Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File:                     AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier:          rsHpw7n3Tzzo8c3ZKgdCr91HnNYKEcesioIauMKDF18=
Subject key identifier:   2C:04:B9:BA:45:AD:58:FD:7C:A5:99:A5:FF:50:F6:FB:92:44:CF:96
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer:       /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial:       0199FC8F4294E1485B26FA7F7B8711F099C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number:          0CBC
Signing time:             Sun 19 Oct 2025 13:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:11 +0000
Files and hashes:         1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
                          2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: c7ZwqyJL8A/4KXt0YgUx+0eMw9WSHuBhwin//hltUcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:42:94:e1:48:5b:26:fa:7f:7b:87:11:f0:99:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
        Validity
            Not Before: Oct 19 13:01:11 2025 GMT
            Not After : Oct 20 13:01:11 2025 GMT
        Subject: CN=2c04b9ba45ad58fd7ca599a5ff50f6fb9244cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:74:3a:de:f2:3e:de:93:6b:5a:04:81:1f:46:
                    b2:22:cc:74:67:58:8b:d7:5f:d4:ba:14:9f:be:d8:
                    c5:ff:c4:c9:39:1c:69:9c:48:11:bc:e8:60:20:e7:
                    89:a8:9e:32:c6:c7:2f:71:60:1d:41:e6:b9:ca:72:
                    5a:dc:4f:fa:8b:71:3e:b6:0a:71:e0:8c:87:16:de:
                    33:b2:cc:4b:10:49:05:7b:53:85:e8:4b:46:1c:32:
                    0c:e6:92:09:b0:eb:25:c0:8a:2d:dd:65:7f:33:42:
                    95:ad:51:6a:6e:28:e2:6c:e7:05:56:b6:ef:bf:8c:
                    4d:b6:81:05:f8:e0:e7:ef:8a:38:e5:ba:fe:19:bc:
                    41:e8:ac:91:81:22:15:9a:4d:e7:5b:e7:cb:36:a4:
                    c3:c0:3b:5a:cb:03:fa:53:1e:77:80:fe:b2:d5:9f:
                    05:e2:58:d7:4c:db:d8:cb:99:7a:f5:f1:fd:70:00:
                    51:74:d6:20:f1:36:f3:dc:bd:26:48:86:87:0f:40:
                    0b:8e:c1:de:00:c8:e1:1a:62:73:90:75:72:32:a5:
                    61:09:81:fe:68:c0:8d:15:bd:7d:43:6e:b6:c3:51:
                    55:f5:cc:12:08:ff:a0:4e:33:23:cd:5b:c7:49:ea:
                    88:6b:bb:e3:35:81:da:bc:f8:21:2c:2d:f5:a0:5c:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:B9:BA:45:AD:58:FD:7C:A5:99:A5:FF:50:F6:FB:92:44:CF:96
            X509v3 Authority Key Identifier:
                keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:57:af:2b:40:ee:80:27:fb:f4:6a:aa:1f:8d:83:85:83:
         6a:90:53:a1:9f:4d:6c:93:0d:58:48:f6:ee:ae:ea:e6:5e:0c:
         97:c2:ce:aa:eb:ac:b0:73:e6:fc:e9:81:c0:5b:68:eb:22:89:
         f1:9a:cb:3d:f4:1e:17:83:6a:14:7d:6d:d1:73:b4:95:5a:63:
         9c:9c:21:f5:d4:dd:a9:3e:f4:cd:f7:21:4d:ee:e1:1e:72:a7:
         6b:7b:29:eb:6f:f8:a9:1e:5b:40:33:87:1e:01:87:bc:3f:44:
         ce:3e:da:ae:9b:a5:a3:3d:c6:82:cb:0d:55:74:38:ac:dc:b2:
         cf:46:af:39:1c:1a:9b:58:ed:53:4c:cf:22:ad:01:53:84:aa:
         c4:31:0e:d9:df:e7:a6:79:0f:59:c4:09:6f:e5:fe:f1:43:8c:
         4a:32:59:33:0b:98:e6:a2:45:dc:ea:25:ef:72:dc:d8:9a:9c:
         5e:c4:35:a5:46:88:27:84:31:88:fc:f4:1f:8a:ca:73:64:83:
         27:ad:3f:31:eb:fc:8c:cd:0b:57:ea:38:11:58:b3:67:50:10:
         ee:28:60:0f:67:b4:c4:cd:c5:2e:f7:b1:3c:d7:27:b8:57:67:
         7a:d4:42:be:b0:dc:fc:56:6f:d7:51:30:40:5e:8c:46:92:e0:
         d9:c5:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:16 2025 by rpki-client