Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File:                     poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier:          Y+Lbw1EGFc077X2gCJvTOyfGcWoPNYxwPiQLCzOIKSo=
Subject key identifier:   CE:19:89:50:5C:E6:67:7B:C7:50:05:F7:CD:96:B7:20:38:D6:89:AF
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer:       /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial:       0199FE101883E7EA08509CD5707998672DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number:          0326
Signing time:             Sun 19 Oct 2025 20:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:31 +0000
Files and hashes:         1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
                          2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: vq367iQQs/3pSarYeetiNsQqFglCEwuS7dK3mwIAvVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:18:83:e7:ea:08:50:9c:d5:70:79:98:67:2d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
        Validity
            Not Before: Oct 19 20:01:31 2025 GMT
            Not After : Oct 20 20:01:31 2025 GMT
        Subject: CN=ce1989505ce6677bc75005f7cd96b72038d689af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:ad:ca:e8:2b:ad:f9:50:95:8b:98:7b:2f:
                    74:b9:1b:a5:c9:bf:06:05:5c:0a:1a:a8:48:dc:a0:
                    26:b3:44:52:e4:e1:35:3e:62:9d:fd:2a:01:63:c4:
                    56:c0:a8:7a:b2:37:57:99:d5:f4:a2:cf:cf:a6:38:
                    7e:3f:3a:99:67:3d:f3:dc:8b:c7:8c:1f:79:f9:e6:
                    ad:bb:61:dd:53:31:5e:bd:7f:01:20:a0:cc:19:24:
                    9a:db:23:69:76:7c:06:66:29:7f:56:c5:66:4f:19:
                    07:8a:b3:e1:6c:85:61:b5:24:ac:28:6d:8f:d8:ee:
                    f7:6d:4c:4d:d6:86:0c:b1:f4:a3:5c:ea:1a:f8:88:
                    08:1d:cc:80:37:fa:e6:e9:8c:0d:f8:64:28:05:1a:
                    0c:66:e5:55:13:5a:df:e4:84:18:b8:2a:23:c6:25:
                    d4:06:30:0a:33:7d:9b:27:b0:33:47:fe:14:bf:0c:
                    b8:ac:54:6f:db:ba:51:a4:df:f5:de:25:e4:2d:d7:
                    6e:19:97:52:ae:36:ca:6e:af:e6:12:d4:8b:c1:ea:
                    9d:69:92:2b:db:f3:50:58:a1:9b:2f:94:12:0c:03:
                    a0:b0:c3:89:9f:3f:5c:23:db:7b:44:76:34:9a:31:
                    ed:14:7f:97:2e:40:ae:20:d9:ce:2c:bc:bd:f9:2d:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:19:89:50:5C:E6:67:7B:C7:50:05:F7:CD:96:B7:20:38:D6:89:AF
            X509v3 Authority Key Identifier:
                keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:1d:97:22:45:52:fe:97:a9:eb:cb:67:cd:f1:33:94:9f:
         d5:ce:90:34:df:80:e8:83:8c:a9:d0:a6:02:11:65:2a:45:6c:
         d5:b9:9a:41:19:45:d9:c1:b2:64:59:b0:5c:9c:3c:83:17:ef:
         d9:69:d0:54:ca:84:7d:c3:10:b2:97:64:f3:43:96:7a:c3:0d:
         1e:26:9c:dd:44:df:1c:6a:a6:47:58:d6:08:ee:8a:31:e4:8e:
         56:fe:27:47:79:f3:15:c1:ee:35:bc:ed:db:00:bf:fc:4b:f0:
         f3:04:6a:92:3a:89:2f:31:aa:99:f0:0d:5f:6f:77:33:a2:34:
         2b:34:73:4b:af:94:00:09:c5:15:de:90:63:74:de:5a:ba:f8:
         7e:10:64:dd:5b:0a:54:4d:1a:22:ef:f3:8d:11:9e:f4:98:8a:
         35:a8:97:2b:89:6d:fa:95:82:14:b1:18:ef:db:b2:e5:ca:67:
         fb:09:10:6c:e7:3d:41:b4:5b:c4:4a:d6:a9:d5:8b:58:f6:a6:
         ba:97:3d:fa:56:ab:de:26:f7:8d:4d:1b:bc:bd:dc:d8:39:1d:
         21:c8:40:5c:08:f3:28:81:63:a8:44:92:14:19:eb:48:3d:d4:
         13:6a:f0:63:f0:8f:54:fe:ce:07:8c:79:04:0f:82:9a:26:b2:
         f1:c8:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:02 2025 by rpki-client