Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          3kqmV3fud7MbbxO8iLu9IJwRK7yKmAaJC/mjjtFYslQ=
Subject key identifier:   C5:6D:2B:AB:2F:96:0F:8F:04:67:45:E3:CD:D4:CC:10:04:06:4E:B9
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       0199FC5878B94144C2FF2042BE3AAE9FEECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 12:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:20 +0000
Files and hashes:         1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: pgurHDxZ1AjgysKEZu8HN8b/wUPAuZZLb5K6WlBt6cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:78:b9:41:44:c2:ff:20:42:be:3a:ae:9f:ee:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: Oct 19 12:01:20 2025 GMT
            Not After : Oct 20 12:01:20 2025 GMT
        Subject: CN=c56d2bab2f960f8f046745e3cdd4cc1004064eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:1c:62:84:4d:80:9f:a6:af:58:b3:7b:b3:
                    22:9c:dd:0c:c7:94:29:4f:f5:33:62:00:53:95:f7:
                    32:ad:f6:85:06:cd:87:1f:21:6e:a0:6d:98:af:31:
                    62:3d:49:63:ce:74:ac:cd:60:cb:0e:ff:d1:6a:4c:
                    4a:9b:c6:bf:ac:cc:95:0d:66:62:d4:4e:69:7e:8b:
                    de:b8:10:94:c5:2d:20:14:99:4e:6c:33:c2:1d:94:
                    e3:b1:af:74:6f:43:4b:be:70:73:0d:e2:c6:f1:b7:
                    b2:ee:77:d5:78:08:ee:2b:5b:b5:92:3f:2f:24:6b:
                    f8:00:64:a7:7c:96:88:14:e9:7b:52:21:c1:bd:3d:
                    83:c0:1c:48:77:fb:1b:36:5e:df:2e:36:bf:7a:03:
                    ac:20:90:96:12:e0:3b:1e:45:4e:17:fa:33:8b:5c:
                    8c:47:34:5d:99:6a:17:39:cc:8a:10:e1:d2:ef:77:
                    42:52:00:cc:ef:55:df:dd:c0:bf:89:b5:33:94:56:
                    fd:ab:c2:61:95:ae:44:8f:54:86:38:53:08:08:e8:
                    4a:16:5b:48:d2:62:3c:6f:a2:9a:a5:96:f6:7c:09:
                    7e:7f:d2:8a:65:41:07:02:1d:ab:d5:ad:0b:e2:00:
                    ad:0b:53:5c:bf:a0:6c:4e:f6:af:3b:99:b1:93:d2:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:2B:AB:2F:96:0F:8F:04:67:45:E3:CD:D4:CC:10:04:06:4E:B9
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e9:f6:fc:e8:4a:ca:61:32:ba:56:a8:73:f7:af:47:20:05:
         bc:56:d1:ae:7c:bb:3a:bd:ad:32:5e:7e:39:16:28:2a:62:1b:
         eb:4d:30:11:f6:b5:a3:a3:65:ae:44:3f:ce:cd:7c:fe:fe:6e:
         db:b5:1e:79:88:aa:c3:47:f3:f9:dc:54:cf:7f:31:1e:82:a7:
         05:dd:c5:91:ef:7d:9d:ba:a5:9d:a0:d0:18:b1:06:bb:02:7e:
         22:38:55:7d:17:cf:c0:00:bf:51:c7:ab:e0:71:e4:b9:e0:9b:
         01:98:8f:dc:aa:36:3f:0c:f2:30:ba:b0:57:41:3a:e6:b3:f8:
         09:4d:28:be:75:18:17:e9:c8:3e:bb:4f:c8:d5:4f:1d:36:fb:
         37:b5:23:8d:f6:19:dd:dd:8b:8b:0c:06:f1:62:c9:b1:13:55:
         94:c8:ff:83:6e:e6:6c:da:19:6a:2f:45:39:d9:70:45:17:8f:
         1a:e8:65:b0:04:ef:b0:de:ee:50:00:5d:56:37:dc:4e:46:4e:
         bf:38:69:2c:96:0e:a8:ae:35:4a:53:32:69:4b:7a:17:1a:7d:
         8f:d4:31:72:18:06:f2:1d:f9:63:a9:12:24:b7:09:65:1f:a7:
         01:5c:48:20:35:03:de:1c:fb:46:ed:b2:2a:65:01:c4:22:f3:
         4b:94:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:05 2025 by rpki-client