Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File:                     cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier:          kaARN6U5ZojGv42ZduUUnYrE+7IuZwJzihFPczzDJRA=
Subject key identifier:   A3:8E:59:76:F4:A3:6A:EC:92:F1:9D:1A:3D:23:75:C1:93:BB:5F:78
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer:       /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial:       0199FBEBB1BE7597B3A4E0256B433D9C745B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number:          014F
Signing time:             Sun 19 Oct 2025 10:02:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:31 +0000
Files and hashes:         1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=)
                          2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: Ta0YDRoFCqWNb3hlKd8fUdE9dDEt2DwKs2Ka6eViypE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b1:be:75:97:b3:a4:e0:25:6b:43:3d:9c:74:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
        Validity
            Not Before: Oct 19 10:02:31 2025 GMT
            Not After : Oct 20 10:02:31 2025 GMT
        Subject: CN=a38e5976f4a36aec92f19d1a3d2375c193bb5f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:70:54:5e:fc:b7:36:57:d5:d3:a0:f3:42:
                    9e:90:52:21:28:a4:ff:6d:75:7e:b6:53:19:18:aa:
                    b8:e3:2b:a1:cb:38:db:85:4c:9e:49:2a:33:40:65:
                    63:30:8f:76:86:c1:af:9c:52:aa:2a:eb:ad:85:11:
                    d0:a3:e0:e6:f7:2b:95:52:f1:1c:00:dd:d2:c5:0d:
                    89:81:79:04:c2:41:a6:b1:71:54:9b:e7:4e:aa:d7:
                    c4:50:7a:98:c9:af:5a:85:68:35:13:1b:a1:be:72:
                    7c:3c:f8:cb:1e:2c:8a:06:3d:cd:be:23:88:db:f8:
                    e4:b5:15:b3:f0:a0:41:20:88:16:c9:ea:9c:2b:1f:
                    50:6a:4f:65:32:7c:50:36:57:e7:32:7a:64:70:58:
                    f0:7f:13:fc:e5:87:92:78:89:fe:ca:1d:a7:2a:8b:
                    41:90:85:f4:e7:29:d5:ef:4b:2f:b2:f9:d3:73:ed:
                    21:ef:ae:a1:1a:c2:8f:b0:00:01:81:ea:68:a0:8e:
                    61:05:27:54:0a:53:65:40:d3:33:59:07:3e:81:12:
                    98:00:78:c4:17:e9:0d:61:19:c0:3a:7d:21:39:4e:
                    e7:55:8d:1b:78:6b:26:5c:e3:0d:76:d1:44:f0:68:
                    f4:27:d3:d2:86:f6:b4:d6:ec:7a:39:66:7d:af:75:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8E:59:76:F4:A3:6A:EC:92:F1:9D:1A:3D:23:75:C1:93:BB:5F:78
            X509v3 Authority Key Identifier:
                keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:71:ef:fd:2d:63:eb:3a:11:84:1a:58:81:97:46:0f:32:3c:
         87:24:c3:b0:97:73:6a:28:12:18:ab:3b:62:75:73:66:66:d6:
         ec:ed:2a:7a:17:81:27:ea:66:87:45:de:e5:66:c3:5d:5e:8b:
         67:fd:f8:ca:4f:71:e6:cf:a5:ad:e2:21:28:0c:b9:de:9f:46:
         59:75:81:c3:bb:6a:5d:57:ec:8f:0e:79:18:86:41:12:47:59:
         04:41:2f:ba:99:34:54:3c:bc:fa:89:12:f2:3a:e8:88:90:2d:
         fb:43:a8:a3:59:a5:5f:62:79:da:a7:cc:ef:b3:da:6a:a9:21:
         79:9d:5f:00:8c:ff:0e:95:b1:58:63:2c:57:28:24:82:1c:d8:
         9b:f0:4e:a8:91:89:80:c0:8f:8f:74:c4:f3:94:90:a7:3f:62:
         5b:c7:32:c4:5b:e6:7a:d5:24:f8:dd:65:40:44:c5:48:38:22:
         5c:0c:d1:43:31:35:b3:38:2e:d6:57:75:83:6e:d7:f5:99:08:
         d7:75:31:cf:14:a2:53:94:24:87:7b:ca:b9:ba:aa:2f:53:4c:
         15:17:5e:ef:ba:bf:e5:e9:19:b4:10:f0:3e:8d:e1:a0:bf:2a:
         95:7d:f0:97:e7:0f:ab:af:2f:81:b6:34:47:65:a4:91:33:7b:
         5c:17:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:52 2025 by rpki-client