Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File:                     rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier:          oO6xqjQdj+Vyh/i+iR2JK6lXQJ8t3OFQQ2H98988+Xg=
Subject key identifier:   54:8D:D9:BA:64:93:AA:0C:4A:B6:3F:1C:1C:B7:1C:F7:D9:38:AC:AB
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer:       /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial:       0199FC21BF31C878099707AA7367372B5A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number:          0B31
Signing time:             Sun 19 Oct 2025 11:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:33 +0000
Files and hashes:         1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
                          2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: EOareVuGZEjJ5NyPbqeevYHEPZ7yzdBXHJrLV5aXtp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:bf:31:c8:78:09:97:07:aa:73:67:37:2b:5a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
        Validity
            Not Before: Oct 19 11:01:33 2025 GMT
            Not After : Oct 20 11:01:33 2025 GMT
        Subject: CN=548dd9ba6493aa0c4ab63f1c1cb71cf7d938acab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:bf:fd:86:58:eb:a5:47:ae:c0:c5:6c:c9:
                    22:db:47:70:7e:bd:af:5e:c7:33:19:41:6b:32:46:
                    06:88:a2:85:2f:57:45:e3:df:79:1e:43:81:ac:ef:
                    56:64:a8:c2:e8:16:38:fa:5e:d8:6a:36:34:9c:53:
                    91:3b:2a:ae:c0:85:d1:9c:1c:9d:ab:72:0c:e0:a1:
                    fc:f6:af:63:40:e7:82:3d:39:60:1d:10:47:f3:6f:
                    5e:ef:3b:8f:e0:42:44:f1:69:3b:c6:1f:a6:6f:c8:
                    3b:6d:46:ea:d3:0d:73:4d:87:50:fb:19:32:a2:f2:
                    f5:ae:f1:ae:31:b7:9c:12:a4:91:a1:1c:38:c1:f2:
                    af:d4:11:30:1d:c1:cc:1f:34:19:44:5f:70:81:1e:
                    88:10:00:72:22:9e:a0:ff:36:51:ae:d1:e4:3b:00:
                    0f:7f:f9:ba:cf:b0:a5:47:bb:42:48:24:5a:e0:4a:
                    c5:cc:21:69:7f:6e:6d:2a:07:3d:83:10:88:c2:4a:
                    1f:99:a9:e2:e7:1d:ba:6c:56:6f:1f:70:8f:15:0f:
                    50:0e:5e:94:5f:76:0e:eb:c4:d4:76:08:8a:b4:4a:
                    38:08:ac:0f:d9:5f:70:a9:ea:13:f1:91:c3:a0:e7:
                    09:e0:99:66:c9:e3:b3:4f:d7:a8:b7:0d:3d:b4:a4:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:D9:BA:64:93:AA:0C:4A:B6:3F:1C:1C:B7:1C:F7:D9:38:AC:AB
            X509v3 Authority Key Identifier:
                keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:91:e5:7b:9d:f4:32:27:ff:39:86:be:8c:bb:47:0e:41:e1:
         5d:a2:b8:f2:9b:e0:b2:3d:0e:1b:69:5d:c9:b7:34:22:9c:0a:
         8c:57:26:e5:61:1b:02:67:7c:55:3a:6f:a6:bc:97:da:3e:b7:
         78:51:bf:db:3c:df:31:01:07:a8:cb:37:ca:a8:98:51:00:14:
         55:40:ca:b2:dc:53:92:17:e6:4f:a9:32:71:b1:7e:9e:4e:3c:
         bf:33:60:65:60:4c:4c:b6:e5:4f:cf:36:f0:48:c1:ad:65:7e:
         1a:64:fd:4d:73:24:60:67:26:65:0c:a4:40:eb:f6:45:27:38:
         96:f9:c3:ba:ac:75:00:b1:e9:6a:1c:d3:85:84:7c:03:8b:8d:
         f0:59:5c:7b:a4:d5:98:19:15:21:7f:aa:f1:97:3a:5a:d8:a2:
         ca:db:14:e9:9c:73:8d:2e:90:18:d8:43:1e:5b:83:1c:9c:37:
         0f:56:38:a6:90:9e:0a:b5:56:c3:6b:47:04:ef:9d:65:74:f1:
         7f:0e:21:b0:3f:e2:3e:0c:ef:3c:84:66:61:37:24:cd:f2:5c:
         fb:c7:a5:d5:71:61:b8:b8:6b:2d:73:d2:94:c2:74:18:97:20:
         4d:4a:60:37:ea:2a:74:35:03:70:d1:ab:91:3a:e5:bf:57:f1:
         70:ce:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client