Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          3CIN1Sn7P6qt5mw5pUd3AtLVnaBgkY4RBkH0GWj8EWE=
Subject key identifier:   AD:3B:40:A9:C4:8A:9C:65:90:6C:DB:86:68:56:C7:9A:A2:F3:B9:98
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       0199FC58AB78C04C058EE05BD50EE300A991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          1215
Signing time:             Sun 19 Oct 2025 12:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:33 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: cA3T/Tvuvo8x1AnY/5ZOFxxR7Ykupcyfh4LBof62aRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ab:78:c0:4c:05:8e:e0:5b:d5:0e:e3:00:a9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Oct 19 12:01:33 2025 GMT
            Not After : Oct 20 12:01:33 2025 GMT
        Subject: CN=ad3b40a9c48a9c65906cdb866856c79aa2f3b998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:5f:49:f9:c6:6f:2d:21:bd:52:21:d2:4e:
                    aa:72:6f:03:a6:25:01:86:fb:c7:bb:84:3f:62:12:
                    e5:63:7c:46:41:e0:23:f8:05:cb:ec:29:26:e8:07:
                    30:f7:51:7a:80:74:d1:f6:9c:54:c9:b7:c2:ba:a5:
                    6b:af:ff:69:05:ec:d9:f5:d2:b5:c1:dc:72:50:8e:
                    7b:dc:af:69:4b:e3:bd:e2:8b:f5:01:c8:c7:cb:2e:
                    b7:7a:dc:a3:e6:ae:a4:7c:77:07:f1:c8:e5:22:29:
                    ba:c2:8c:b0:2e:06:60:ee:93:d4:be:b1:64:e9:c0:
                    e4:c4:a1:5a:3f:02:7e:f3:68:5b:94:b5:3f:fd:32:
                    15:d8:04:79:50:96:5b:56:a2:81:69:b1:76:85:60:
                    67:96:1a:cc:40:c7:56:58:31:0f:cf:7d:e3:2a:cf:
                    eb:4b:6d:36:cb:e6:17:b9:ba:06:80:ed:e3:42:a1:
                    1c:7a:b0:d0:4b:b0:3a:ad:0a:ed:13:0d:e0:5d:7e:
                    b8:50:20:d3:83:45:17:ce:b5:bd:fe:c2:d4:5b:6e:
                    43:97:0b:96:1e:14:14:01:0f:9b:c1:c3:e9:72:8b:
                    9f:5b:09:0c:25:a3:f0:fe:38:4e:9b:39:73:57:df:
                    f1:c3:25:5d:8b:de:a9:55:63:39:6d:89:2e:cb:ae:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:40:A9:C4:8A:9C:65:90:6C:DB:86:68:56:C7:9A:A2:F3:B9:98
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:4a:17:bf:7d:c9:7d:90:37:7d:eb:a2:83:aa:c8:8a:e8:
         bd:76:d9:3d:ca:5b:49:82:c5:88:f6:c3:97:9a:69:1f:5a:1e:
         9d:ab:fd:38:f8:78:62:ea:9d:b1:e9:92:fc:01:fb:61:18:54:
         54:67:00:7f:41:af:d3:78:89:fb:e7:0d:93:aa:11:64:18:f6:
         fd:dc:40:52:26:cf:02:63:69:a9:ab:83:ad:61:dc:46:9a:cf:
         40:79:e3:37:72:bf:7d:d3:c0:d1:1f:45:5b:99:eb:75:eb:0a:
         8f:59:b7:23:a1:4a:14:a4:7e:f0:49:78:38:6e:2a:ce:0c:c3:
         56:09:45:be:a8:eb:0d:0d:4c:cd:17:f3:d1:31:b3:c9:0a:4f:
         17:91:b0:24:5e:cd:2b:61:1d:1f:07:4f:7b:2b:ca:6b:46:ab:
         56:52:9a:8b:a1:ff:ff:78:8a:74:d5:b4:8c:5d:1e:21:1a:d7:
         75:22:59:e9:bb:af:6b:26:c8:c7:77:87:4c:0e:65:85:25:88:
         4b:8c:1b:91:e7:60:d9:7d:a7:0a:89:90:3a:a8:2a:7e:6c:fb:
         56:5d:03:24:b1:21:7b:5e:ed:2a:7f:d0:d4:33:be:11:67:ad:
         b2:43:90:e5:2c:ba:bf:b2:92:c0:a9:23:b2:ef:f0:1b:8d:c1:
         86:4f:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:12 2025 by rpki-client