Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File:                     IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier:          vYgQ01/fik/5HdK9uKXOvmW4vus6cjCBZOXCriXeKuo=
Subject key identifier:   30:C7:8F:64:9C:2B:A2:5A:CA:C1:20:FD:E2:94:F4:0B:BC:F4:D0:9C
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer:       /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial:       0199FF2279AC857E18CC458AAEB4A340FAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number:          0E98
Signing time:             Mon 20 Oct 2025 01:01:13 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:13 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:13 +0000
Files and hashes:         1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: MeJYd5hbBMG0Idh2ll3vhD+kQaqNYxh4aYTvIY1MCFc=)
                          2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
                          3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:79:ac:85:7e:18:cc:45:8a:ae:b4:a3:40:fa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
        Validity
            Not Before: Oct 20 01:01:13 2025 GMT
            Not After : Oct 21 01:01:13 2025 GMT
        Subject: CN=30c78f649c2ba25acac120fde294f40bbcf4d09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:64:4f:54:b4:84:b9:29:30:83:e4:6e:e8:
                    19:6b:7d:2e:3a:f4:82:c8:01:59:ef:3f:08:37:35:
                    48:02:2a:50:14:59:1e:f6:cf:e4:ab:03:5c:da:0a:
                    96:29:a6:1b:49:ec:e5:e4:5d:91:75:ef:76:41:7a:
                    7f:c9:c1:32:b7:93:43:17:62:86:b4:9d:b9:1d:14:
                    2c:f6:5b:41:40:3c:3e:91:d8:ac:f2:a7:f7:2c:53:
                    e0:59:8e:a0:6d:81:3c:d2:fc:3d:0a:1f:cf:81:75:
                    12:b4:db:af:2f:a1:83:02:8e:e4:e5:7d:e9:fe:44:
                    50:bc:3f:3d:0d:7e:c8:5b:0b:10:94:df:e5:cb:4f:
                    0d:30:2f:5e:e7:e1:12:75:eb:3c:8c:c3:b6:aa:0a:
                    d2:45:3d:20:16:4c:22:e8:11:b4:1f:82:37:b7:dc:
                    8f:13:6e:4c:63:fe:97:52:2a:ef:4b:fb:6c:6a:60:
                    95:24:dc:a7:76:0e:1a:e0:05:b7:a3:fc:3f:6c:b5:
                    ec:52:8a:41:24:f3:26:68:6a:06:39:09:e5:94:59:
                    54:65:7d:dd:fd:9a:30:32:ee:4e:f5:4f:3b:c3:74:
                    aa:a6:81:a1:d7:22:f7:6a:e1:92:e5:36:b3:c4:b8:
                    d1:e4:d2:78:d2:6f:dd:6f:81:5b:ef:8c:af:f3:15:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C7:8F:64:9C:2B:A2:5A:CA:C1:20:FD:E2:94:F4:0B:BC:F4:D0:9C
            X509v3 Authority Key Identifier:
                keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:85:3d:68:41:2c:66:de:d3:51:87:4f:1b:8b:92:8a:5c:
         3a:a2:2b:f7:9a:c5:5d:05:c6:4d:fe:8f:1f:9b:10:1a:98:a0:
         28:db:1e:77:00:23:13:d8:de:b4:26:a6:54:14:51:2d:2c:b8:
         1b:4a:82:c4:a7:18:63:9d:e4:24:82:95:70:8c:d6:36:94:b7:
         bb:f8:70:64:71:2a:3c:78:33:55:b1:41:4a:73:e3:f8:45:1f:
         67:8d:c0:00:d1:c6:eb:bf:04:57:20:fb:36:fb:9d:ad:6e:d7:
         1e:88:f5:fe:64:c7:5f:4b:e6:c1:ac:d5:7b:05:03:4a:32:68:
         a0:ec:fb:b4:56:d0:63:93:69:65:b0:0b:1b:88:db:69:79:7d:
         85:8f:00:d2:cc:5f:4d:98:18:af:73:2c:be:11:b8:1f:f9:2f:
         07:cf:e7:89:74:27:aa:d8:44:18:f1:88:2f:d2:8c:ce:a0:97:
         45:a7:17:57:f3:5a:6f:a4:7f:f8:6f:4e:bb:ce:f4:80:90:1e:
         06:78:f5:cd:3c:f4:83:9b:e8:69:38:96:54:f1:e9:4f:d4:c0:
         4c:40:06:08:dd:1b:3a:22:11:30:12:a3:0e:eb:8b:d6:73:67:
         cd:dd:d6:02:75:a7:28:bf:e4:07:f2:ee:a0:6b:57:65:e6:a6:
         3f:93:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:52 2025 by rpki-client