Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File:                     cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier:          15Bh1iNAp2JkLhIUu6TMRj3l3Nocr2wL5XB1ofg5IFw=
Subject key identifier:   EB:1B:FF:77:1D:11:88:53:D9:4A:93:54:28:FB:49:F9:B4:71:60:64
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer:       /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial:       0199FB0EBEEC896A4FE8C7ED863AAEA850AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number:          1674
Signing time:             Sun 19 Oct 2025 06:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:11 +0000
Files and hashes:         1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: jZ56n+DepTwYFngqYtVG4dmQvlE+MbRvMPb9cJYwuqo=)
                          2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:be:ec:89:6a:4f:e8:c7:ed:86:3a:ae:a8:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
        Validity
            Not Before: Oct 19 06:01:11 2025 GMT
            Not After : Oct 20 06:01:11 2025 GMT
        Subject: CN=eb1bff771d118853d94a935428fb49f9b4716064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:7b:7e:d9:e5:8f:49:00:36:52:a5:32:b6:
                    a8:a5:7e:7c:ba:18:ad:17:73:e9:b3:d4:21:68:4e:
                    f9:e8:63:2b:88:4e:a0:37:ce:fc:fa:78:e5:9a:65:
                    6e:de:54:fb:7f:a8:3c:82:9b:13:07:9f:25:0b:8c:
                    b2:f1:f1:d5:b8:d8:aa:70:fb:f8:dd:72:2d:13:06:
                    73:6e:e0:77:7f:ec:20:a0:1e:6f:1f:a1:dc:93:5a:
                    6b:af:da:c0:f2:cf:7a:6e:32:dc:a4:95:c4:c1:51:
                    c5:99:63:4d:c3:f9:de:d0:11:8f:ed:d2:eb:9f:4c:
                    fc:07:91:1d:6a:b3:2b:83:c4:c9:b1:56:98:12:48:
                    91:19:5e:18:dd:8b:ed:61:55:5d:ff:dd:e0:93:4d:
                    ed:45:f2:90:52:d6:02:dd:1b:a3:67:f2:59:54:f8:
                    5b:7b:01:50:77:7c:b8:04:ab:86:5e:72:54:ad:3a:
                    ce:a8:1b:d2:85:f5:0b:6a:a3:40:8c:96:3c:9f:fe:
                    08:83:89:36:d4:2d:9f:cb:b0:04:51:89:f9:36:76:
                    16:ce:58:8b:10:ea:a3:86:4b:e1:09:a9:70:c4:f6:
                    b2:a1:44:19:86:96:5d:4e:55:6a:b5:69:98:4e:e9:
                    a9:5a:c0:66:84:51:3c:86:5a:76:a2:ac:a0:72:73:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:FF:77:1D:11:88:53:D9:4A:93:54:28:FB:49:F9:B4:71:60:64
            X509v3 Authority Key Identifier:
                keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:b0:6e:67:8c:60:11:0e:c6:74:df:75:1d:5d:97:b1:7c:
         1c:5c:5e:d0:eb:bd:36:be:b2:d8:ad:15:cb:a2:c2:13:77:fb:
         4f:17:27:aa:cc:91:7d:0d:e6:09:53:00:86:be:de:21:a1:a0:
         63:e2:ca:85:f2:17:af:20:23:89:9a:23:45:47:91:f3:ee:01:
         93:54:8d:dc:f2:b8:83:36:81:6f:5c:e5:a8:b6:5c:ef:67:9f:
         53:7e:ac:03:ea:94:d8:4d:d0:16:fe:7a:6c:b9:cb:83:e6:22:
         d9:89:65:e7:51:c2:dd:b5:bb:72:4a:69:57:ff:16:a8:27:10:
         ea:b4:c7:a2:7f:39:1e:04:ed:20:ae:22:58:18:42:3a:d3:3d:
         c5:28:bd:70:cc:5d:db:c2:c1:46:3e:1d:8b:5e:15:86:22:ab:
         58:80:49:08:8a:01:aa:31:03:0d:8e:6d:bb:b8:65:a2:c9:8a:
         9e:f2:d8:09:01:02:82:d2:68:96:6f:af:7b:4b:1c:9e:e9:da:
         c5:04:7e:0d:bf:48:dc:ce:45:9e:8b:cb:77:71:b9:6c:03:91:
         d1:28:63:f3:fd:58:1a:94:5a:47:2a:4c:97:67:c8:4f:3d:47:
         73:20:d0:44:3a:56:1c:62:d5:75:51:d3:89:51:8e:c5:d1:84:
         6f:eb:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:09 2025 by rpki-client