Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File:                     Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier:          jIY4P7xgY/Cj6sY5YLD57DJWXGeCfFoKAHSpLjJoJy4=
Subject key identifier:   79:23:09:FB:69:E1:C4:F8:93:80:47:0F:EE:2F:B6:9B:25:32:B0:E6
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer:       /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial:       019A022352072633EF3C09D02EC80C8F8240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 15:01:00 +0000
Manifest this update:     Mon 20 Oct 2025 15:01:00 +0000
Manifest next update:     Tue 21 Oct 2025 15:01:00 +0000
Files and hashes:         1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
                          2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: QN8PUsNLNDK21QT8GeUljGQnV9p5ilr5vGcNLaFInfE=)
                          3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:23:52:07:26:33:ef:3c:09:d0:2e:c8:0c:8f:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
        Validity
            Not Before: Oct 20 15:01:00 2025 GMT
            Not After : Oct 21 15:01:00 2025 GMT
        Subject: CN=792309fb69e1c4f89380470fee2fb69b2532b0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:13:ab:35:19:4f:8e:90:bb:c7:cf:7f:24:
                    f8:8c:86:34:08:95:d7:ef:51:fc:b9:a4:84:26:a2:
                    0f:da:fd:59:21:85:b3:84:0c:86:4b:75:38:bb:86:
                    97:5d:71:ba:ab:06:cc:fc:12:76:ac:5a:5c:d3:c8:
                    9a:73:aa:62:b5:97:a8:fd:36:49:52:1f:68:73:cd:
                    c9:f3:a8:a8:e3:de:a2:86:9b:b7:05:27:6f:80:e8:
                    39:0e:e1:0b:ac:17:75:0b:2b:7b:4f:b9:04:6f:9b:
                    fb:c4:49:85:22:a6:6e:dc:cf:f3:9c:36:0f:0d:48:
                    e4:44:f8:1b:df:f4:1e:ca:11:e1:2f:5b:fb:82:79:
                    7d:6b:8d:0f:89:93:0f:ba:b5:c5:cd:8a:f1:26:12:
                    31:30:24:e3:ea:cc:e1:c4:10:f2:6d:73:43:f6:c4:
                    c1:1e:e5:78:78:38:90:83:37:ce:5e:d2:fd:05:ff:
                    00:c6:2e:53:02:a0:96:24:79:84:ac:1c:a3:c1:50:
                    ff:52:e0:da:ec:15:5c:22:8c:7c:9a:c2:8f:10:b1:
                    f1:b3:47:9b:cb:a1:6e:c3:92:20:b1:fc:2a:fd:40:
                    23:92:1e:0e:ea:fa:15:8b:e1:64:e2:b8:89:fe:1b:
                    f3:d9:f8:9f:79:da:44:52:09:6b:b5:ab:3c:52:b7:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:23:09:FB:69:E1:C4:F8:93:80:47:0F:EE:2F:B6:9B:25:32:B0:E6
            X509v3 Authority Key Identifier:
                keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:73:d2:00:44:45:86:db:25:79:6f:0d:16:36:4f:ea:e4:6e:
         23:53:12:54:80:bc:10:6e:20:98:42:e6:4d:09:a0:84:2d:ea:
         d8:8a:c7:28:54:42:24:d2:d4:8b:28:62:30:77:a4:e5:a4:6a:
         ee:d5:14:6e:7a:8d:62:00:6b:c2:14:6c:1e:84:6b:bd:f3:8d:
         0f:41:1a:bf:d5:b7:9b:bf:82:ea:20:22:c1:1f:1d:dd:9c:36:
         32:a7:05:02:9f:45:73:3d:96:e5:ce:af:e6:37:3d:3c:a0:9a:
         eb:22:c6:07:2b:e7:ba:d4:f0:da:bc:de:5b:2f:95:fe:5f:de:
         37:7c:98:0f:86:f5:e8:1e:38:a0:79:41:4e:56:4b:4b:e7:ca:
         a1:2a:35:81:78:f4:b1:38:41:58:33:9d:58:24:16:25:7a:c9:
         1f:39:a8:74:31:f6:73:34:74:2e:1f:df:0d:f2:96:d5:e7:ea:
         ca:02:18:5d:ad:80:06:0b:4a:47:3e:5b:86:38:88:e3:4b:a9:
         ae:67:31:34:1e:30:3e:33:e8:d6:e1:19:13:f4:1c:5b:d8:41:
         24:64:11:27:92:1f:a4:d6:9e:0e:2d:03:65:dd:67:0f:5e:55:
         9a:d9:94:5e:01:7c:f6:92:64:23:13:4b:7a:f2:47:ef:8a:b6:
         fe:fe:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:39 2025 by rpki-client