Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File:                     T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier:          mBJiAKHTYy8WqqsGU0g/3nFUFOm1GoXoFc0iR9rhwmo=
Subject key identifier:   FD:54:66:2B:A5:77:73:AF:EE:1E:4D:99:0C:D3:7C:F2:F9:D1:98:CF
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer:       /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial:       019A00A2D0DECD00D3BDA46BFAB22A8D87B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number:          05D3
Signing time:             Mon 20 Oct 2025 08:01:01 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:01 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:01 +0000
Files and hashes:         1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: fgdSoauqYppJQaoVH7y4xirVMyE1j8VWZLZZ4uVZAHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a2:d0:de:cd:00:d3:bd:a4:6b:fa:b2:2a:8d:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
        Validity
            Not Before: Oct 20 08:01:01 2025 GMT
            Not After : Oct 21 08:01:01 2025 GMT
        Subject: CN=fd54662ba57773afee1e4d990cd37cf2f9d198cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d0:1b:28:2b:db:c1:42:91:13:b0:89:c6:8a:
                    5f:d5:fa:24:6d:50:60:38:d7:e6:5b:27:95:9d:1c:
                    76:f4:48:62:d8:31:c7:08:0d:37:45:57:3e:88:99:
                    b3:02:ec:ed:b4:2c:70:9b:14:f5:45:99:2b:11:df:
                    28:e5:5b:9c:c4:2f:97:79:fd:2c:66:9b:7b:f4:a4:
                    78:60:bf:6b:9d:b4:03:e4:3a:12:5e:15:99:e3:27:
                    4f:79:a7:7a:0f:54:eb:f7:5a:a6:b7:13:77:3b:7f:
                    6d:ff:0d:38:35:6d:ca:99:15:5f:43:1d:c8:9f:97:
                    8a:e6:d5:5b:a3:c5:c0:c5:77:60:8f:f4:2e:f7:ed:
                    b9:d1:68:5e:e6:48:b7:d3:fa:e7:eb:fe:b8:f9:44:
                    3a:fd:4c:ce:09:2c:47:be:28:af:ba:b9:12:9d:d1:
                    30:b5:48:51:66:b7:6f:0e:9e:54:f2:97:39:8e:28:
                    a0:be:d3:7f:bc:74:f9:c5:db:4e:4a:f0:72:be:93:
                    a4:9e:b0:86:9e:5f:98:fb:72:b4:e0:14:e1:83:b7:
                    2c:13:85:17:5d:3d:dc:5b:ac:8a:15:45:bb:29:d0:
                    b3:e5:d6:e5:7e:f7:44:d5:fd:19:1f:28:1d:6d:72:
                    76:08:0a:9f:4b:f4:53:07:4c:e9:0e:c9:53:f9:83:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:54:66:2B:A5:77:73:AF:EE:1E:4D:99:0C:D3:7C:F2:F9:D1:98:CF
            X509v3 Authority Key Identifier:
                keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:18:9c:75:81:c6:1b:94:c2:a2:1d:4c:63:02:26:82:d2:
         3e:7a:ca:91:e9:af:6e:ef:4c:cd:dd:4a:4e:df:a8:e9:3d:08:
         96:9e:16:4f:af:e6:ea:22:e2:9b:d7:38:3d:f9:e5:a1:80:fb:
         7d:55:bf:9d:35:26:18:47:27:4c:e0:ba:13:3b:20:2e:59:c0:
         5d:79:ee:2b:fc:86:d0:7f:9a:e1:9c:53:ac:0d:6a:ea:97:ba:
         65:49:9a:5b:40:57:b5:68:99:fa:4b:cc:3a:e9:30:04:6c:6d:
         bb:31:be:d1:ce:23:a0:88:94:ee:92:f4:86:3f:96:31:56:e6:
         a4:38:3e:13:41:e0:8d:01:9f:ae:56:b9:ac:d6:93:29:b0:6b:
         a3:10:59:d8:0a:e4:e6:81:42:01:f0:ae:6a:66:a4:ba:ec:6d:
         a7:72:85:21:ff:2b:f4:fa:91:bf:9d:37:4c:cb:88:9a:ef:87:
         10:a5:d4:65:e0:4a:25:6b:a1:8e:01:d4:3f:08:1c:90:15:1d:
         43:46:34:3b:60:6c:c1:63:16:9b:39:ed:2a:75:5b:64:0c:2f:
         da:ce:e1:a8:f3:63:b8:cd:62:c0:f4:00:27:6b:14:b3:54:65:
         7f:c8:a5:60:1a:67:bf:88:61:af:6d:74:04:ce:66:82:9f:3b:
         6c:73:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:59 2025 by rpki-client