Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File:                     sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier:          0U/MyfhG42osvU4fyOE3PaXk4kdKvxhSHQXUcAgvsZk=
Subject key identifier:   AC:EE:9F:EF:42:09:0C:67:5C:9F:DA:94:00:A6:42:3A:93:83:B2:6D
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer:       /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial:       019A02C79CAFFBC3E4DC8C0F76CF23787F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number:          1679
Signing time:             Mon 20 Oct 2025 18:00:27 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:27 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:27 +0000
Files and hashes:         1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=)
                          2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: enj4WjHDR3q2GmbQDHpi0QZyd7Jl9+ZgulnoKVMUnQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:9c:af:fb:c3:e4:dc:8c:0f:76:cf:23:78:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
        Validity
            Not Before: Oct 20 18:00:27 2025 GMT
            Not After : Oct 21 18:00:27 2025 GMT
        Subject: CN=acee9fef42090c675c9fda9400a6423a9383b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:bb:17:69:bd:fd:14:e6:a8:eb:03:1d:55:
                    34:0d:5c:c7:bf:9c:dd:9a:b6:fe:68:5c:6e:4f:f7:
                    3b:31:32:0e:b6:6e:05:09:c2:05:7f:74:55:ea:e2:
                    55:4c:c9:6f:eb:d7:0b:34:f8:c3:71:b3:e9:c9:c6:
                    66:cf:fd:10:47:8b:39:be:39:f1:80:49:17:26:80:
                    b9:ed:69:4b:e0:e0:7d:45:2b:0b:7d:31:2b:d7:c3:
                    b4:63:29:ec:9a:67:02:9a:ae:7f:25:e9:dc:b9:53:
                    c1:45:87:a1:bb:c3:04:57:fc:bf:1b:08:92:15:c6:
                    e8:3f:7e:15:20:6b:e4:9d:bc:1e:f7:bc:bd:f5:58:
                    e9:19:d6:96:1d:84:9e:e8:d2:ed:17:a3:8c:c2:b4:
                    4a:17:b3:cd:f4:af:4e:ab:29:71:a8:57:7c:2a:49:
                    36:3a:7d:79:a7:b2:1f:ab:ca:4d:d7:1e:90:e8:e0:
                    98:94:16:70:07:d8:48:73:5f:a0:c3:9e:b0:73:ad:
                    2b:ee:fa:2c:c7:f7:5f:1d:17:a0:bc:0b:98:fa:98:
                    e0:8f:e0:46:16:e2:21:dc:3d:7c:61:c8:6e:78:d3:
                    eb:d5:cd:fe:ee:66:69:a4:77:f9:9f:cc:cc:f2:ef:
                    35:ae:64:b4:26:27:6e:bf:fe:8b:89:db:83:36:be:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:9F:EF:42:09:0C:67:5C:9F:DA:94:00:A6:42:3A:93:83:B2:6D
            X509v3 Authority Key Identifier:
                keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:4c:21:18:ee:35:15:a4:75:7d:75:c6:f7:8f:c4:41:35:
         4d:3f:c2:e5:de:07:99:0f:06:3f:16:84:4a:ab:9c:00:14:04:
         ce:b8:34:47:af:9a:d3:34:1b:32:f2:28:0f:92:cb:a2:bd:4d:
         59:2d:19:c5:aa:6d:46:31:34:ba:82:f9:a8:27:59:8e:e7:13:
         ca:7d:3f:2a:d3:3d:03:0d:a6:22:35:19:6c:79:b8:57:21:b0:
         54:61:fa:1f:3f:e7:d0:10:f2:29:77:52:d2:26:6a:6a:da:7f:
         cd:a5:c5:d3:b7:9f:58:1c:8e:15:00:9b:5e:eb:8e:64:48:3e:
         50:1d:75:63:3e:95:dc:09:e4:81:44:28:72:80:67:a1:63:39:
         44:ef:4e:74:84:de:80:26:5c:5d:81:99:7c:dd:bd:21:d2:70:
         a8:8e:e2:00:dd:3d:b9:9a:22:f6:bf:78:48:be:17:ed:c4:c8:
         03:c2:a7:9f:f3:4b:55:ec:a3:10:29:36:cc:63:c7:24:98:8a:
         96:dc:d7:2d:54:75:56:50:11:68:14:96:d2:af:37:d4:95:bf:
         a5:d4:51:4a:4c:ce:94:71:b5:25:2a:43:51:b3:54:0a:51:19:
         98:cc:22:71:ba:0a:eb:8a:aa:5d:79:23:ad:0b:59:e5:3a:46:
         e9:f1:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:50 2025 by rpki-client