Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          wCEa0etmeXpPF22919AaKiZAmPFpwFgK/1kXSgUBAfU=
Subject key identifier:   4A:DF:23:D9:D1:B0:AB:19:E2:28:09:95:81:9C:91:D6:FB:6A:3F:77
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       0199FAD7EFAA61592696B35B7CD90A6E053F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          109F
Signing time:             Sun 19 Oct 2025 05:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:19 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: aTZ7XY+Bjp41vZXf3vVNFXbC/jUPqeWsafpg4ro2/ms=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ef:aa:61:59:26:96:b3:5b:7c:d9:0a:6e:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Oct 19 05:01:19 2025 GMT
            Not After : Oct 20 05:01:19 2025 GMT
        Subject: CN=4adf23d9d1b0ab19e2280995819c91d6fb6a3f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:35:be:e1:c3:17:ca:2a:03:9c:7c:ed:a3:
                    b6:54:c9:ba:33:6b:a2:10:c6:9d:bf:ea:cc:07:c0:
                    c4:06:61:d5:88:54:56:dd:36:1b:5f:fa:35:96:6f:
                    2a:ed:c1:a6:9c:43:07:4c:cb:8e:2a:96:72:6d:68:
                    7a:6e:81:a7:52:1f:54:3d:6a:05:e9:db:a2:0b:cb:
                    39:71:d8:6b:f9:a8:9b:03:2f:09:31:0b:a1:0f:9e:
                    fb:d5:4a:f1:01:4d:5b:ee:7a:76:66:34:6b:07:a8:
                    fb:6f:c0:47:90:62:15:39:8b:c9:16:38:c4:2a:93:
                    8d:02:26:c7:b9:09:08:9d:05:ad:da:cc:ad:11:20:
                    d2:dc:3b:1c:c9:e1:f4:dd:79:7b:36:28:77:3a:0c:
                    a2:ef:da:ce:92:b1:07:ca:22:1b:55:f7:fc:12:49:
                    a0:31:53:5d:a0:a9:32:68:46:cf:fc:c3:2e:0e:28:
                    d7:e4:d2:c9:f0:4f:1a:41:3c:a0:24:f1:71:7b:28:
                    f7:a5:62:cb:f9:63:da:3b:be:b9:3a:ad:ab:b9:7e:
                    d7:e9:37:69:55:f2:73:d9:3c:4c:e1:bd:fb:9a:56:
                    e3:4b:b0:9c:8c:c2:d0:80:2b:e9:e0:d1:b8:8a:fc:
                    f4:5e:9f:48:17:65:d9:cd:d3:65:21:86:02:a4:fb:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:23:D9:D1:B0:AB:19:E2:28:09:95:81:9C:91:D6:FB:6A:3F:77
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:96:d5:1d:e5:ff:dd:8f:7b:84:3b:43:e2:0a:49:e6:72:
         87:d5:6f:fc:51:65:36:1e:c6:0e:2a:40:cb:b4:49:93:c9:b7:
         32:c1:e3:0c:7d:13:6b:1c:5e:51:65:70:4b:13:5d:7d:69:97:
         59:c0:86:6b:6d:b3:89:da:b1:48:88:66:f3:dd:d7:de:0a:6e:
         ee:62:1a:ff:7d:17:31:6f:5e:3b:5e:e3:4e:a1:f8:7b:9f:bb:
         23:06:7b:02:b6:5b:ac:0f:a1:28:9d:06:29:c3:69:a9:12:b8:
         56:9b:4b:83:cf:5e:5a:55:0c:c0:23:9d:af:bf:63:f1:8b:b2:
         cf:72:d0:0a:b4:da:9c:98:38:96:1e:a6:87:40:d4:8e:90:da:
         11:0f:22:24:f3:c3:3a:08:05:0d:32:cb:8b:a1:2d:3d:a2:84:
         bf:c6:33:fe:a6:42:b4:97:60:6f:96:94:97:b3:5d:f4:95:c7:
         80:d6:ae:d7:e0:20:ce:95:b7:d9:9f:26:f5:76:da:11:37:f6:
         19:ec:a3:c9:c1:70:3d:62:c4:fe:cb:84:99:c3:6d:5c:22:b6:
         f5:ff:78:40:0e:8f:b1:42:a6:59:e4:57:04:38:d6:d8:1c:a3:
         28:46:e1:4b:cf:c5:7e:0e:e4:aa:5d:bc:5b:2a:12:b3:77:2b:
         ef:3c:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:12 2025 by rpki-client