Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File:                     z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier:          gSbQgcY+tBtoU7oJOM4a2YckxOZH1slNGH7ciiFVVLM=
Subject key identifier:   E0:1C:FD:62:78:33:00:74:97:4F:17:F2:64:49:76:FC:D6:B8:B1:4B
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer:       /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial:       0199FD346D3D3D5714D84E1C27AC05352924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number:          0E94
Signing time:             Sun 19 Oct 2025 16:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:35 +0000
Files and hashes:         1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
                          2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
                          3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: yEIovXa6fWSjD3L4WyznAKwJ3q2DobZ93gU5iyafpsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:6d:3d:3d:57:14:d8:4e:1c:27:ac:05:35:29:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
        Validity
            Not Before: Oct 19 16:01:35 2025 GMT
            Not After : Oct 20 16:01:35 2025 GMT
        Subject: CN=e01cfd6278330074974f17f2644976fcd6b8b14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:a8:d2:36:3c:04:c0:d2:4e:ec:d2:22:86:
                    b8:38:fc:a9:2b:aa:6f:36:7a:01:bb:9b:df:de:19:
                    41:a9:94:8b:97:60:e3:c2:a5:66:d2:c4:94:08:39:
                    41:7f:2d:24:71:fc:5e:35:ef:5b:c5:1d:47:5d:19:
                    81:a2:90:45:3a:ba:5d:65:bb:23:13:76:41:cd:60:
                    5c:12:88:cb:46:e7:92:ed:03:af:cc:4a:05:34:6b:
                    8c:34:c0:11:a9:a6:be:bc:6e:99:f3:1f:bf:4b:ff:
                    d4:32:e3:74:0e:2f:3c:e2:3a:22:33:cd:dc:ff:72:
                    6d:ce:d9:88:2c:86:d0:6c:27:af:05:09:7b:cd:7f:
                    23:c5:cc:db:8e:f5:99:24:74:c9:29:9d:67:18:43:
                    76:9b:ec:3d:4d:c9:e2:cd:fd:b9:95:b3:3c:12:f4:
                    76:fe:56:01:b9:95:ff:34:f6:61:4a:54:97:dd:d8:
                    2e:04:7b:21:e9:5d:5c:c2:0b:7d:f7:6a:1b:8e:b1:
                    cc:ce:e9:c2:96:06:f0:c1:f3:81:1a:02:51:03:30:
                    f8:fa:4b:e8:ee:a2:9c:5e:fa:87:0f:22:5b:34:d9:
                    e5:3f:c4:ef:2d:b7:de:5a:6e:80:9d:ca:22:43:8b:
                    b4:86:5c:fa:d5:df:51:e6:f3:f9:3c:71:13:19:4c:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:FD:62:78:33:00:74:97:4F:17:F2:64:49:76:FC:D6:B8:B1:4B
            X509v3 Authority Key Identifier:
                keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:f2:c5:d0:31:98:a2:7e:27:97:ba:12:59:a8:08:4e:42:
         4a:3f:95:cd:2d:d4:3a:1b:47:ce:6e:cd:59:01:4b:34:fe:13:
         4e:15:a2:2d:7c:88:f6:7d:c5:52:29:31:e1:95:13:9d:c9:89:
         7e:da:84:62:2b:5e:c2:46:a5:39:49:0a:73:6a:85:6a:84:fe:
         01:f8:35:ef:b6:97:5e:bb:28:e3:cd:b6:88:4d:1b:9b:46:d1:
         0c:1b:0f:59:39:27:7d:58:64:a5:32:41:7c:88:2d:c2:c0:a8:
         4a:03:72:f8:13:6e:b8:f5:8b:b1:c9:04:94:6a:7f:a1:67:b0:
         86:7b:14:45:3d:59:0b:29:24:9b:3a:a2:3e:8b:e6:81:be:34:
         98:96:c6:39:59:8e:53:4d:89:c3:88:a1:f3:e5:a5:c5:62:83:
         94:8d:0e:1b:c1:63:30:b4:5a:ae:d2:ea:28:bf:50:91:0c:17:
         d6:42:24:04:2c:6b:fd:a7:7e:02:2c:89:5a:04:0c:ef:d8:a6:
         d5:6b:52:72:37:3c:ce:49:ba:43:b7:f4:6f:fc:cb:bb:61:66:
         85:99:bc:ec:0d:ab:55:d7:d0:58:31:c5:d4:2c:35:01:38:62:
         2a:5a:fb:ee:d2:c5:f7:9e:0b:f2:65:7f:6b:2b:76:a4:2e:af:
         31:92:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:42 2025 by rpki-client