Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          7Ty0zjSlgkZAjqY2GX5iic992oIgfWKCbFKGqy36MTg=
Subject key identifier:   84:68:35:31:EA:4A:E9:B7:0F:7A:8C:BF:23:00:DA:42:85:DD:85:AD
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       0199FAD7B5C414C0739A85D48005627EFD1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          1661
Signing time:             Sun 19 Oct 2025 05:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:04 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: le+R9QrROSw+0gMvIY0nwDei7/bTKC6bzcROx8PpkA0=)
                          2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b5:c4:14:c0:73:9a:85:d4:80:05:62:7e:fd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Oct 19 05:01:04 2025 GMT
            Not After : Oct 20 05:01:04 2025 GMT
        Subject: CN=84683531ea4ae9b70f7a8cbf2300da4285dd85ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:2a:d2:15:ea:54:c9:f0:88:fa:41:e8:df:
                    81:a6:11:c4:2f:85:97:a7:a3:1b:d8:d2:42:b6:76:
                    5a:83:81:e3:c4:68:85:d9:c9:f9:bb:b6:9a:7f:5a:
                    98:41:43:ec:a6:e8:a0:72:f5:7e:ad:7c:77:1b:d6:
                    a1:73:f3:06:2c:2e:2a:65:28:e6:9a:1c:ec:bb:65:
                    b2:a6:5f:6d:27:41:aa:5f:93:ea:07:45:51:9b:5e:
                    8f:28:f6:60:de:9f:b0:b8:e9:50:ae:e2:28:84:5b:
                    23:87:03:54:d1:3c:fd:61:96:42:cd:b2:fc:a8:ee:
                    12:24:e0:66:1b:4e:30:ac:64:ea:b2:a2:84:6a:10:
                    96:d0:40:09:07:da:af:0b:2e:02:f8:56:17:f7:40:
                    4e:21:ab:21:32:cc:88:f5:5a:4a:d7:1a:ee:e3:ad:
                    17:56:0f:25:85:51:ab:9b:6d:39:c2:5a:55:9e:5d:
                    7a:46:c9:80:ca:e9:b9:b9:04:f6:a9:c0:e6:04:33:
                    11:6f:ee:ad:c2:3e:f4:01:1a:cf:d0:12:54:c8:21:
                    90:8f:3b:ad:0c:82:e8:84:7e:d0:d8:1d:68:a5:52:
                    28:98:fc:ec:ec:32:f2:62:60:1c:db:8d:a0:ad:af:
                    de:64:6d:8b:bc:29:85:d3:16:04:45:99:59:61:88:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:68:35:31:EA:4A:E9:B7:0F:7A:8C:BF:23:00:DA:42:85:DD:85:AD
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:42:11:82:5a:01:d2:e4:60:bb:0e:74:83:9f:64:fc:d8:
         bd:3e:bb:77:44:10:08:65:bd:52:02:f9:af:d2:7c:27:c7:7c:
         10:9c:f9:a9:64:b7:dc:94:08:e1:a5:86:60:ef:05:ef:f4:b9:
         e5:1e:e6:1d:3e:0a:00:72:ec:dd:a8:63:ef:87:ce:73:59:4b:
         b7:bd:72:54:b7:18:f9:4a:86:f3:a2:d4:40:99:5c:d5:ce:16:
         88:0d:01:ba:3f:f1:35:d7:57:6d:5d:e3:79:8a:ed:be:6d:9a:
         30:fa:2a:67:26:58:60:a0:e3:a3:a3:91:7d:6b:30:b5:b1:3a:
         ff:9e:97:3e:8e:7c:7b:eb:a8:5b:fa:99:6c:42:d4:15:d9:04:
         02:07:c9:0d:c4:3d:e2:eb:18:20:2e:20:ab:a3:6e:43:95:6b:
         7a:68:f6:f2:2a:42:dd:7d:c8:d4:40:f0:cc:d2:c4:92:34:83:
         0e:87:5a:8e:de:aa:98:06:8e:8f:d3:bc:b7:f8:11:32:ac:cb:
         74:2e:8a:c4:bc:69:73:ce:78:2a:97:fb:dd:29:cb:c5:b2:9c:
         ef:14:ec:29:3d:07:1d:0f:91:36:7f:ba:b5:39:f1:ec:2b:3d:
         fb:1e:2e:e6:75:34:39:3c:3c:1c:8e:85:5d:95:5e:f2:0e:04:
         e0:4b:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client