Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File:                     2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier:          iG121iqIh7bV7xAzKy6IpK5XWbYIBEKrYnlcd9lFCqs=
Subject key identifier:   9D:ED:C6:9C:A4:E9:25:3A:39:87:8D:68:21:01:66:C7:BD:03:67:00
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer:       /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial:       0199FFC806F14C455791AACDE82B0F49D234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number:          0932
Signing time:             Mon 20 Oct 2025 04:02:03 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:03 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:03 +0000
Files and hashes:         1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: XOjixlkN+nHooGbAhP4a/hlViiqSXWctlZI4tYJ8V1g=)
                          2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
                          3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:06:f1:4c:45:57:91:aa:cd:e8:2b:0f:49:d2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
        Validity
            Not Before: Oct 20 04:02:03 2025 GMT
            Not After : Oct 21 04:02:03 2025 GMT
        Subject: CN=9dedc69ca4e9253a39878d68210166c7bd036700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:e3:ea:90:42:e5:6f:ce:34:e0:73:64:43:
                    f1:19:b1:4b:bd:c4:6c:6b:27:97:6a:bc:a8:02:9b:
                    cb:d7:a8:92:25:59:4d:5b:ea:06:db:45:6f:11:02:
                    2b:cb:11:5c:f4:b8:f3:e8:e0:df:60:fb:dd:f1:d4:
                    58:e0:38:62:b3:0c:d0:d1:45:3c:ec:07:a2:08:23:
                    93:d4:9a:d0:66:15:8c:10:cc:cf:fa:c6:68:16:bf:
                    2f:46:6f:99:db:e6:64:c7:a2:25:3e:cb:de:a1:df:
                    37:4a:62:63:5e:d5:43:f9:76:27:02:6c:b5:46:af:
                    99:45:1e:0c:ae:a1:b0:a1:1c:09:a9:21:36:0b:62:
                    65:7a:06:b2:57:ea:ab:84:7d:f2:31:44:4f:2d:82:
                    28:68:11:00:24:ac:3f:93:c2:21:fe:07:3e:17:89:
                    71:65:b9:33:33:ca:1a:61:4b:9c:8f:58:23:db:c7:
                    61:7d:3d:d6:b1:76:3f:30:e4:4e:38:a5:60:9d:61:
                    d0:41:05:12:97:10:4e:4f:83:d2:95:16:09:46:a1:
                    0d:bc:44:52:7e:33:8a:73:ce:1d:2f:7b:87:ca:47:
                    b0:0b:62:76:5f:d1:4d:ed:a6:b2:52:fd:25:86:39:
                    8d:c7:ca:06:6b:a6:65:f0:68:7c:c8:d6:9d:be:2f:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:C6:9C:A4:E9:25:3A:39:87:8D:68:21:01:66:C7:BD:03:67:00
            X509v3 Authority Key Identifier:
                keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:09:a9:17:fb:e7:e1:4c:28:9c:f4:8f:7b:7d:f0:51:8a:
         dd:ee:7f:9d:36:52:6e:94:36:d0:d3:db:65:30:1a:fb:f9:05:
         b7:0f:d6:4f:a4:1d:07:24:b9:b8:10:df:d3:6f:4b:4e:ce:d9:
         29:2c:66:18:a7:82:a9:1a:58:4c:69:b4:02:59:0a:6e:70:bf:
         6f:f0:f4:27:c9:c4:a1:b2:3a:64:9c:03:9a:af:ef:64:f3:d9:
         ab:d7:aa:9a:09:91:94:97:c4:2a:69:a7:ca:bc:f0:4d:d0:91:
         18:32:01:ac:42:01:99:1e:8d:fb:4f:60:c6:31:ad:b8:48:3a:
         96:4f:bd:79:aa:c5:c0:94:ff:10:07:be:b1:31:4a:ee:f7:43:
         5c:20:32:cc:69:28:17:88:05:59:33:bb:a3:f9:b5:44:aa:f0:
         eb:b8:c9:67:2c:1e:34:76:89:d3:fd:46:5a:e7:cb:ac:40:39:
         8d:52:40:28:77:43:ea:6f:fd:d0:2f:0b:36:2e:88:e7:ab:8d:
         58:6c:b8:c7:94:8a:33:17:5e:ec:a2:08:4c:89:36:19:93:84:
         2f:70:1e:d6:2b:d1:8e:3a:9c:9f:d6:f7:93:cf:c2:9a:af:7e:
         e0:76:53:3a:dd:cc:cc:f2:f1:2c:54:ac:7c:da:41:57:50:73:
         6f:dc:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:33 2025 by rpki-client