Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          zmU4p722caSfW8F34jKzhR0vLFC84SVDgFuXpNiHPE0=
Subject key identifier:   A7:BE:C8:A4:27:EB:CC:7B:05:84:AD:CE:75:55:C6:15:D4:D2:30:1C
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       0199FE7E06120629CFE7FE37B650520E4F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1704
Signing time:             Sun 19 Oct 2025 22:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:35 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: wbnv/AYSTEfbp28sLzHzD9ZUaVM1bAkA+0ZaNDMKyuI=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:06:12:06:29:cf:e7:fe:37:b6:50:52:0e:4f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Oct 19 22:01:35 2025 GMT
            Not After : Oct 20 22:01:35 2025 GMT
        Subject: CN=a7bec8a427ebcc7b0584adce7555c615d4d2301c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:b5:c6:8e:f2:be:63:52:f4:dc:8f:0b:cb:
                    20:dc:d6:67:75:ac:e3:4b:33:ef:40:ff:d9:65:be:
                    0a:c1:c1:5e:81:3c:31:03:d3:62:97:aa:a5:be:23:
                    5d:72:fa:a1:d7:8f:1c:ff:e7:4e:a6:c7:01:2b:ae:
                    ba:e5:64:68:3e:38:e6:d8:d2:c6:d2:f7:ba:44:ff:
                    5e:76:0d:25:3e:db:3a:10:67:e0:ac:54:f7:3f:8d:
                    73:40:36:23:5f:cb:50:a5:66:fd:0e:da:8d:e0:01:
                    45:77:c2:e5:df:cc:82:2e:6e:99:89:19:6e:70:30:
                    42:53:9b:66:aa:cd:e4:09:96:49:fc:fa:be:59:62:
                    c9:7c:eb:dc:af:be:70:d8:1f:29:30:bd:52:5e:17:
                    81:21:d0:c7:ab:a1:f9:26:1a:30:6e:cc:4f:37:9c:
                    1a:c9:7f:5e:13:9d:c4:94:bb:f4:a0:81:e4:2f:32:
                    fb:48:20:5f:bb:c4:2e:e1:3a:51:65:87:7e:82:ca:
                    6a:74:fc:1a:c6:89:50:99:6e:ea:ed:44:e2:1b:c9:
                    e9:6a:88:66:5a:bd:da:7e:f8:91:da:b4:4c:5b:ba:
                    30:37:a3:a3:48:c1:02:4c:e7:ad:60:8a:0e:b6:cb:
                    6a:3e:2a:85:89:04:80:c9:39:ab:00:f1:24:ac:29:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:C8:A4:27:EB:CC:7B:05:84:AD:CE:75:55:C6:15:D4:D2:30:1C
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:48:fd:1c:20:36:c3:0c:2e:4e:62:ab:14:aa:e1:94:f6:51:
         a9:5e:7c:e5:71:ca:0a:e5:9a:fb:6c:eb:b9:bc:f4:73:0c:f9:
         c1:ae:31:25:19:17:5c:44:cd:79:83:4e:7c:e4:42:c3:e3:b1:
         bc:f7:f3:48:2a:10:9f:70:a6:db:b8:7d:ea:4e:b5:a9:e5:2e:
         93:81:78:78:26:8f:d2:7d:c0:55:9e:0c:d7:f5:ab:42:5d:74:
         04:53:f0:02:5a:e3:52:31:10:6d:84:d3:35:71:95:05:ef:8b:
         43:e6:b6:3e:1e:a7:71:f3:1d:d3:67:53:4b:c7:23:45:a9:c0:
         2e:b1:ff:f5:4e:a9:32:9e:50:12:00:03:6e:ba:ac:d3:a8:df:
         3a:45:35:38:54:8d:ad:56:50:07:8f:05:99:e0:72:8c:b4:9f:
         15:97:4c:38:8f:dc:75:ff:eb:de:43:32:cd:b3:36:ed:d1:00:
         1c:dc:af:5b:f6:7c:3c:d6:99:76:54:38:db:bf:7a:59:2f:a6:
         a1:50:b6:05:52:bf:41:fb:9b:64:05:2e:25:5d:88:a9:73:9d:
         f4:85:e7:3e:71:2a:8e:a9:1d:1f:5f:b8:da:ee:27:13:60:ab:
         1f:39:71:ce:36:f1:91:a1:e5:4f:32:70:44:ef:92:b9:08:3e:
         6a:0d:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:28 2025 by rpki-client