Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          fgqEFDa8l0tH6DWdDrf/OMkz0EoldM2N3CnU8EhjrLE=
Subject key identifier:   51:73:DD:4E:75:CE:79:8D:BF:9E:99:25:E0:A2:09:11:10:CB:53:B4
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       0199FBEBF5F471F5B930AD70E655B34C8BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          12A0
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: 0m_FCYLNpCepQvgGxnt5Etr0-7E.roa (hash: KPGMzAKskMiHXfK0deJxIO7QjTi1yyfKU8relBE7uzY=)
                          2: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: XRF2fACgoKA9M1ZnoUWHcazo6tOUJl80XqTHjUXrp8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f5:f4:71:f5:b9:30:ad:70:e6:55:b3:4c:8b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=5173dd4e75ce798dbf9e9925e0a2091110cb53b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:2f:5d:7a:90:39:ae:ea:e6:c3:d8:b9:4b:
                    f8:2e:0d:19:26:20:fc:25:e0:cc:f8:c9:0e:d7:f2:
                    09:d9:3d:f8:f7:40:82:21:0f:2b:96:2f:19:32:f9:
                    aa:95:45:5a:e1:15:37:bd:61:cc:b1:81:78:c7:68:
                    82:64:c0:c6:89:ca:c9:7e:27:2b:9d:a6:2b:4c:e7:
                    aa:ff:78:6e:0d:ac:d3:32:e9:1a:49:7f:fd:57:6a:
                    4b:ee:78:5b:36:06:fe:6b:b8:4b:a9:60:c1:ce:e3:
                    c2:3f:d8:be:9e:ba:25:92:ee:d0:c3:da:1c:d1:d1:
                    a3:cc:f3:49:82:75:24:52:e6:e7:6a:d1:6c:fc:57:
                    ae:b9:63:26:41:d7:e0:82:d8:68:e2:05:92:94:72:
                    7c:4d:aa:a5:f3:20:90:34:dc:41:87:53:ee:98:60:
                    b9:05:b0:f4:19:d1:b2:c7:65:7e:dc:c8:d8:44:44:
                    c4:4d:24:0b:6d:16:04:6c:75:62:38:4d:2c:a3:9f:
                    c6:8b:56:f2:e3:6a:51:ce:9e:61:4e:2e:66:ef:93:
                    31:7f:4c:ab:a5:bf:64:4f:ed:22:54:0d:e1:53:5f:
                    13:15:15:ee:65:60:5a:e7:08:f6:99:5c:43:89:0a:
                    f2:ec:86:74:f4:38:64:a3:ea:be:b2:33:54:c5:a4:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:DD:4E:75:CE:79:8D:BF:9E:99:25:E0:A2:09:11:10:CB:53:B4
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:84:21:0f:5f:11:45:68:70:46:ea:59:66:bd:05:5a:45:bc:
         8a:ea:69:e9:07:84:bf:3c:45:3b:08:44:3c:d9:4e:88:5b:29:
         4b:28:fc:2d:3e:78:eb:b8:d8:1d:c6:2c:ad:6c:f9:3a:b2:ed:
         d3:e2:4a:f7:35:a4:e9:7c:61:42:c0:c5:46:27:4f:df:8a:9f:
         ed:df:4e:c4:fe:90:50:ac:56:72:81:dc:4a:1b:bf:d0:84:27:
         ac:89:b4:77:09:02:c2:a9:63:d9:58:a8:d3:21:23:9a:28:67:
         bd:c5:64:96:9b:72:f8:a2:fc:f3:8b:49:e2:9e:03:1e:da:b9:
         4e:ae:e6:c8:fd:72:22:de:d2:d2:39:b1:13:a3:40:e7:1e:98:
         09:fe:6d:e3:7f:32:0c:fe:3d:d8:74:2b:59:df:f8:58:4e:44:
         e6:92:ca:25:f8:72:16:0b:43:fb:83:bd:6b:10:f0:a6:78:8f:
         f1:b0:2e:12:ca:db:0b:e8:e2:eb:1d:18:83:27:e9:ff:2b:83:
         b6:ca:0d:10:3f:74:0f:36:16:06:cc:39:af:1e:76:14:1d:56:
         45:3b:bf:ca:c6:60:5d:c3:b7:9b:36:b9:3f:31:e8:ea:1f:fd:
         d6:86:47:86:20:4c:2e:64:f0:41:1d:8b:b4:5c:27:23:fe:f5:
         2f:5e:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:14 2025 by rpki-client