Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File:                     bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier:          BZ8yKqH8cSr3gIXnzv9Sqn0eB7B6m4+6xpGiJz92L8k=
Subject key identifier:   ED:EC:A6:44:88:E7:B1:30:DA:19:D1:61:B8:63:4B:BC:2D:6A:40:4C
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer:       /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial:       0199FB0F5895F1D32C9FC902F0B993237F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number:          0157
Signing time:             Sun 19 Oct 2025 06:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:50 +0000
Files and hashes:         1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
                          2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: JrrdIwk5fSK5AcescdPaDn4AiaDRGEyP+Tenp7ow0Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:58:95:f1:d3:2c:9f:c9:02:f0:b9:93:23:7f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
        Validity
            Not Before: Oct 19 06:01:50 2025 GMT
            Not After : Oct 20 06:01:50 2025 GMT
        Subject: CN=edeca64488e7b130da19d161b8634bbc2d6a404c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:c5:89:1c:b2:4d:d4:08:ed:4f:fc:d4:d7:
                    e9:a7:f5:08:07:6d:8e:ab:3c:94:61:a5:66:51:cd:
                    ba:ba:f5:ce:1f:c6:58:40:64:aa:c7:b8:6b:ed:d0:
                    0d:77:bd:60:4b:11:94:ce:64:14:ce:c5:bc:f4:b4:
                    d3:dc:e2:9c:82:20:22:89:26:a8:f6:10:b8:52:e6:
                    a4:c4:66:22:81:db:37:42:e8:e8:84:ce:8d:78:f6:
                    a3:5b:a2:d5:0d:3e:34:b7:8f:f7:5f:a0:c1:bc:b1:
                    07:52:cf:ea:57:5b:d9:8c:93:d8:53:f2:47:20:6b:
                    2e:7c:f3:81:87:d0:3e:15:00:fe:e5:4b:01:04:b9:
                    40:d9:ea:92:14:fb:fa:b3:c1:30:57:a5:10:42:59:
                    67:7b:f8:92:28:c7:a6:b0:28:d1:9a:d6:44:44:cc:
                    0c:19:64:41:24:3f:b1:03:c7:30:3d:40:33:0c:63:
                    a3:06:f5:4d:5b:76:b3:c6:29:76:d9:2b:2f:1d:e1:
                    a8:75:b5:04:7c:07:0a:02:91:20:4e:c8:31:96:74:
                    b7:20:b8:ce:a1:ac:92:6c:ff:bf:63:8f:33:df:e9:
                    cf:cd:ab:82:87:9d:c4:dc:31:7c:8d:15:bd:38:ae:
                    a2:da:5f:4e:18:d7:c5:30:d7:7b:6a:f4:dc:be:f0:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:A6:44:88:E7:B1:30:DA:19:D1:61:B8:63:4B:BC:2D:6A:40:4C
            X509v3 Authority Key Identifier:
                keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:85:f7:64:1c:b6:0c:65:59:fa:96:ab:b2:d7:6a:52:6d:2d:
         82:27:e1:bb:2a:b9:73:12:13:79:26:e8:9c:f5:91:8d:fc:f6:
         f7:2f:6f:fb:36:57:a2:94:92:54:d0:a0:36:61:09:e3:4d:76:
         8a:a6:24:82:98:d4:d6:dd:b6:71:fd:e5:ba:c6:72:23:bd:fb:
         c2:c2:8a:a6:ee:5e:16:d2:b8:55:2d:cf:71:6f:da:b2:33:6c:
         89:34:2a:b9:73:e9:14:c7:bd:05:44:43:fd:1b:5f:80:2d:94:
         f6:b3:23:cd:32:33:11:54:44:e9:06:6e:f8:7a:6c:89:a7:b8:
         f3:f0:ec:3b:bb:5e:4d:62:47:54:6e:21:e3:ea:ca:0e:36:f7:
         49:f1:1a:d6:fc:c4:8c:a1:c9:17:ef:d2:1d:64:80:55:1b:55:
         67:6b:c2:f6:fe:d1:67:9b:aa:cc:e5:1b:6a:27:24:65:77:0b:
         ec:44:9a:45:ab:75:6f:bf:b5:7d:67:6e:28:20:35:a2:e4:55:
         ee:dd:7e:a7:e4:87:74:22:0f:6e:43:2b:85:6c:3a:33:95:9b:
         70:5c:69:96:91:ed:c6:00:04:e6:b2:6c:37:7b:09:65:ec:da:
         8b:7a:40:5d:96:2f:78:a7:48:ad:f6:55:b5:a9:91:20:56:d1:
         7b:28:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:10 2025 by rpki-client