Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File:                     aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier:          I0W1h6WQNnwIdjvCpqFV8RAQTMUBblBhVO8Yb0+U5AY=
Subject key identifier:   AB:34:1C:24:6F:19:A8:AC:91:EB:36:3B:5E:0E:C6:00:76:AD:04:8B
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer:       /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial:       019A01B6365808A9A8E0675AA0E4C0AB2F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number:          05AD
Signing time:             Mon 20 Oct 2025 13:01:49 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:49 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:49 +0000
Files and hashes:         1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
                          2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: lcCwrJ8s6eoBS6mAnsTyBbhA2tV/AQF5LixaG0YhWUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b6:36:58:08:a9:a8:e0:67:5a:a0:e4:c0:ab:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
        Validity
            Not Before: Oct 20 13:01:49 2025 GMT
            Not After : Oct 21 13:01:49 2025 GMT
        Subject: CN=ab341c246f19a8ac91eb363b5e0ec60076ad048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:1c:43:5d:8a:87:75:ce:65:27:8e:ea:bb:
                    49:96:62:b9:85:98:60:54:28:e3:2f:57:08:10:d5:
                    72:8e:1d:f1:49:be:84:9a:fd:cc:fa:3d:38:71:31:
                    37:fe:56:98:ad:e3:7d:a3:8c:63:86:cd:dc:c8:9d:
                    39:03:ac:24:59:ef:ff:56:8e:e9:e9:67:2e:dd:37:
                    15:61:be:31:22:42:fc:24:0c:8e:5b:e2:8f:98:f2:
                    45:e7:99:4c:ac:dc:29:27:d3:2a:da:93:aa:99:fa:
                    1c:70:ec:8b:5c:91:58:66:ad:70:fb:2c:e1:6e:02:
                    d7:cb:60:7a:e1:75:1b:4e:46:b8:3b:89:6e:cf:af:
                    09:89:66:84:86:ee:73:fd:ca:25:04:1d:cf:4a:d5:
                    50:9d:29:ab:a1:3a:89:70:ab:31:d6:1e:47:a5:bf:
                    05:16:1a:7c:2d:dc:4f:2e:1a:1e:44:41:fa:b3:72:
                    ea:e0:90:32:2b:1a:c0:b2:69:ce:73:43:54:1b:69:
                    b4:ad:b5:be:49:25:16:68:72:d6:1f:f6:5a:26:f5:
                    11:8d:a9:39:d8:83:d0:b1:63:ec:63:f6:da:84:f4:
                    cc:fb:61:26:45:01:53:19:44:22:be:8d:e4:91:68:
                    60:2f:d0:3b:c9:b8:43:91:dd:c6:19:86:5d:cc:84:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:1C:24:6F:19:A8:AC:91:EB:36:3B:5E:0E:C6:00:76:AD:04:8B
            X509v3 Authority Key Identifier:
                keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:50:44:c2:c2:dc:44:43:2c:57:09:ff:44:97:1e:c0:5d:
         30:f3:9a:b4:df:57:de:62:8c:0f:7d:43:71:fd:26:63:63:01:
         37:3b:59:ca:de:0f:f8:bd:c4:14:6f:66:b3:44:2e:9e:56:77:
         fe:93:dd:f5:de:e6:f8:cb:9b:38:ef:e7:b6:96:cc:91:4b:4b:
         05:c6:a2:6b:3e:22:37:24:b3:f8:a1:29:fe:1f:f8:f3:2d:69:
         43:5b:8f:be:28:02:7a:70:b6:b3:b5:88:13:af:c4:40:9a:15:
         de:30:45:07:0d:24:73:c2:b3:ec:49:c9:e1:ed:ae:23:1a:05:
         27:04:5e:ec:ad:bc:21:3c:95:50:40:98:30:56:9f:13:9b:27:
         93:20:76:0f:06:de:75:46:30:bc:99:d0:a7:8b:09:a1:5b:f9:
         49:81:8e:dd:ca:b1:c8:34:6e:6d:20:6f:4e:79:52:f6:e8:73:
         14:f8:ed:b5:e5:f3:3d:53:9f:3c:7f:85:77:05:a0:ee:06:9c:
         fd:4c:c0:2e:6d:57:87:40:f7:25:65:f4:19:3a:d3:d1:1a:87:
         42:a7:fc:70:a9:20:3a:1b:e5:32:ed:2a:c9:58:27:3c:f1:53:
         d2:8f:d1:c1:67:76:68:5d:04:bc:b2:2f:58:bd:eb:95:55:65:
         47:15:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:08:36 2025 by rpki-client