Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File:                     1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier:          wHnH+FN6BNPWwrsIh4ucfkzYzlwZKvP4ACrOpP4/FW4=
Subject key identifier:   EE:66:88:4F:2C:9A:6B:33:06:B2:DB:6F:0C:8D:0D:59:9E:32:BD:D7
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer:       /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial:       0199FD6AFC055A945F1D2C6299EE09ED4134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number:          09B0
Signing time:             Sun 19 Oct 2025 17:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:10 +0000
Files and hashes:         1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
                          2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: PKqNqRC2JOHcWRpgM2te+/ePcTjo6alFJO9w75zv89A=)
                          3: 9Q9cRSrqO0gGZAuxW3CcT54BmRw.roa (hash: xBLy6u0/M+XEaIsdpfHtNWSuIplbcblmlQJP4tu98tI=)
                          4: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
                          5: Fp3Bc4KlexjPquIQYqHT2u4idYY.roa (hash: FBIjAIhPWNb74EivXlWLk+ANKo/lf5tCnraIq5V/Hkk=)
                          6: Ocy8B8GYPCZGmS9JKWpHx-7xVE0.roa (hash: OAvrh5o6OA/RrTaG3tWg2tqIxQuUrrMi/BaxLjPughU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:fc:05:5a:94:5f:1d:2c:62:99:ee:09:ed:41:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
        Validity
            Not Before: Oct 19 17:01:10 2025 GMT
            Not After : Oct 20 17:01:10 2025 GMT
        Subject: CN=ee66884f2c9a6b3306b2db6f0c8d0d599e32bdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:6f:c8:8d:55:b2:a4:5c:de:34:db:38:fc:
                    09:a6:24:1a:6c:25:5d:28:b0:3a:6d:8f:fd:cc:e2:
                    57:ae:df:39:62:3c:b2:01:7f:6f:3d:ff:a2:d0:13:
                    a4:fd:ff:49:89:db:ef:70:83:c1:8d:a1:ee:ff:4c:
                    1b:08:06:86:7f:f3:df:6d:b6:ab:24:d1:7b:64:ba:
                    bc:ed:d6:21:dc:96:14:69:ea:03:87:63:84:d0:e5:
                    c6:7a:60:66:9d:41:03:b8:16:b2:3b:74:f6:3f:7d:
                    bd:4e:f9:30:29:84:20:70:67:c5:23:0f:73:8e:31:
                    33:74:66:51:24:27:1e:30:0c:b4:4f:56:b9:1a:3c:
                    cb:b9:7c:d1:7b:2b:12:d5:e9:d0:9e:74:a3:7d:06:
                    7e:f4:93:97:c4:2c:8b:61:14:af:d9:b5:1c:8d:f4:
                    5b:dd:98:4a:28:c6:65:80:ea:56:a8:cb:71:10:60:
                    2c:e6:ad:09:b1:a9:ac:9c:c7:9e:30:e6:0f:e9:33:
                    45:0b:39:58:80:a9:09:f8:ef:a7:ff:b3:66:60:b6:
                    d9:6b:8f:73:8c:e9:40:5e:55:67:19:ce:a8:0d:c7:
                    20:cd:c1:bd:14:72:ea:ee:d7:b9:d0:d2:f6:5d:7e:
                    0b:65:ce:c8:33:6e:cd:e5:8f:9a:cc:3c:fe:ec:ad:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:66:88:4F:2C:9A:6B:33:06:B2:DB:6F:0C:8D:0D:59:9E:32:BD:D7
            X509v3 Authority Key Identifier:
                keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:f3:e0:92:8d:91:64:f6:2b:48:ee:b9:55:94:5a:55:0f:
         d6:16:f2:e3:78:86:40:db:65:fd:4e:ed:12:03:97:05:7a:40:
         e1:0e:0f:83:3f:09:b0:3a:85:69:7d:81:48:35:93:c2:b5:cf:
         0e:a0:83:15:6b:f7:71:04:83:d9:d6:92:9d:b5:cf:d0:d9:dc:
         04:0c:1e:42:a7:d8:a5:9a:e7:91:e3:39:44:65:19:76:30:93:
         c5:9f:2e:7a:b2:f1:b5:67:44:44:5c:62:e3:ae:aa:1c:47:07:
         82:f2:48:99:f4:ac:c9:6f:d7:9f:2c:58:5f:a4:69:06:2e:4d:
         64:b9:3b:f2:25:49:2d:be:9e:5a:06:17:db:c9:7f:27:17:d6:
         0b:d6:92:73:15:af:7a:37:37:fc:c2:b2:08:a4:d8:c9:6c:c5:
         f5:9f:42:b5:28:a3:26:51:c9:ab:16:27:83:4d:2c:2c:85:ee:
         55:2d:8f:6d:c3:0c:29:b2:4a:83:bd:74:1b:ad:dc:27:46:a4:
         04:ab:d1:1f:5e:6b:cf:e0:03:bd:f6:aa:11:87:1e:9f:1a:b9:
         54:aa:89:fa:ce:95:4f:c6:4f:a4:12:82:92:88:04:e7:6d:a4:
         de:18:df:fc:26:cf:ea:b1:92:36:c6:d0:68:6a:e1:ae:27:d8:
         1f:0a:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:55 2025 by rpki-client