Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          me0PYFchzps0Q+q5vWbO0so8KJe7jIcPTpwHJrcHIgs=
Subject key identifier:   27:21:69:76:5F:A6:54:70:F7:91:C2:64:E5:B6:88:ED:F4:05:0E:C8
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       0199FC59053EFD23F66A4C703257446255C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          0E6C
Signing time:             Sun 19 Oct 2025 12:01:56 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:56 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:56 +0000
Files and hashes:         1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
                          2: Ap5URXBO93O7jJtjlLZVH2pw48c.roa (hash: p0iYaq767KbYvMNrK5KRomzTD5nBTVSwaVmB+7Atf7Y=)
                          3: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
                          4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
                          5: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
                          6: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: YaKayj3xZqwXEPXMTCz/OHjMiToZsj6s+ba8l1oSZ3M=)
                          7: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
                          8: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:05:3e:fd:23:f6:6a:4c:70:32:57:44:62:55:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Oct 19 12:01:56 2025 GMT
            Not After : Oct 20 12:01:56 2025 GMT
        Subject: CN=272169765fa65470f791c264e5b688edf4050ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:b6:10:a2:ab:c6:7a:2f:dc:a1:bd:f4:ba:
                    1b:52:26:73:7c:cc:77:40:23:6f:31:e0:4e:ca:6d:
                    b2:92:0e:17:a6:95:12:17:fb:4a:d8:c8:0f:4a:5d:
                    e5:43:5a:e3:70:d6:62:c0:44:24:8a:31:d1:95:95:
                    fe:81:39:4e:8d:3a:df:76:29:af:c5:a0:6d:be:34:
                    c3:ab:94:e0:ea:97:29:fb:db:fc:9f:9f:14:0c:88:
                    7c:e6:83:6b:92:fe:76:55:55:0d:70:1b:8e:64:4a:
                    5b:d4:8e:4a:72:39:7c:3e:b0:0b:b6:27:f9:3b:c7:
                    c0:48:9c:15:e1:f3:23:86:ee:2e:d8:29:61:5c:0f:
                    96:f5:36:2b:20:a9:e9:46:49:c2:ce:4d:07:3e:ec:
                    3c:a3:46:87:1d:d4:ad:de:5e:9c:ec:6b:72:8b:86:
                    9d:39:43:94:52:2f:d0:a0:fb:12:49:a2:1e:0a:7b:
                    ce:a0:5a:79:c3:84:13:1d:33:55:67:8a:76:7d:52:
                    60:f8:39:3c:69:21:10:da:7a:fb:c6:05:81:ee:21:
                    67:78:ce:a1:5e:63:2f:76:82:ad:6f:76:c6:e8:05:
                    7c:7b:92:64:11:c2:07:fe:db:d9:7e:81:ad:a3:bd:
                    b4:f0:6d:0b:6c:3d:34:3f:fe:b4:6d:8a:42:6f:82:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:21:69:76:5F:A6:54:70:F7:91:C2:64:E5:B6:88:ED:F4:05:0E:C8
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:75:e9:30:c4:c7:2e:0f:6e:ab:d4:81:f5:71:0a:24:d5:
         c2:cf:98:66:5a:0b:8c:0d:31:dc:5f:4f:f2:84:66:cb:ef:2f:
         6c:19:e1:2e:0f:88:72:fb:af:97:2d:59:c2:5a:48:89:68:fb:
         27:eb:1f:56:c7:3d:20:21:61:0f:c3:0b:62:aa:2f:7d:01:12:
         59:7a:a0:06:cd:56:ee:6f:a6:ec:c6:86:ca:43:94:e0:4d:9e:
         9e:40:40:ec:0a:28:a3:37:58:bb:8d:1f:b2:28:33:4c:06:de:
         d9:17:d5:65:55:99:f7:4b:2c:8f:f2:77:50:f1:4b:af:ca:b9:
         1e:3b:69:ca:f3:bc:1e:87:0c:e2:d6:fe:ad:c1:7d:62:e5:57:
         3b:ed:6c:9e:fd:0e:91:23:60:24:61:64:3b:9a:4c:c5:34:59:
         75:c9:95:48:20:2f:a1:d5:46:04:6d:54:86:b8:fd:4f:21:5e:
         70:06:df:ee:f8:9f:56:c6:9c:90:bb:b3:3a:b5:81:9f:53:13:
         27:75:87:67:e1:45:81:fa:ed:72:01:55:8e:1a:2f:8e:e8:9f:
         bc:95:68:f7:e9:30:0d:b7:e0:bf:f6:57:3b:56:22:4a:1f:10:
         cb:a3:12:7b:bf:50:da:23:bd:17:01:f2:92:c8:1a:ff:fd:ae:
         39:1d:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:24 2025 by rpki-client