Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File:                     sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier:          ZOjc6G1Ml7RLFRzbyLU/MTs1IJwWYyrz0d6O2bWwD/Y=
Subject key identifier:   D8:03:6B:F3:C1:76:8E:48:13:8B:08:7C:25:34:46:48:FD:5C:32:CA
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       0199FC8F9D221D07C360C6CAF0B235BE9A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number:          07A6
Signing time:             Sun 19 Oct 2025 13:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:34 +0000
Files and hashes:         1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=)
                          2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: 54W3CJUfFBLdoOLKxA6hcE8zOXqNzutleuQt1lnDEac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:9d:22:1d:07:c3:60:c6:ca:f0:b2:35:be:9a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Oct 19 13:01:34 2025 GMT
            Not After : Oct 20 13:01:34 2025 GMT
        Subject: CN=d8036bf3c1768e48138b087c25344648fd5c32ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:d9:ab:63:44:4e:44:d5:38:8c:db:5c:be:
                    f6:61:25:1f:2a:96:e8:3e:e7:aa:7b:a6:e6:50:15:
                    47:71:01:7d:d9:bd:52:af:09:e2:7e:74:72:4b:4b:
                    08:1d:3d:16:11:99:5d:f8:58:be:67:54:50:11:8a:
                    de:18:f0:8a:b9:27:b0:b9:56:90:fa:d7:da:33:09:
                    ad:da:f2:f4:80:a1:5e:24:68:d9:70:db:f3:69:b8:
                    ab:5a:cc:ef:c8:8c:24:d6:77:20:7f:88:61:3a:4d:
                    db:6c:42:1e:d4:db:8e:b1:a7:c7:b0:97:e0:90:9d:
                    b7:71:f8:b1:ab:99:54:b8:20:83:33:e0:ed:a7:80:
                    a7:60:fd:ec:d5:51:a2:70:96:10:df:7b:f9:35:81:
                    7b:f8:3b:32:bc:ab:70:a8:03:e7:16:b4:61:35:bb:
                    7a:ff:7a:4d:b1:0f:cf:56:91:6e:ba:0c:e1:cf:f5:
                    ed:fa:c2:37:31:35:d3:49:c8:ef:55:d0:4f:17:42:
                    c8:40:d6:c2:4f:10:bc:4d:5c:8c:e9:61:9d:ce:7d:
                    d1:62:2b:c2:f6:ca:77:c1:4c:be:39:96:a3:11:21:
                    ff:77:d3:a4:01:b3:47:94:09:92:50:e3:20:1f:3e:
                    50:52:f6:93:8b:8e:d7:fe:1b:d8:f2:6c:53:53:5f:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:6B:F3:C1:76:8E:48:13:8B:08:7C:25:34:46:48:FD:5C:32:CA
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:4d:d9:01:fa:33:69:db:6f:59:9e:50:0f:4e:ae:36:c3:
         c5:b4:6b:d9:ff:79:a0:38:5f:58:d7:d3:48:77:b0:0a:43:c6:
         55:a2:a2:a5:19:3a:2b:60:87:5c:95:a1:8a:cd:74:82:e6:be:
         a7:7f:62:c9:20:50:8b:47:f5:dd:8e:48:f3:5d:77:fb:a3:36:
         c1:32:f7:db:08:f0:8d:74:83:5c:01:3e:4e:b9:d0:33:15:10:
         9a:b3:a3:04:6b:e5:b5:c5:3e:b1:cb:a4:73:03:13:3c:9f:79:
         77:c1:75:a4:d5:aa:58:2d:76:7e:0e:8a:03:cd:93:c3:af:85:
         f9:b6:aa:fb:05:05:c3:ea:6f:cc:25:9e:af:6a:86:be:bc:b9:
         c0:72:eb:a0:21:2c:f1:a9:e6:bd:92:50:52:60:10:65:33:d3:
         2b:e9:14:92:3b:3b:cf:1c:3d:fc:42:1b:5f:c8:3a:14:ee:22:
         43:ac:74:1c:12:66:32:f2:97:51:57:02:49:8d:05:92:5c:2d:
         24:09:9e:27:16:77:c5:49:c9:07:ac:f9:d1:6a:34:30:3f:4f:
         f1:5e:ef:f1:5a:3c:cf:9f:b8:d3:72:8b:20:47:75:a1:2b:9f:
         4d:9b:d8:b2:48:c1:7a:86:b6:27:19:56:7b:7f:20:a0:ae:32:
         15:bb:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:26 2025 by rpki-client