Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File:                     o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier:          AuwzTiFFXtISyQ4DyZnI7zp3JN6zt82yDW3Pmi/uvTc=
Subject key identifier:   D0:D8:E2:E4:8D:83:EA:5E:E1:A5:33:9D:D3:0E:44:F9:3F:BF:78:74
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer:       /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial:       0199FE7E179F9D4A33C0E014C549C3079EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number:          C6
Signing time:             Sun 19 Oct 2025 22:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:40 +0000
Files and hashes:         1: fgNc3XJYzlvVGoE08QNz7y8we1c.roa (hash: 0HZ8FpOe+yubT+Fy50QFxz4rHKcRQcjh6z09BKS1JVY=)
                          2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: U+NMfKUXq6Z15SGUfATh44QFLdqOQtkj8Jl1OnxXLm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:17:9f:9d:4a:33:c0:e0:14:c5:49:c3:07:9e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
        Validity
            Not Before: Oct 19 22:01:40 2025 GMT
            Not After : Oct 20 22:01:40 2025 GMT
        Subject: CN=d0d8e2e48d83ea5ee1a5339dd30e44f93fbf7874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:3b:81:b7:0c:40:fa:52:91:90:a7:95:59:
                    51:57:59:59:1d:04:92:10:c2:55:39:ae:94:5f:eb:
                    65:ca:ad:d7:4c:21:2b:9d:8b:09:1b:0e:e8:b1:9a:
                    85:3a:c6:60:3e:5e:ed:4f:cd:8c:a6:a3:c9:a2:3b:
                    d4:46:4b:b1:8d:99:cf:be:ed:f5:e7:2c:3f:d1:86:
                    55:c3:8d:bd:d5:47:d5:63:64:76:e1:cc:8a:07:e8:
                    b4:74:2f:68:c6:f8:1d:33:87:36:38:e6:bc:16:17:
                    97:30:ab:37:ae:46:6a:81:51:dc:77:e6:cc:72:f9:
                    7c:2e:a2:e9:77:2f:cc:58:38:1d:68:4e:79:e5:84:
                    06:99:32:26:3b:8b:6e:60:3d:2e:b1:39:a8:2d:c3:
                    df:45:75:8a:b3:a9:36:b1:1d:ac:20:27:6f:fc:c4:
                    b3:d6:40:70:f8:d2:de:4a:3c:f7:b7:3c:73:96:b1:
                    9f:2f:76:16:2e:9e:84:c1:f2:41:69:5d:c4:67:5e:
                    56:c1:9d:83:e7:24:10:45:7a:51:30:8b:62:22:54:
                    4e:0f:86:9b:27:0f:38:b5:cd:e1:8f:ed:73:78:fa:
                    f0:04:0a:cc:f3:54:15:10:9b:18:9e:37:6d:5a:15:
                    e9:7a:50:13:ba:46:6f:93:e5:16:09:73:6f:c2:53:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:E2:E4:8D:83:EA:5E:E1:A5:33:9D:D3:0E:44:F9:3F:BF:78:74
            X509v3 Authority Key Identifier:
                keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4c:d9:cb:41:67:f3:6f:d6:ec:68:ff:31:19:c8:a3:ff:cf:
         ed:9e:e8:74:6a:cb:a5:fc:40:de:00:ea:64:b8:2c:25:3e:f1:
         5e:32:b7:9a:02:3e:91:31:e5:46:32:f4:47:bb:39:ef:9f:6b:
         44:63:2e:9d:5d:4d:bd:0f:65:3a:45:8c:59:1f:3d:17:c0:92:
         4f:8e:d7:9c:06:bd:58:77:63:47:8b:a5:e0:b5:1d:10:36:bf:
         9e:b8:d6:bd:53:9f:d2:c7:33:fb:2a:7c:9c:8e:ef:e4:25:c2:
         5c:95:aa:38:03:6a:de:d1:4d:f6:0b:e5:da:72:1e:c0:f9:50:
         94:17:89:57:18:b8:fa:37:f3:33:30:b1:df:5a:be:d5:cd:46:
         9c:b2:5d:43:0b:31:c2:6e:10:ca:7b:5a:f7:cf:80:d3:f6:bc:
         b3:fa:41:48:32:55:78:ef:fc:71:7b:95:33:e3:d2:6b:6c:4b:
         e3:9a:15:14:78:e2:3d:5c:b4:5d:6e:5d:1d:4c:44:41:27:c0:
         08:a5:2f:f2:2b:04:74:de:b5:34:b4:63:c4:c1:03:8c:97:61:
         c5:4f:c2:eb:6b:6e:51:21:ac:d4:4f:af:5b:b7:62:a9:8c:a5:
         59:e5:fc:de:75:37:de:9a:ef:be:fa:64:0e:43:b7:f0:d2:d2:
         d4:a4:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:47 2025 by rpki-client