Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File:                     fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier:          VKUtibUZnKvF7m65zStvmfw4gViwUcVJF5EMC0s0KbA=
Subject key identifier:   48:D8:84:74:45:92:2C:75:E4:44:30:78:78:62:68:B1:1C:85:EA:3B
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer:       /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial:       0199FC8F4B1E43BCFB2DC5B4E8636E08B079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number:          06D5
Signing time:             Sun 19 Oct 2025 13:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:13 +0000
Files and hashes:         1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: hVmpxAKOoW14maY0vUJjXrvxMmyX73iCO2aQAf6IhAQ=)
                          2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:4b:1e:43:bc:fb:2d:c5:b4:e8:63:6e:08:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
        Validity
            Not Before: Oct 19 13:01:13 2025 GMT
            Not After : Oct 20 13:01:13 2025 GMT
        Subject: CN=48d8847445922c75e4443078786268b11c85ea3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:f7:c7:18:14:ab:85:34:98:1e:d7:8e:4a:
                    dc:d9:11:fb:21:92:2e:c9:4a:ca:60:97:39:fd:ee:
                    5f:ea:c5:49:21:e9:e3:30:d9:59:e1:88:7c:7d:5e:
                    c3:89:46:33:3b:15:6d:7a:dd:73:07:45:0b:a1:cc:
                    21:c1:8a:31:b9:0c:92:69:7e:6a:5c:eb:a3:62:b9:
                    90:30:91:71:3c:d7:b0:1d:e4:af:b4:53:72:df:88:
                    e0:fb:70:00:db:d9:5d:c8:0f:53:fb:4d:dd:8d:9b:
                    c4:bd:cf:69:f9:9a:1c:bb:81:7c:a0:a9:64:49:b7:
                    11:75:47:93:27:57:b4:c9:fc:66:36:0e:43:fe:26:
                    b8:b7:50:8b:57:9f:f4:36:84:4b:3a:a9:38:3c:01:
                    d0:c9:8e:6f:0e:07:3a:41:63:f6:85:87:76:ee:a5:
                    0b:9c:00:2c:70:a0:a0:c4:48:8a:82:1c:bf:7f:de:
                    ab:26:a1:39:9a:19:e3:05:03:41:5d:22:b0:62:ba:
                    e8:b9:6f:a0:78:6d:7e:73:24:4f:a7:fd:8a:cf:96:
                    cd:81:f9:8b:ca:54:bd:d4:bf:2f:9b:86:f6:94:f1:
                    42:ed:db:2d:40:99:7a:0e:63:fe:2b:a3:ab:23:8c:
                    d9:de:d0:92:56:99:e4:9c:b3:ff:1b:6c:af:93:4f:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:84:74:45:92:2C:75:E4:44:30:78:78:62:68:B1:1C:85:EA:3B
            X509v3 Authority Key Identifier:
                keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:35:53:30:d1:26:7a:03:b6:4b:e4:73:e1:ca:df:6e:8d:
         01:16:ef:be:15:43:8e:bb:db:86:0e:1b:cb:5f:7f:5f:f0:90:
         ec:4e:47:89:dd:73:ca:ef:20:98:f5:92:e9:26:20:83:94:d5:
         23:8d:34:13:a9:07:ed:d1:d5:c7:16:93:f5:e3:9a:e5:85:81:
         3e:5e:c4:61:06:8a:6d:e3:1b:a2:62:8c:68:e8:a5:7d:d0:92:
         00:c0:bb:20:51:4d:e2:e6:ba:89:99:66:5d:f2:54:2f:bb:8b:
         49:6c:41:d7:20:c0:22:e9:24:a1:99:0e:74:76:a2:b6:c6:f9:
         a3:b2:92:4f:cf:87:b5:06:a6:10:eb:ce:33:b9:b8:07:97:a9:
         f8:84:e9:09:f6:6f:28:26:f4:c0:fd:cb:08:c7:0e:7e:4c:c2:
         c4:54:e0:01:41:d0:f4:d7:b0:b6:9d:fc:ce:1f:0b:4f:ee:52:
         1d:63:ba:4a:e7:85:66:2b:e7:f3:6f:49:75:1a:72:a1:a8:43:
         68:62:91:ed:4d:78:7f:19:9d:ef:f4:6b:c5:4b:8a:52:20:af:
         37:2d:fb:28:a4:c1:29:3b:e2:2e:bb:67:68:dc:a7:bd:b0:fd:
         e9:2b:79:1e:28:12:23:4b:bc:c3:df:1d:d7:7a:a1:50:c8:15:
         ee:2c:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:35 2025 by rpki-client