Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File:                     d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier:          XXO9dWnWHcTuHIFpiC5/f7l0ueZKOWnWAXq+hwfRprE=
Subject key identifier:   03:81:42:BE:E3:0B:14:13:B2:FC:3E:E9:16:24:EB:BC:AC:71:8E:45
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer:       /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial:       0199FC8F267791AE80FBF3E439505841F699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number:          0FD1
Signing time:             Sun 19 Oct 2025 13:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:03 +0000
Files and hashes:         1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=)
                          2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: 0DS6A8f7LBMPfcXUOdExGYNPuLyxZ1mHCAMs+DtQ7jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:26:77:91:ae:80:fb:f3:e4:39:50:58:41:f6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
        Validity
            Not Before: Oct 19 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=038142bee30b1413b2fc3ee91624ebbcac718e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:63:e9:3a:e1:55:d9:26:33:38:e9:24:0f:
                    9f:f8:18:0d:ad:a4:5c:bf:0f:e3:81:a2:eb:9c:98:
                    d6:86:05:24:0b:1a:22:bc:25:ad:3b:1e:c5:68:da:
                    8e:b5:1a:7b:ac:a1:ef:c1:f6:95:90:4e:43:96:2b:
                    e2:59:c4:45:9a:57:30:5a:75:fd:43:31:fc:6c:2f:
                    94:7d:bf:47:04:5f:83:08:c5:16:ca:51:a8:b5:88:
                    aa:cf:7b:99:0b:8c:2b:10:ec:c1:b4:f5:51:13:e7:
                    2d:75:40:26:58:f6:05:ce:f0:f1:97:30:6b:4a:e5:
                    5e:fd:ea:31:7a:42:cd:dd:9d:ad:25:2a:40:73:b2:
                    9d:ab:9b:0f:22:ed:34:7c:99:b6:e8:0c:bf:2f:4a:
                    5c:8c:84:84:37:11:6f:12:3a:a2:69:f2:90:b8:f0:
                    51:a3:5f:b1:67:7d:7e:84:77:d8:23:4c:e1:0a:59:
                    4a:92:6f:b1:8a:c8:31:0d:74:6e:8e:1a:37:53:e5:
                    3d:6d:41:b5:40:0f:d3:69:04:04:12:b7:85:c3:74:
                    27:b3:18:50:0c:8c:98:fb:7d:fc:f9:c8:b3:81:27:
                    f6:94:26:6b:68:e3:0e:5c:47:2c:f7:b8:eb:09:4a:
                    a4:93:b5:03:f6:67:31:78:55:31:21:c1:54:2c:f7:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:42:BE:E3:0B:14:13:B2:FC:3E:E9:16:24:EB:BC:AC:71:8E:45
            X509v3 Authority Key Identifier:
                keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:6c:1a:95:53:8a:28:3e:42:ab:5f:05:ed:26:cc:87:3c:
         10:0c:b8:df:49:3e:5b:94:6f:e1:de:5e:48:51:b4:e9:e2:91:
         87:0a:f9:98:fc:2f:a9:81:b0:b2:02:4e:62:eb:06:75:2e:11:
         94:4b:4a:06:7d:b1:fd:3d:46:a8:ab:ca:09:f9:ff:01:a4:45:
         d1:4f:13:b0:07:f3:3e:20:a6:3f:75:c7:5f:06:c5:43:fc:2c:
         2c:15:ee:88:9e:6b:2c:11:f2:aa:8f:59:d5:ff:8e:b8:86:61:
         5e:4b:b9:1c:5f:c2:96:ff:9d:d5:60:ff:4e:45:e2:b9:11:c1:
         f1:e5:6f:a0:43:83:db:6e:d0:52:4b:16:40:bc:7e:16:70:cb:
         ca:6c:a5:f6:05:66:7f:4b:f5:a1:80:e2:21:5e:4e:8d:cc:da:
         07:ac:cd:53:b4:12:b4:c8:91:dc:a7:bc:a7:40:39:82:30:ea:
         84:b3:e2:53:32:a9:39:04:4a:72:07:83:cf:7a:92:9a:27:b4:
         46:6c:0b:cf:fc:5f:59:62:3f:cb:ab:24:9b:99:1f:73:9b:7a:
         0d:e3:05:8d:6b:12:9d:27:92:56:c7:87:34:e7:7f:c8:ca:8c:
         72:6e:e9:ac:c5:96:8c:a8:4d:51:38:b5:91:0b:26:c4:74:0f:
         27:1c:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:46 2025 by rpki-client