Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File:                     V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier:          HeOuHAA1jGntfMD66k1hkx3Psv5zsOBf97Pvv+6bDQU=
Subject key identifier:   61:65:00:7C:4E:68:B9:E4:40:E7:D4:77:39:8E:FD:1D:0B:AE:69:01
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer:       /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial:       0199FAD803D143C5FABE8F375F68ADE05E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number:          13EF
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
                          2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: PPRSw9ct2yzM0U1jMkZvRoe+VpB7Jo06zqBz4zIpXqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:03:d1:43:c5:fa:be:8f:37:5f:68:ad:e0:5e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=6165007c4e68b9e440e7d477398efd1d0bae6901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:a7:6e:9f:88:a1:22:db:e6:e7:a9:b4:f1:
                    f5:ad:0b:bb:f6:ea:02:a2:27:f6:4a:05:41:a9:ef:
                    d4:db:fc:a6:a8:f5:57:36:17:f6:3d:9f:98:d7:99:
                    2f:0b:00:b4:18:be:42:34:0f:44:1e:5c:3a:6e:50:
                    07:97:b0:db:22:0f:17:6d:e0:fc:6d:ff:e3:38:6e:
                    17:f3:66:04:4b:44:09:4a:86:10:fa:46:78:12:6a:
                    7b:41:e7:a2:11:94:26:27:29:a9:be:62:9e:df:e2:
                    f0:a4:10:36:30:fd:ac:51:ee:69:58:11:10:d4:3a:
                    13:b9:78:0c:e4:be:6d:88:f7:37:1e:78:98:b1:f3:
                    ad:80:f5:dc:bb:6e:b5:e9:f2:99:8b:82:62:2f:12:
                    c9:e5:8d:7d:62:d8:97:40:0b:ac:eb:b7:9c:28:ce:
                    30:d1:3f:6d:f7:9a:e7:a0:2a:ab:6d:85:1d:b4:83:
                    f9:d1:42:98:4d:d6:07:ac:ef:52:72:aa:4d:27:69:
                    81:76:49:55:83:46:75:9d:c9:8b:8e:e2:26:86:d0:
                    84:8a:8f:4a:c1:91:80:fa:4b:db:3f:56:52:0b:0e:
                    f0:8c:61:39:e5:a3:cc:0c:e6:32:fa:f2:04:f5:02:
                    3f:4a:51:28:3a:e1:c1:91:d4:65:60:fd:4f:96:ef:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:00:7C:4E:68:B9:E4:40:E7:D4:77:39:8E:FD:1D:0B:AE:69:01
            X509v3 Authority Key Identifier:
                keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:de:7b:69:a5:10:5e:38:b6:a1:d2:48:40:f6:6e:e1:bd:0f:
         de:b3:5f:e8:6a:19:b8:46:e4:26:f9:a6:9d:84:d3:fd:06:fd:
         e2:44:08:1c:fa:71:27:8c:79:6e:37:ba:07:cb:53:bc:c8:d2:
         10:a9:92:2c:63:77:c6:55:f7:17:c0:ab:0c:74:85:44:1d:c4:
         63:7e:b5:bd:08:ff:b2:75:bb:be:04:04:67:f1:d0:b4:44:69:
         89:53:3c:79:62:8e:09:98:ae:16:a8:11:cb:d2:4f:0c:74:d8:
         64:f3:a2:f7:9d:fc:85:93:d3:dd:ea:ae:4e:a3:4e:24:e7:3e:
         02:31:5d:75:34:4f:c6:88:7d:51:ab:b6:1c:7c:10:61:16:3c:
         9b:06:de:16:0c:a1:db:54:75:56:32:cb:d7:a6:8d:9f:cd:40:
         b3:58:4f:19:1b:ce:01:81:ff:62:ab:53:d0:a6:d3:bf:6b:00:
         c4:34:c1:b6:fb:ef:e9:f5:30:3d:07:51:b6:3f:0f:5a:84:19:
         6c:33:5a:8e:6b:62:9c:fb:fe:1e:89:99:36:fc:2f:50:4e:d8:
         d4:00:c4:f6:7b:8c:ef:0f:3a:7f:21:42:56:43:39:ac:cc:6f:
         1a:23:c3:33:ad:2a:76:98:e1:a4:f6:31:94:8e:6e:c9:a1:7a:
         d3:89:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:12 2025 by rpki-client