Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          dvCGRfgWrG39Xxte9Y8OrznBXHC8p1BHfTMoNbQ6vIM=
Subject key identifier:   F0:95:48:43:1C:5A:79:A1:88:F0:38:08:56:AE:10:CA:96:96:E7:1F
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       0199FEB4809ADB5F9AC97E41718E7147332A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          0643
Signing time:             Sun 19 Oct 2025 23:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:06 +0000
Files and hashes:         1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=)
                          2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
                          3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: V+UBgX45YaeyfRDxy9/yO6LYay0zzcGAorsGdNh+nI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:80:9a:db:5f:9a:c9:7e:41:71:8e:71:47:33:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Oct 19 23:01:06 2025 GMT
            Not After : Oct 20 23:01:06 2025 GMT
        Subject: CN=f09548431c5a79a188f0380856ae10ca9696e71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:a7:21:6a:d4:c7:9e:75:c3:fd:5d:99:31:
                    3d:13:fb:aa:47:f0:40:34:e5:70:5a:0b:66:da:e5:
                    89:54:a0:86:72:35:81:a1:1f:30:25:99:e5:fe:0a:
                    12:36:0a:e7:c8:9b:89:96:11:42:f5:71:04:24:cf:
                    9e:02:00:32:60:cc:1b:86:56:66:f1:24:55:60:fa:
                    a6:78:3e:ce:1b:34:a7:da:e2:8f:74:62:55:4b:3d:
                    d7:64:ec:49:da:a8:5c:94:12:fa:06:ab:e9:8a:4f:
                    3e:16:11:34:9f:a2:63:95:17:94:b4:30:ae:44:a8:
                    73:46:e9:d4:3e:b7:76:66:ff:c3:f3:57:0b:03:11:
                    27:a6:c5:c6:87:4d:2d:9e:f8:bb:c9:a9:0b:81:d8:
                    e7:a9:c9:be:e1:19:93:3d:0c:22:39:0a:21:5d:44:
                    26:80:d0:e1:cf:21:5d:7d:56:95:13:83:55:51:27:
                    08:a6:25:73:cc:ae:f9:a6:c8:e9:40:16:5e:f4:14:
                    56:90:52:03:82:84:16:79:82:0a:12:e6:54:35:de:
                    c4:bd:94:6d:7f:d7:b5:e0:e2:04:70:e6:32:68:d0:
                    c1:87:44:f8:fb:e1:1b:8e:6a:ed:3a:45:e5:08:a4:
                    40:a7:02:87:4b:4f:6c:6b:55:eb:76:e5:65:8f:ce:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:95:48:43:1C:5A:79:A1:88:F0:38:08:56:AE:10:CA:96:96:E7:1F
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:c4:05:38:e2:8e:00:97:b7:0a:73:cd:59:14:7f:2e:ec:
         04:b1:dc:9e:90:9e:93:f0:6d:8a:76:ab:9d:5c:44:2a:6c:2f:
         32:de:1a:40:37:e4:0c:ac:a1:b6:3d:4e:2a:8b:e6:3d:a2:90:
         43:f3:d7:88:47:53:b3:39:2e:c3:07:8a:9e:bf:8f:28:ea:ac:
         36:ae:ed:39:6a:45:6a:d6:ce:90:49:f6:7a:3b:17:38:4c:9e:
         5d:40:26:95:71:23:00:4b:e6:e4:ea:b2:3d:33:47:05:cc:0b:
         8a:97:24:46:28:f0:ea:b6:13:89:80:f2:dd:e3:c9:48:f4:cb:
         fe:1f:1f:8f:a9:c9:86:21:b3:aa:28:ba:f7:16:79:e7:db:e4:
         05:0d:2e:1f:96:0e:7d:bb:78:56:2c:71:a8:9b:b4:b1:dd:d9:
         8a:94:d7:f0:cf:0b:e4:d7:07:24:bd:8b:c7:fb:72:a2:f5:24:
         b8:bb:3b:7f:e7:3b:da:ee:60:6f:77:06:c3:a6:b1:56:bd:1c:
         46:02:9e:e9:6e:b3:a7:af:50:3f:95:20:9d:8c:96:0e:87:0f:
         2b:71:11:46:3a:40:ff:45:80:fc:42:a1:74:29:76:b9:0f:7b:
         50:a6:e1:d1:f8:a1:31:9a:01:01:17:b0:25:28:d4:da:1f:f2:
         cb:ed:4f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:03 2025 by rpki-client