Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File:                     T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier:          mf3XkDMBZ7gynYiksm4jCuLPTjqJ7kJRVHvLW7py9Hs=
Subject key identifier:   8F:F7:B7:AE:29:AA:3C:79:84:BC:2A:FD:8F:84:F3:F8:7E:4C:A2:AD
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer:       /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial:       0199FE7DDBD5D6DC38C84A41D037F4146495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number:          0B80
Signing time:             Sun 19 Oct 2025 22:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:25 +0000
Files and hashes:         1: NC9FKYs1BXFgd8eBRdSLNG0ab1E.roa (hash: AdbbA0DHP1eCkTNHXLT0EO4D6DCGT9CWxG1DEmumay0=)
                          2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: 5J4xEcqcOrskeReiffquyn9QcRnMZ7F1sw6Q8+79khc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:db:d5:d6:dc:38:c8:4a:41:d0:37:f4:14:64:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
        Validity
            Not Before: Oct 19 22:01:25 2025 GMT
            Not After : Oct 20 22:01:25 2025 GMT
        Subject: CN=8ff7b7ae29aa3c7984bc2afd8f84f3f87e4ca2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:ef:c8:be:86:31:a6:4b:e4:bd:05:50:85:
                    a0:60:83:24:62:b3:42:95:f7:a9:fc:bc:f0:c3:b2:
                    6f:c9:f4:c3:46:57:b3:0b:0c:b6:0f:13:13:ee:94:
                    bb:b1:3b:47:3f:16:b9:18:f4:28:c3:75:90:42:5e:
                    24:d0:61:bf:c6:15:b2:4c:08:15:68:bc:b7:df:b9:
                    7e:a0:eb:4d:b8:b6:b2:f8:eb:73:23:5f:d2:c2:b2:
                    e8:1c:9b:56:3e:35:04:3d:6d:26:47:ea:43:74:61:
                    1c:1f:41:07:a2:dd:2a:28:ea:a0:bd:d7:7f:0c:e3:
                    a7:9a:86:d5:6d:37:65:5a:05:e4:53:d6:01:0f:7b:
                    7e:37:0b:70:88:e2:ef:cd:da:52:df:6a:8c:ca:7e:
                    6e:f3:bc:b6:39:e7:0c:10:ae:bb:3d:64:f5:e2:39:
                    f6:2c:cc:6f:fc:12:18:89:c1:5b:90:02:15:61:49:
                    46:49:53:f7:9e:93:a5:fb:26:de:41:3c:f8:ee:2f:
                    c0:e9:7e:6e:b5:10:88:ac:09:37:c6:a9:db:74:20:
                    2d:f8:42:02:c9:55:f8:1d:40:0d:c4:c6:6e:08:50:
                    ce:73:32:28:f4:6c:da:98:13:92:4d:4f:a3:1b:ec:
                    2f:f8:9f:bd:f9:bc:19:73:c4:bd:d9:4b:b6:01:46:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F7:B7:AE:29:AA:3C:79:84:BC:2A:FD:8F:84:F3:F8:7E:4C:A2:AD
            X509v3 Authority Key Identifier:
                keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:48:e3:de:7d:1c:67:e9:eb:ce:8b:cb:85:f2:a0:e1:80:00:
         a2:6f:ae:77:ce:d5:ff:7d:73:08:38:6e:5d:f4:8f:02:3a:14:
         15:69:8e:b2:b6:2e:1e:f1:85:04:43:3f:5d:7b:83:6f:7c:91:
         9b:2e:91:61:d9:78:41:3c:63:01:bb:d7:15:7b:53:df:99:9a:
         d0:8b:aa:50:88:f1:12:85:b4:ed:a1:0d:8e:95:76:f5:39:02:
         fb:26:a2:fd:60:90:6d:20:d4:7f:b1:50:26:7f:cb:ac:78:8d:
         35:03:c4:e6:73:35:00:2b:c8:3a:6a:01:b3:9d:14:e2:84:66:
         57:7f:29:e3:0f:a8:9f:be:fb:4d:1b:c5:0f:ac:af:21:bd:ea:
         b2:36:64:3e:40:91:87:0e:05:e4:d0:d5:a7:43:f4:41:9a:4e:
         18:ef:c2:01:c1:a8:18:ec:37:49:e2:86:0d:88:a6:78:71:9f:
         cc:d3:db:a0:f7:44:94:7a:c6:4f:9f:45:a6:cb:fb:3a:bb:62:
         8f:77:ab:79:38:21:95:43:82:bd:2e:5a:9b:b3:3f:2e:e7:f0:
         46:16:4f:9b:ab:6f:6c:53:51:5a:da:81:ac:2c:67:bc:9f:ae:
         f4:e9:6b:c3:95:d8:50:b8:20:d5:c2:80:63:6f:7a:5d:64:74:
         37:92:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:19:20 2025 by rpki-client