Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          uoH+1gxmv7apj1T+4zHOQlM/7oIL9GmOuybJEdfCXJo=
Subject key identifier:   D3:92:FF:6A:87:3B:8A:86:8E:FA:79:A6:10:0F:A2:25:B1:BC:1E:03
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       0199FF59A4AA1BB2EE1A453C8536AC818A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          065B
Signing time:             Mon 20 Oct 2025 02:01:28 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:28 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:28 +0000
Files and hashes:         1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 05YvQL4nnCxcbR6MT650LuhMmesjJQWWAXHDW+dHQU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:a4:aa:1b:b2:ee:1a:45:3c:85:36:ac:81:8a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Oct 20 02:01:28 2025 GMT
            Not After : Oct 21 02:01:28 2025 GMT
        Subject: CN=d392ff6a873b8a868efa79a6100fa225b1bc1e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:36:26:fa:09:81:6b:54:68:48:28:60:ac:
                    b0:69:86:ec:53:cc:93:cb:ad:ea:45:24:ec:86:b6:
                    30:17:92:f9:11:bf:34:c8:af:b3:f1:9c:9f:b8:da:
                    e6:f8:dc:68:3e:10:16:b7:32:ce:42:d8:64:3e:b0:
                    2b:01:a1:94:c5:98:17:4d:8d:34:6e:e3:8f:d5:35:
                    8c:18:2b:d5:92:03:1a:20:bd:17:0e:d0:6f:61:5e:
                    89:83:8c:ec:8b:7d:12:a1:a8:d7:f7:1a:fa:c3:7a:
                    4b:1a:00:d4:5b:3b:0f:18:ad:50:ae:1e:e9:0a:41:
                    c3:57:d3:ac:59:5e:34:d8:db:f1:d1:d0:a8:08:61:
                    97:47:cf:67:5a:5b:b2:c0:5c:e0:f1:27:ff:7b:f4:
                    b4:10:b9:bd:31:87:6f:20:10:f5:91:f1:0f:26:73:
                    cb:32:ee:8e:f1:6e:78:a5:3c:1e:d4:de:e4:9c:bf:
                    ce:ec:40:19:6c:5e:54:56:4c:97:1b:f3:0c:15:c2:
                    2a:91:1a:b5:80:2a:3e:fb:75:ec:78:3f:25:5c:14:
                    84:4e:84:ae:f9:ea:9d:e3:b9:ab:a9:69:60:09:56:
                    87:2e:df:09:ab:06:fd:ac:a4:58:f7:ae:73:4c:87:
                    c8:38:fa:cf:f6:e8:5a:5a:46:f6:16:bb:0e:52:4b:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:92:FF:6A:87:3B:8A:86:8E:FA:79:A6:10:0F:A2:25:B1:BC:1E:03
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:96:88:e4:a0:c8:c5:0f:ef:ff:77:3a:5a:b2:9b:39:ce:08:
         4b:f0:f0:33:a8:4d:8a:06:82:64:63:a9:50:52:85:90:82:be:
         66:47:00:59:25:05:4d:38:07:5e:1c:63:a2:f7:13:87:79:63:
         af:f1:20:4c:da:67:7d:45:98:80:58:e8:a1:1c:a1:4a:8a:05:
         b5:ae:67:91:c3:9b:5f:5c:c7:78:fe:06:60:39:19:f2:37:10:
         ea:6a:88:ae:e1:cb:81:9b:3b:ff:01:84:aa:da:c9:6b:69:0b:
         76:c3:4d:f2:b2:4d:a6:58:e3:98:bf:e8:34:45:8c:f1:be:20:
         d1:59:c0:89:41:8b:b2:0e:e6:3e:99:9c:9d:b2:60:e7:aa:6a:
         d0:1d:5e:42:42:ac:0a:44:c4:c3:02:79:dd:ba:f6:ca:9f:73:
         2d:63:10:08:6d:77:ca:c3:7e:87:c9:5c:b0:87:20:bc:55:a1:
         12:52:60:37:8f:db:bf:73:b6:d7:63:3c:33:9e:9a:27:13:2e:
         aa:6a:cd:68:4e:04:b6:73:9d:d3:3a:f2:0a:29:db:3d:d2:d0:
         db:fe:dc:15:fb:c1:0e:28:39:eb:3a:72:ed:88:45:f5:6b:1c:
         f5:a3:82:bd:96:f1:1b:41:10:69:ca:3d:e5:53:ca:49:ed:70:
         7d:ad:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:45 2025 by rpki-client