Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File:                     dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier:          TJkJOPCAzG74mQBZ3CsDTmBarMMQnx8GCG+m1rWPcsk=
Subject key identifier:   49:22:1B:74:84:27:64:BD:48:29:7A:30:B2:DF:8B:DD:71:53:92:37
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer:       /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial:       0199FE46AE206AEEF4D7A04DAC9E1A86EC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number:          1046
Signing time:             Sun 19 Oct 2025 21:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:08 +0000
Files and hashes:         1: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (hash: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=)
                          2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: llbtBpa4UgyUAuHP1FHgVDQTQEy/Vt44gG+O+30+a+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:ae:20:6a:ee:f4:d7:a0:4d:ac:9e:1a:86:ec:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
        Validity
            Not Before: Oct 19 21:01:08 2025 GMT
            Not After : Oct 20 21:01:08 2025 GMT
        Subject: CN=49221b74842764bd48297a30b2df8bdd71539237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:38:dc:4e:40:90:57:b5:a3:a9:a3:19:65:
                    19:09:88:2e:42:7c:e6:a3:c6:cd:51:f4:73:3e:77:
                    68:c4:40:ef:31:e5:4f:92:a0:09:c9:f2:2f:cf:8a:
                    2f:8a:56:41:e5:e1:13:5d:8d:7e:b7:cf:c9:0d:ee:
                    fa:df:db:8c:a1:c8:67:24:60:ca:d9:4e:6a:40:dc:
                    f2:bd:d2:d8:ad:96:ab:a9:5f:51:f0:45:2e:6e:da:
                    b4:06:c6:32:e0:c3:57:ff:0e:45:12:b0:fe:43:a2:
                    9b:36:2b:08:1f:42:80:84:3c:1b:2e:ae:44:33:83:
                    e0:6c:75:29:51:da:ec:99:a8:11:6c:da:98:97:e5:
                    56:35:1b:06:20:a1:a2:c5:17:57:50:60:ea:73:0c:
                    3f:2c:4c:82:89:a5:39:5a:a8:34:4b:85:49:bb:ae:
                    f3:77:80:08:50:d5:0f:ef:19:60:c1:08:9f:83:ad:
                    15:00:d2:eb:00:cc:4f:b0:88:d7:d7:5f:d2:65:2b:
                    02:49:ba:71:e9:93:cb:52:19:55:b6:8f:30:73:50:
                    db:01:c9:b5:4e:3a:b1:76:93:67:1f:1d:36:cd:22:
                    1a:1b:02:ac:ca:bc:53:13:48:d0:de:18:8b:4d:9e:
                    ba:ff:16:e9:ac:2d:c5:99:9d:ac:c0:95:6c:de:74:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:1B:74:84:27:64:BD:48:29:7A:30:B2:DF:8B:DD:71:53:92:37
            X509v3 Authority Key Identifier:
                keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:58:c0:e8:85:1b:bc:f8:a4:df:ca:2b:d0:fc:0f:a2:43:48:
         82:8e:e6:6e:74:76:ba:d7:bc:18:26:72:cc:ce:b7:5e:0e:be:
         6c:98:1d:2f:a2:9e:a6:2a:08:79:e3:87:e4:6f:12:eb:36:80:
         53:d8:e4:5b:34:d6:ba:02:a7:c1:ea:6b:10:49:9a:79:24:a8:
         f8:56:4f:bb:a3:ea:f9:52:b3:b5:3d:d4:2a:b1:24:3d:84:a9:
         27:3c:2f:5b:a0:37:6f:0d:dd:4f:84:e0:4f:10:9e:53:ae:fd:
         7f:86:0b:9a:0c:b5:c3:eb:00:75:15:7b:67:a8:24:af:b2:20:
         45:fa:9c:fe:b8:19:2e:47:04:45:17:a0:5b:9b:e2:4d:5b:7c:
         c4:39:5a:78:14:e1:e2:a6:8d:fc:65:4d:f3:11:bd:53:a0:1d:
         c0:93:3b:ea:fb:a2:bc:6b:db:05:33:63:e5:f2:20:d4:d3:1c:
         b7:dc:ab:cc:17:e6:cf:46:ba:9c:f7:99:00:b9:28:e1:0b:52:
         14:a6:25:76:93:97:03:94:d9:4a:d1:92:39:46:73:36:a5:b1:
         32:ff:7f:14:88:76:c4:a8:f6:07:e4:21:32:af:44:91:61:79:
         2b:2e:e0:d9:05:b0:16:15:6f:ca:c2:eb:f7:ed:1b:dd:83:8d:
         bf:f4:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:00 2025 by rpki-client