Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File:                     mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier:          6C3msToVEx7mfiCPfOo8i0juMHdO3psSQokL9k+i2Oc=
Subject key identifier:   6A:8F:CE:3F:C0:16:C4:85:87:D9:9A:94:72:F9:B2:BD:00:0F:1C:65
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       0199FBEA7CBFD823DA1545A75BC1C2BC32F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number:          083F
Signing time:             Sun 19 Oct 2025 10:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:12 +0000
Files and hashes:         1: 19FcmSsxW-HAmGMu8vNic8GlPVQ.roa (hash: A/x/ATh8VjymksFnyMMUZUGv4QdGRlkBRngH5oIt50M=)
                          2: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=)
                          3: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=)
                          4: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=)
                          5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=)
                          6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: I0yhuvTohajy+AJouQIIO6hvIi9oZ7odFFdKsuqeLi0=)
                          7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7c:bf:d8:23:da:15:45:a7:5b:c1:c2:bc:32:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Oct 19 10:01:12 2025 GMT
            Not After : Oct 20 10:01:12 2025 GMT
        Subject: CN=6a8fce3fc016c48587d99a9472f9b2bd000f1c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:33:b7:32:3f:4f:d8:39:13:ff:e7:7d:8f:
                    34:22:86:57:e3:d4:67:25:4f:c1:c8:96:f1:3e:27:
                    a6:21:33:6e:13:ab:3d:bd:ff:df:e8:f8:ec:f3:44:
                    f5:87:a4:9e:47:09:a3:a5:45:1a:ee:bf:15:0a:5a:
                    4c:41:5a:ba:c9:df:bf:df:60:91:a1:c2:0f:76:c5:
                    a6:75:2e:b8:c0:53:29:6f:8f:df:43:2d:74:90:0c:
                    23:a2:4a:bd:d2:6d:1b:a8:3b:b7:53:2b:ba:05:75:
                    b7:fb:61:01:77:91:10:51:d4:bd:c7:fc:0c:ef:44:
                    ad:35:c4:00:c0:e8:42:39:85:25:f5:35:a7:29:92:
                    77:b6:df:3e:42:60:96:d3:22:a6:4f:1f:78:cb:7a:
                    38:69:eb:9c:33:ea:ca:fe:f0:94:4f:eb:e6:05:3b:
                    2e:b9:32:62:bb:65:90:e0:50:45:1b:ef:cc:17:b4:
                    28:9a:b3:f2:44:b5:e4:18:23:3a:0b:58:6a:5d:46:
                    9e:8f:9c:6f:df:1c:be:e5:71:f7:73:d6:86:c1:e1:
                    b9:01:d7:23:b2:56:a6:0f:06:fd:9a:22:4c:c8:87:
                    1f:48:71:13:ff:82:33:6d:e6:e7:ab:c3:02:9c:1a:
                    ab:86:49:dc:9e:78:e9:35:f4:4b:93:0e:1f:eb:2c:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:CE:3F:C0:16:C4:85:87:D9:9A:94:72:F9:B2:BD:00:0F:1C:65
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:db:88:1a:6c:82:42:8b:24:3d:b2:cc:d4:b2:5c:35:b8:
         89:98:c5:af:5b:b0:c9:c9:f7:e4:bd:fb:5a:87:1c:5d:c0:79:
         28:ce:c6:20:c5:ba:eb:09:6c:c5:f7:a9:86:e9:38:4b:18:d2:
         f7:54:c9:4c:75:4f:b8:b5:0a:ca:1f:53:b7:e2:f1:b9:4e:95:
         0c:bf:62:af:33:24:d6:e9:d9:db:b3:44:88:b1:30:9b:88:49:
         44:21:5f:4d:35:11:0f:5a:bf:f4:b9:12:6b:36:a2:f9:11:67:
         26:73:bb:00:1f:a5:a6:19:2b:96:34:f2:ed:56:4e:51:11:bd:
         ab:38:14:55:7a:a3:1d:7b:c8:d6:08:be:18:92:d4:b5:cc:25:
         e5:00:4c:56:c6:1a:2f:a7:a1:b4:0e:30:82:50:9e:21:c5:ea:
         5d:e0:98:a6:1e:bd:15:81:a8:ee:06:33:25:83:38:97:59:b3:
         0b:2c:5d:de:68:f0:2d:07:51:a3:9d:6c:c9:4f:6c:a0:11:7a:
         80:c9:06:f3:69:c9:64:c8:b4:dc:1c:56:d6:59:54:ea:21:9b:
         06:8d:60:a7:77:ca:f6:86:46:74:3c:db:08:b3:42:72:ba:0f:
         a2:6e:34:79:9f:82:3f:96:7b:cf:fe:d1:b9:0c:dc:40:97:7a:
         8c:06:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:38 2025 by rpki-client