Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          u/4hvmSvxnRfO0PZmfTINU9KytvQ3ERE34hit53yceE=
Subject key identifier:   B6:B4:59:EB:D5:77:CD:82:43:24:89:C7:7A:7C:92:30:C8:14:06:68
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       0199FDD998F281F871C0F9158416FE913017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          0AD6
Signing time:             Sun 19 Oct 2025 19:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:59 +0000
Files and hashes:         1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: k98MRk7Xj5+C3v2LA0Yn4654xCNBuavOgi7LUC+GGj0=)
                          2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:98:f2:81:f8:71:c0:f9:15:84:16:fe:91:30:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: Oct 19 19:01:59 2025 GMT
            Not After : Oct 20 19:01:59 2025 GMT
        Subject: CN=b6b459ebd577cd82432489c77a7c9230c8140668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:f6:59:4b:a1:bc:6c:2d:3d:8c:9d:cc:53:
                    7b:27:e1:91:aa:cd:43:49:a9:09:cc:dc:a5:46:e7:
                    d0:bd:78:35:3d:dd:47:f5:b3:c4:8f:d4:cc:35:db:
                    c6:f7:75:5f:c3:0a:d9:92:10:27:b2:ad:ce:64:65:
                    db:c1:89:b9:69:1e:2d:55:78:50:81:53:1e:66:3b:
                    ef:56:5a:76:10:9f:a9:35:2b:37:aa:e9:2d:9c:e4:
                    d3:0b:f3:a9:8e:91:5a:92:22:12:68:bc:cf:fe:a8:
                    ad:f3:25:9e:e6:e3:ff:5e:30:c0:1d:52:a6:f6:12:
                    1d:ec:ba:34:20:a8:ec:41:ae:c3:84:10:1d:27:00:
                    d8:ce:67:0c:2f:0c:16:42:0f:db:a9:45:36:71:c9:
                    53:ff:d3:c7:2f:b7:58:af:61:f2:1c:a4:bc:32:02:
                    dc:7c:4f:6e:3a:ee:a4:3c:5f:4a:0b:48:b8:d2:17:
                    09:62:e9:1b:c5:1e:11:89:45:f2:73:7e:f6:bf:ef:
                    3c:bb:2e:e0:a4:5d:38:fd:cd:f8:67:b9:92:9e:0c:
                    83:f7:ac:3a:43:f3:11:09:91:ea:fa:b6:e4:81:7c:
                    f9:4b:6a:af:da:5c:75:c7:bf:f0:11:c8:f1:6d:38:
                    dd:7b:da:a1:fa:e0:ff:b6:db:84:c2:63:de:83:5a:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:59:EB:D5:77:CD:82:43:24:89:C7:7A:7C:92:30:C8:14:06:68
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:f3:50:3b:de:19:6f:95:b4:cc:11:05:9a:a0:94:c7:35:
         03:6a:a4:53:c0:48:f8:6a:68:3c:19:a3:9a:4c:2f:85:1a:78:
         09:1b:36:60:43:da:0f:dd:0e:5f:d9:c7:e8:2c:84:f9:f3:20:
         cc:dd:76:67:f2:f0:69:77:8e:b0:4d:86:33:5c:5c:19:a8:a3:
         53:a9:05:6e:eb:ff:98:d5:dc:99:e9:97:51:dd:e8:a5:a5:9e:
         fa:7b:76:83:01:6f:cc:86:20:c1:96:79:4a:62:82:89:d2:b5:
         a9:76:27:16:f7:32:d3:aa:0b:ec:8f:55:a4:a0:c8:ef:9d:fe:
         49:ec:87:84:c8:f5:f2:de:56:f2:4c:b4:df:a4:46:e9:ba:e3:
         45:25:a9:e2:f1:8f:f6:ff:0b:93:a8:bd:3c:ff:c6:28:b6:98:
         c5:b9:65:3d:54:07:f4:dd:56:6c:89:d5:e9:24:fb:da:b3:e0:
         35:e7:37:62:86:2f:9c:66:cd:8d:33:d0:82:5a:d1:6f:bd:79:
         84:0f:df:e6:71:2a:fb:f8:b7:67:22:50:74:3f:88:c7:a9:dc:
         6b:8d:dc:a1:9f:46:f4:c7:a3:72:df:2d:b7:16:c3:7c:43:d9:
         52:38:1f:3e:d7:66:4e:2c:7c:c3:b7:9f:a1:b0:18:d0:b2:39:
         5e:d2:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:13 2025 by rpki-client