A0:00:C2:86:18:32:C5:08:50:15
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:23:94:69:18:ea:1a:4c:42:e1:5e:b3:41:b2:6e:76:5b:
         34:ef:96:c2:a6:32:43:45:9d:85:2b:34:0b:f2:d3:b6:7d:c5:
         72:01:8e:d9:61:76:5f:dd:4e:4b:95:70:b1:b1:b7:e9:ae:77:
         20:8e:28:75:6a:28:33:bf:c0:3a:6e:5b:25:c2:9d:ab:f3:70:
         10:8a:81:13:e2:af:b9:28:26:c7:f9:35:8e:36:a3:b9:ab:cb:
         ab:87:51:9d:ca:61:0d:cd:39:34:6b:f2:d2:5a:c8:f2:bc:c6:
         4f:ac:cf:7e:26:e0:b8:5e:1f:3d:91:c9:59:12:9e:0b:17:e5:
         c6:e8:39:d6:67:15:83:05:2c:4a:98:e1:b4:6e:3f:31:1d:2c:
         d7:f5:67:85:5e:99:6f:84:14:b5:8c:ca:e6:8b:a1:74:fa:02:
         1d:1a:d4:78:9e:e5:d1:4d:9a:1a:0b:23:fb:06:0f:47:55:97:
         49:1c:d2:a0:ae:48:41:9b:37:b0:c4:bd:b4:56:9f:ca:9e:73:
         ec:d2:c3:21:26:ce:d3:e3:0f:9a:c9:5e:30:48:54:02:fc:2c:
         99:b0:3d:be:9f:39:08:10:9b:55:ad:02:10:79:04:12:f5:7f:
         71:71:58:20:9f:df:96:4e:55:a6:54:22:3d:87:8c:cf:58:ce:
         c0:e6:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:05 2025 by rpki-client