Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          6j4IoLJwWLkO/vfaa6Qu702QzToi9fjLJxQEcL7N7QY=
Subject key identifier:   0B:65:A7:AF:7E:DB:28:36:88:82:CF:5F:AE:4A:14:33:1D:CB:CE:84
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       0199FC58C72899EDF7967DC375C268199F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          0B43
Signing time:             Sun 19 Oct 2025 12:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:40 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: wsxcYaOaFGtxqxQNcxL20xqoZP+1Q0tRcaUCye+eOCg=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:c7:28:99:ed:f7:96:7d:c3:75:c2:68:19:9f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Oct 19 12:01:40 2025 GMT
            Not After : Oct 20 12:01:40 2025 GMT
        Subject: CN=0b65a7af7edb28368882cf5fae4a14331dcbce84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:aa:11:7c:60:0f:b3:68:e1:c3:cb:ff:14:
                    7e:03:d3:13:c4:d3:11:f4:7f:be:09:70:e4:df:f3:
                    bf:a6:35:6b:9d:1b:25:49:01:d6:68:86:4f:85:8b:
                    ac:59:f9:b8:29:c8:b4:59:fd:d9:a8:5f:dc:d0:cd:
                    60:b2:b0:cb:4e:64:13:0a:e9:21:aa:cb:ad:57:b3:
                    e6:e8:c7:69:9a:19:e9:3e:f6:65:47:6b:64:82:7a:
                    e1:da:ac:d9:c9:00:91:18:64:ce:6b:d6:dd:34:0c:
                    31:87:84:d1:17:e2:30:85:2d:71:11:06:35:ab:c1:
                    06:08:12:6f:39:65:33:8a:1f:00:4d:1f:d1:ea:d8:
                    a9:55:70:35:55:1a:e3:80:bb:9d:d4:5c:2d:f1:be:
                    42:0a:68:18:d4:24:e8:c2:76:18:70:5f:d7:97:ac:
                    2c:08:fa:88:ec:58:21:d4:7f:d1:16:fb:61:ef:25:
                    54:16:70:c9:d9:53:fe:02:68:55:a2:d1:fd:cd:17:
                    b2:35:77:a6:1e:4e:cc:b2:b4:17:80:14:7b:5a:dc:
                    63:f5:06:78:62:53:0b:db:aa:44:98:94:f7:47:c4:
                    90:d0:d8:59:44:b7:a1:c2:e7:23:39:82:d9:04:9e:
                    41:c5:d4:66:77:49:7d:28:ea:22:a0:c7:86:f1:eb:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:65:A7:AF:7E:DB:28:36:88:82:CF:5F:AE:4A:14:33:1D:CB:CE:84
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:bc:25:4d:fc:a3:61:81:39:d4:e0:1b:0a:96:b4:6c:76:4d:
         60:2a:70:59:e7:de:97:d5:0c:ee:04:e0:4f:ad:02:6e:a3:f3:
         62:52:09:20:24:35:08:a5:89:d3:8f:a0:be:d4:58:f7:ce:74:
         bd:4e:89:c8:c1:d7:ee:f8:f2:f4:cf:3f:79:e8:99:8d:92:f8:
         09:1b:5a:84:22:5f:15:a8:ab:cf:4e:b5:8c:da:20:7b:e0:3e:
         99:da:11:60:69:6b:c1:08:97:30:4a:5e:a8:90:ef:36:66:6e:
         8d:b1:81:aa:52:07:1c:d9:36:5d:9c:d2:9d:ae:34:96:fe:5d:
         3c:a2:52:49:9e:9f:06:71:c1:db:bb:e3:4e:f6:36:35:fe:91:
         48:b0:53:7d:99:08:0d:c8:14:3f:c7:bd:c2:40:4c:ab:72:b4:
         49:c0:db:86:e4:7a:74:70:45:89:00:86:b1:27:cf:1d:3b:c0:
         3a:63:49:c7:9c:58:52:91:f7:dd:f9:0b:c6:3b:f6:c5:8e:e7:
         25:3b:ff:5f:84:26:dd:aa:77:f4:1d:69:e3:78:f2:9d:f6:f1:
         87:c5:6c:fa:f8:0f:85:8b:bb:00:a0:8d:a3:20:72:7d:4a:d2:
         42:58:6d:44:19:f1:2c:d2:4d:ec:0f:ba:c2:19:72:1a:74:e5:
         48:92:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:38 2025 by rpki-client