Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File:                     y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier:          tPPruo/uXwWUW7XbAoXyBLADLIRdAnnCUPrlSausfIM=
Subject key identifier:   DF:52:5A:F1:49:4A:A4:81:22:D6:6D:90:76:09:F3:FB:48:50:FD:8A
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer:       /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial:       0199FBEA77B0995DC82C7D14AF4B45F20C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number:          13E3
Signing time:             Sun 19 Oct 2025 10:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:11 +0000
Files and hashes:         1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
                          2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: fItrHaId+8fg00tSyGb+m2dqwRiQXwOmuDOaTFC/xiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:77:b0:99:5d:c8:2c:7d:14:af:4b:45:f2:0c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
        Validity
            Not Before: Oct 19 10:01:11 2025 GMT
            Not After : Oct 20 10:01:11 2025 GMT
        Subject: CN=df525af1494aa48122d66d907609f3fb4850fd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:ed:a3:bc:30:ff:20:7e:ec:64:bd:bc:f6:
                    10:e1:95:95:f4:7a:b6:d5:52:03:29:0f:e8:e4:3b:
                    b2:e9:de:58:5b:b0:5d:78:ac:74:c1:46:a4:4f:53:
                    37:c9:5c:30:4e:17:f3:43:31:f1:bd:f5:b5:12:c4:
                    bf:9a:4a:5c:cb:a5:75:93:a9:0e:2c:51:89:f5:ff:
                    5a:1c:08:a2:78:8f:32:ad:4d:53:1d:0f:d5:05:2e:
                    d5:bf:b0:4c:b4:4a:6f:65:17:4c:59:56:a9:2a:dc:
                    bd:d5:7c:ed:c3:d9:76:31:04:9d:b0:3b:64:d6:2f:
                    9e:19:f6:d0:b2:3f:e1:e1:01:8f:35:5f:ff:f2:69:
                    e6:76:17:e9:75:3c:36:94:50:19:a7:a0:36:1e:c8:
                    4c:34:93:5d:28:66:21:65:b5:2a:32:97:d4:57:36:
                    b5:dc:ec:15:31:59:4a:67:24:ec:7d:41:d2:d5:c6:
                    e7:6e:46:e5:77:6d:19:f5:fc:79:18:5a:87:2f:18:
                    92:33:7c:30:9a:1d:17:39:c1:74:77:12:0b:3d:a8:
                    f9:34:18:30:30:9d:5d:3c:28:40:81:81:fc:7a:f0:
                    4d:9b:ec:d8:10:d6:f5:50:fb:2d:82:91:c4:bc:f7:
                    1e:ec:80:d4:b2:d9:90:bc:e1:63:d9:b8:a8:2e:d8:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:5A:F1:49:4A:A4:81:22:D6:6D:90:76:09:F3:FB:48:50:FD:8A
            X509v3 Authority Key Identifier:
                keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:fe:b7:3c:3b:fe:8b:95:7a:d4:19:57:bf:b2:95:bc:69:
         f4:53:e0:0e:f2:c2:19:ca:a1:79:51:bc:ca:31:9d:d6:df:43:
         d5:2a:2a:c0:8f:80:48:04:12:e5:ec:3b:f3:76:0b:54:9c:2d:
         54:b4:28:a9:0e:23:e7:05:b5:fe:52:29:28:13:91:dc:81:fa:
         08:75:2e:c1:d4:28:7c:53:26:5c:fe:47:ea:45:fc:11:59:1b:
         b4:fd:82:13:d6:fe:74:7c:f9:eb:5b:9c:3a:37:1c:06:45:b6:
         27:01:82:9c:7e:c6:92:da:76:7f:da:fc:df:92:4c:e9:62:fc:
         e7:ac:76:3b:07:50:1a:4d:bd:52:9a:9e:6f:b0:72:a5:7f:c2:
         7f:5c:cb:7c:1d:f3:83:de:16:e6:65:31:d8:3a:f4:de:b5:7e:
         e6:b4:27:30:e6:0a:c9:a5:fd:e8:2c:d0:cb:f9:f0:3b:73:1a:
         31:4b:db:97:71:fb:25:b4:f7:75:24:a5:c9:26:57:e8:4a:18:
         5a:d4:5a:86:70:bb:78:a8:86:a6:bd:c9:74:54:0e:8f:37:26:
         56:e4:17:77:96:92:26:9c:48:bc:c4:c6:1d:76:88:42:4e:55:
         b7:35:25:f5:ee:db:e8:f8:fa:45:3f:1a:24:e3:81:7e:85:79:
         a8:44:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client