Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          XrjzezA7gKQqneHgOqRLL98ImlHVAJ3BDtWXPnjkkDw=
Subject key identifier:   DF:B9:A3:CE:7B:5A:EB:AF:67:15:AF:53:35:E4:F5:CE:D8:08:0F:30
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       0199FD6B62659F260F2264F35BC1889B17F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          149C
Signing time:             Sun 19 Oct 2025 17:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:37 +0000
Files and hashes:         1: 7V5fsdWWO5ABihTMEZ7pWqmVEAg.roa (hash: sjf02gaMH9qnVq1MImDdr+8L+PTPlTd41f1Dyl1MZ4o=)
                          2: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=)
                          3: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=)
                          4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: NyNjgHen07evOu6hzCym1yjGuMd2GyQhapRQxbJzIec=)
                          5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:62:65:9f:26:0f:22:64:f3:5b:c1:88:9b:17:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Oct 19 17:01:37 2025 GMT
            Not After : Oct 20 17:01:37 2025 GMT
        Subject: CN=dfb9a3ce7b5aebaf6715af5335e4f5ced8080f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:6a:01:2f:56:bd:ef:e9:0e:ce:42:9f:c4:
                    bc:2b:10:b0:a0:e2:d7:8a:57:6d:12:9d:78:b3:26:
                    a7:36:05:57:a7:a8:f0:d0:74:fe:f9:01:ff:b3:5f:
                    d5:6e:5d:a4:24:ea:7c:3e:d3:33:3e:24:32:0e:f1:
                    ff:b1:ff:66:c7:ff:32:ca:1c:7d:b7:d7:c9:fd:ad:
                    b7:96:bf:1e:16:ac:c1:b7:20:4d:d1:bc:db:3a:f3:
                    fe:8d:05:93:a6:5e:c9:7b:22:f2:0a:d1:68:c0:94:
                    62:7a:70:6d:87:aa:46:29:71:1f:4a:53:f0:14:47:
                    e1:c1:6c:fb:13:c8:fd:1c:bb:00:f3:48:69:c1:f5:
                    2a:5d:1d:8f:af:34:72:3f:60:d2:d4:0e:d0:29:af:
                    45:78:d1:48:1c:50:cd:26:e7:b8:6e:1e:93:97:3a:
                    68:58:b0:82:4b:b2:7b:5f:d1:4c:96:22:34:70:bc:
                    d1:18:44:d4:ac:3f:59:43:9f:65:49:b3:f8:81:89:
                    41:3f:84:33:81:f0:d5:cd:e1:fb:c4:57:4c:87:b1:
                    16:06:2c:e0:6e:5b:ae:31:bb:c0:a7:22:b0:58:ec:
                    e5:2c:ab:35:27:c2:80:e3:31:d8:17:54:4a:28:47:
                    36:c5:69:f2:7b:16:3b:6a:4d:b5:ac:f2:45:30:2f:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:A3:CE:7B:5A:EB:AF:67:15:AF:53:35:E4:F5:CE:D8:08:0F:30
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:7b:81:21:91:21:c5:4d:b2:0a:8e:35:54:c0:94:6c:84:
         5c:b1:a2:d5:1d:ef:c4:49:57:81:aa:cc:b1:fd:e0:f3:45:71:
         6e:c0:a8:0c:5c:8f:90:64:94:dc:1f:26:8e:59:98:bd:d3:b9:
         ea:2f:1f:55:fe:97:b0:03:2f:26:71:5e:21:a0:fd:0f:a0:dc:
         dc:4c:83:16:f0:c6:64:94:9f:0f:fc:79:6c:e0:3a:2a:cc:9f:
         b0:4e:05:fa:38:62:5c:c1:13:19:ed:84:2c:70:86:b4:77:63:
         0e:1e:f9:16:ed:6a:81:c4:db:50:ed:bb:76:f3:23:26:e3:73:
         e5:35:e4:8e:05:17:ff:8e:7a:54:c4:8e:ff:41:60:59:15:4a:
         55:76:81:2c:d6:5c:64:9d:a0:d0:33:2b:99:cb:90:96:48:29:
         ca:30:8f:4f:1b:a6:08:30:ec:1d:24:8c:09:cb:29:68:fc:b3:
         9f:2d:fc:96:c3:7e:62:15:d3:ab:9d:15:e4:f4:53:c0:f1:f9:
         b3:ec:8c:8f:f8:59:6f:89:f9:fc:d2:8e:de:43:c1:93:18:10:
         d2:40:df:66:52:77:72:ce:81:65:6f:e9:5b:59:74:bd:11:f2:
         dc:81:37:a7:c0:ae:81:8f:a0:c0:4a:83:19:d8:5c:1d:d6:a3:
         1f:3a:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:12 2025 by rpki-client