Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File:                     0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier:          4fhPXCGqnJlSg0MICQ6x0iC6RVZ8eW4oZw0DCyj66Cc=
Subject key identifier:   C0:49:8E:2D:17:8B:6D:15:74:F0:96:3F:1C:BD:DD:DB:A2:6A:CD:99
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer:       /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial:       0199FF598175FE10B62AB45342D20193FAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number:          0E71
Signing time:             Mon 20 Oct 2025 02:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:19 +0000
Files and hashes:         1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: QMZeNDUEKu0+/YHskISZdOuGym5eXDJ9JT+ChpkL28A=)
                          2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:81:75:fe:10:b6:2a:b4:53:42:d2:01:93:fa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2abab75e746db1ecaa998759900399485093027
        Validity
            Not Before: Oct 20 02:01:19 2025 GMT
            Not After : Oct 21 02:01:19 2025 GMT
        Subject: CN=c0498e2d178b6d1574f0963f1cbddddba26acd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:9c:b7:07:81:7d:85:ef:43:f1:9b:b4:2b:
                    e0:39:f8:be:78:17:1a:cb:dc:98:a8:f9:70:d8:77:
                    a0:49:0d:f8:34:fd:c1:39:d5:8e:42:1b:93:15:5e:
                    95:1f:36:aa:8d:71:1e:37:ec:d0:81:07:12:f5:1e:
                    2d:90:54:ca:a3:ab:27:b7:e8:d7:ae:f9:2b:db:6b:
                    34:86:d8:10:17:33:f6:be:53:8e:0c:c9:4c:de:85:
                    fc:c8:d8:3d:d3:4d:e8:61:5e:5d:bd:f5:24:c9:68:
                    a9:ce:62:dd:0c:c7:52:75:b5:e7:f1:49:f8:d6:53:
                    e3:d2:00:9c:b1:b8:13:f8:04:41:c8:80:0a:f7:3b:
                    ae:2e:4d:f0:05:98:84:2d:ba:75:cd:77:18:0b:61:
                    cb:10:49:49:09:54:b6:83:2c:46:63:6b:e6:15:bb:
                    3c:00:14:61:5e:63:3c:ea:02:53:a1:be:42:a9:5f:
                    8b:c7:a0:79:c7:89:25:9d:16:d3:aa:03:af:63:12:
                    c0:d6:9d:e1:23:8b:5c:e1:31:1c:28:4a:05:60:50:
                    be:5a:de:65:4d:38:3e:25:86:e7:1a:cd:fd:63:5b:
                    ca:f7:08:51:6e:d7:f3:9f:5a:6d:5e:0a:2c:15:a3:
                    97:c1:f6:04:8e:ba:6a:ff:42:37:20:3b:cf:33:77:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:8E:2D:17:8B:6D:15:74:F0:96:3F:1C:BD:DD:DB:A2:6A:CD:99
            X509v3 Authority Key Identifier:
                keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:28:c9:90:a8:69:86:20:0f:9e:28:b0:8f:08:b9:8c:f8:
         5b:d4:6c:4b:74:09:d0:c0:d0:ab:aa:f0:59:c0:16:38:06:b2:
         65:88:75:01:4e:a7:bd:15:dd:62:ff:4c:c3:71:98:32:c6:b9:
         d2:ec:af:87:f4:33:4d:33:cf:d7:21:56:25:bd:4f:23:4a:db:
         51:a9:1c:ef:47:f1:10:51:87:ce:5f:da:b8:02:8e:b0:a0:62:
         fd:49:2e:e9:8b:1b:84:58:55:38:b2:4c:98:cf:93:ba:bc:ac:
         3f:6b:a9:dc:1d:f1:a3:84:1a:0e:86:e0:62:23:b2:fa:4f:9a:
         db:8b:30:48:48:82:fb:b2:d0:1a:e2:28:fb:78:19:d6:92:6d:
         f0:a2:91:fa:05:a7:3e:9b:ad:ab:4f:d6:ae:b4:61:1a:f7:40:
         be:ae:d2:2a:49:f4:42:43:46:34:96:15:d8:9e:0a:27:6b:3a:
         c1:46:22:91:79:c8:50:28:75:e4:e2:fb:20:2b:cf:1b:40:01:
         18:37:d5:c3:0e:29:ce:5c:6a:3a:ae:ad:0f:b5:a0:99:a4:27:
         06:e1:d9:88:cb:38:e8:e6:40:be:49:88:79:e0:16:9d:3c:c7:
         f6:1f:28:60:72:3a:5d:5a:01:3c:94:84:42:07:3f:b5:95:88:
         4a:f3:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:13 2025 by rpki-client