Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          uhF0H1BBQceHb3INAn3nOzyXr/YLZDb0e1QkDM2j7rY=
Subject key identifier:   F1:BB:53:1B:18:20:00:B5:19:CA:86:79:54:BB:49:18:5C:FE:DF:4F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       019A003526DB310741AC3B6B51CF40BDBDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          172A
Signing time:             Mon 20 Oct 2025 06:01:14 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:14 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:14 +0000
Files and hashes:         1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: ElsGavOFfANwHbsZN47L1nmV1Z57jl7HpywKJP9U/XI=)
                          2: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
                          3: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=)
                          4: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=)
                          5: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=)
                          6: qY49_zMYcxE9KGOl7CqKGZj8a0g.roa (hash: upYiYtciQmGdVVrCv44QY9m5idlwNSvObhkb+ghmQwY=)
                          7: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:26:db:31:07:41:ac:3b:6b:51:cf:40:bd:bd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Oct 20 06:01:14 2025 GMT
            Not After : Oct 21 06:01:14 2025 GMT
        Subject: CN=f1bb531b182000b519ca867954bb49185cfedf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:10:ad:5c:7a:c5:78:a1:24:4e:22:a0:f5:
                    b1:71:92:35:6c:f5:75:5e:28:f5:9c:72:70:71:0c:
                    b8:37:df:7f:94:e3:34:f8:32:08:53:5f:8e:53:d1:
                    e5:3a:bc:1c:4d:7b:28:e7:b9:fa:41:10:fe:6e:18:
                    a9:cf:4f:fc:d1:74:b5:d9:55:74:2f:88:f2:26:b6:
                    ae:b4:d2:7e:12:73:95:0d:b5:a9:6b:c0:c8:15:48:
                    2c:cc:ee:47:c4:ec:48:fe:06:cd:f8:64:52:82:e2:
                    d9:e1:09:c9:28:cb:68:53:46:0f:ec:33:fb:fa:c2:
                    b7:7f:e6:ec:7c:36:c5:61:22:5b:7f:af:3f:77:de:
                    74:cb:08:9e:72:46:ed:78:d0:bb:18:cb:82:99:61:
                    a6:5a:e1:83:b5:cd:b7:79:93:4d:dc:37:33:40:88:
                    ee:bb:b6:6c:40:83:89:9d:51:83:fd:d4:f9:33:4b:
                    fe:1a:80:11:ef:73:19:f4:f6:68:c2:fa:94:a3:22:
                    88:45:7d:ca:d3:a7:1d:f6:47:70:d5:c0:40:8d:43:
                    28:5e:9f:85:1c:0d:a1:57:c0:ef:4a:c4:f9:fb:53:
                    21:81:9e:ea:f2:10:c0:20:cd:d9:57:a6:5f:40:3c:
                    f4:26:89:65:43:bf:8f:8e:24:66:67:74:c7:8f:79:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:53:1B:18:20:00:B5:19:CA:86:79:54:BB:49:18:5C:FE:DF:4F
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:48:3b:f8:c8:88:bc:6f:18:92:c2:1a:58:68:5e:98:76:83:
         38:74:e2:e4:71:8a:02:f2:9f:52:2b:30:ba:32:13:58:03:a7:
         64:20:10:ec:5f:62:47:26:50:cf:fb:25:74:e1:de:82:4a:b1:
         cd:11:e9:55:e8:b2:a0:5d:dd:fc:00:ee:30:f6:25:ca:0e:f7:
         6c:87:33:6a:ad:30:bd:8b:98:b8:61:24:a5:43:dc:bb:75:e5:
         dc:fd:92:4c:b3:ae:0c:2f:ab:0d:8f:62:91:b9:ed:d3:b7:ef:
         10:aa:e8:eb:33:48:3d:9a:c1:c3:bc:2e:cb:58:88:aa:56:76:
         6d:3b:7b:fd:ac:ae:7e:92:8d:a6:ee:73:6c:61:ca:c2:c9:4b:
         35:a8:b9:c9:c1:29:53:f3:38:30:16:63:87:1a:88:12:a9:d7:
         4c:f0:b6:d9:b9:ab:5b:97:af:f9:c4:d2:bc:bf:78:aa:f0:84:
         cb:f2:67:fc:82:6e:f0:e1:ea:b9:05:c1:ad:bd:05:fa:3c:fc:
         6d:bb:19:0d:0d:3b:14:7c:99:a0:48:bf:54:fe:a0:81:fd:fa:
         b0:0b:3c:a3:fd:ae:95:4b:c0:ae:11:dc:a9:29:4c:e8:ae:5b:
         52:6e:c4:35:5c:e8:4d:6d:75:dc:fe:77:6a:a0:7f:f8:7a:37:
         74:99:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:36 2025 by rpki-client