Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File:                     A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier:          He7lb0OU1t37mXpoYY1GFDcEHCYrg8ltm1A1PZxjS1I=
Subject key identifier:   D0:A6:06:2F:67:21:BC:CD:C2:22:B6:C6:12:D7:9E:A1:7B:AB:8E:AC
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer:       /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial:       0199FBEC0CC1D6BE619C1D0C1D60140C978C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number:          0516
Signing time:             Sun 19 Oct 2025 10:02:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:54 +0000
Files and hashes:         1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: 6gum70k4963reo1pNCjcGdM/jMEPFqUpDgrDAhrOQiw=)
                          2: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (hash: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:0c:c1:d6:be:61:9c:1d:0c:1d:60:14:0c:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
        Validity
            Not Before: Oct 19 10:02:54 2025 GMT
            Not After : Oct 20 10:02:54 2025 GMT
        Subject: CN=d0a6062f6721bccdc222b6c612d79ea17bab8eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:84:6a:de:a7:82:63:01:34:68:c1:d0:0c:
                    73:28:b7:07:3c:4e:fe:2c:ff:f1:54:f8:c0:ba:e9:
                    9d:48:97:bc:bf:04:57:68:d8:c7:32:98:a5:c5:d2:
                    f4:be:93:a9:c7:99:1b:b2:73:f0:77:11:0c:dc:07:
                    c5:91:45:61:5e:8e:49:c8:a7:ec:40:8d:c9:76:cb:
                    41:e3:e5:bc:46:60:d0:a0:20:39:f2:2a:91:d8:ed:
                    10:86:0e:5e:ae:af:58:2e:49:a3:19:81:fc:78:8e:
                    38:ae:5e:3e:f9:20:4b:d4:09:b5:19:8d:48:24:1e:
                    2c:4a:46:59:aa:2a:2b:26:88:e6:52:fe:a4:9a:5b:
                    03:dd:45:07:89:80:25:28:fe:d8:1f:87:df:46:41:
                    07:cd:3f:46:dc:e3:5c:22:31:38:a2:46:bf:4c:74:
                    49:65:2c:4e:44:4d:f0:b9:b1:29:1a:14:eb:21:70:
                    fb:11:29:85:82:9f:79:33:65:25:22:14:20:d6:13:
                    c8:e2:a4:c8:21:21:7d:a3:0f:d6:5e:73:2c:8d:8d:
                    44:24:f7:35:0c:87:91:c9:37:48:c7:08:c0:c3:fb:
                    3b:f2:9c:5d:30:e7:42:10:6a:23:a1:45:3c:59:07:
                    fc:d7:00:85:54:2e:c6:40:7d:2c:54:6c:af:9b:e9:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A6:06:2F:67:21:BC:CD:C2:22:B6:C6:12:D7:9E:A1:7B:AB:8E:AC
            X509v3 Authority Key Identifier:
                keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:8a:b1:f4:67:4d:e7:31:f4:9c:23:1e:6b:72:86:4f:c0:
         1a:08:07:c9:bb:cf:1e:ad:67:b2:3a:a0:8b:0e:d8:5e:75:e1:
         a3:64:70:3f:98:4a:40:54:3b:d2:64:df:27:7f:62:ea:53:6e:
         b2:e4:4e:59:24:74:1e:9a:0f:7a:ec:e5:20:69:d0:7b:5c:99:
         30:ac:f6:94:3a:11:62:43:d1:ad:95:dd:0d:29:1c:7d:ca:5a:
         3f:77:ce:53:4c:99:a1:40:db:54:6c:ac:af:bb:df:19:ed:a7:
         55:79:53:45:bb:0b:d5:aa:60:34:10:80:ef:c2:ef:60:6d:a7:
         2c:ce:8e:a8:7c:92:40:f2:14:1a:ab:e9:39:ba:d6:7f:95:51:
         9c:12:38:96:b2:2f:3d:dc:81:01:45:47:b5:6d:10:5a:12:71:
         73:fe:b7:90:57:e7:d3:bd:97:a5:63:00:f8:a7:12:2e:ff:04:
         a8:ad:0a:4f:d3:da:a9:c4:59:45:db:e8:8d:68:59:0b:93:7d:
         0e:da:4e:0a:23:1e:41:11:0d:b6:92:e5:e5:30:52:c4:0d:7e:
         ee:fd:b6:de:89:76:44:c6:9c:4d:ab:18:cc:e0:6e:3b:fc:cf:
         c6:81:43:82:7e:30:69:b2:92:4a:68:01:0d:6e:9e:e0:c2:6f:
         61:5c:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:11 2025 by rpki-client