Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File:                     g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier:          ISDwgmviuQrVdVYj7THhrm+OrnFVpPVl0h/u6HKMip0=
Subject key identifier:   D3:3D:92:A6:64:C7:C6:4A:FA:CA:9E:4D:0E:DF:E2:1E:00:F1:F5:04
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer:       /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial:       0199FDD9DC7128B646ADE6BD2B9A35E8CDF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number:          064C
Signing time:             Sun 19 Oct 2025 19:02:17 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:17 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:17 +0000
Files and hashes:         1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: 4JkvIbx9dRAchM7tXDS0jwewb/Ms72OxmBSgGdlWdic=)
                          2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:dc:71:28:b6:46:ad:e6:bd:2b:9a:35:e8:cd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
        Validity
            Not Before: Oct 19 19:02:17 2025 GMT
            Not After : Oct 20 19:02:17 2025 GMT
        Subject: CN=d33d92a664c7c64afaca9e4d0edfe21e00f1f504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:a7:07:d3:fc:b2:8b:0b:ff:70:7c:9f:b2:
                    8f:17:c2:9c:b5:0f:c7:4e:b2:65:86:b3:44:26:9f:
                    1f:41:3f:49:e7:c5:89:a2:c0:3c:18:b6:46:32:54:
                    09:1e:3b:de:5e:41:fa:53:7c:d7:41:9e:e1:7a:58:
                    44:c6:51:26:a4:9a:5f:db:3e:05:06:e4:00:14:cd:
                    75:1b:9a:a7:35:a8:ae:e7:27:3d:04:23:d9:db:e8:
                    09:ec:c5:1d:4f:5d:db:52:b9:4b:2a:dc:b0:13:61:
                    b6:3b:13:e5:a2:67:d6:de:31:1b:25:8f:86:08:e9:
                    5a:5a:4b:f8:ae:18:30:e9:e6:b5:01:6f:c8:45:ea:
                    c5:7c:48:c1:d0:72:fc:fc:71:3e:0e:ac:da:8f:62:
                    8d:85:34:ea:24:1a:3a:a4:c0:57:08:29:7e:06:fb:
                    4d:1d:6c:35:0e:91:46:68:50:1c:a8:25:54:11:9f:
                    61:a3:cc:4a:d2:15:52:ac:ba:7c:96:67:d8:7e:41:
                    07:c2:26:bb:ef:37:d5:3d:6e:5c:fb:4c:8d:5c:2a:
                    d4:65:eb:5f:8f:94:ee:3c:c0:63:8e:db:84:00:1b:
                    c4:8e:09:77:82:dd:bc:76:47:23:24:65:89:14:22:
                    10:88:bd:c8:cc:00:9c:55:dc:60:2f:07:7b:4f:4a:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:92:A6:64:C7:C6:4A:FA:CA:9E:4D:0E:DF:E2:1E:00:F1:F5:04
            X509v3 Authority Key Identifier:
                keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:31:02:08:8c:bf:10:27:fe:59:67:ec:dd:96:5b:c6:1f:c9:
         9b:83:90:6f:4a:25:6a:f4:ec:d6:61:be:e6:3c:bf:e5:76:1f:
         65:1b:ee:47:5d:f8:d9:f5:64:47:c9:93:b9:3c:ca:68:92:eb:
         f6:6d:a7:3b:f7:b9:a5:04:d3:15:4a:8c:66:1e:67:20:3b:77:
         fb:2d:2a:0b:da:3e:6d:8e:94:82:ba:3e:f4:4e:16:a0:34:1a:
         e5:24:e5:95:c5:2a:e6:52:4d:dc:80:bd:fc:ec:4d:02:01:75:
         b1:25:0e:fc:64:48:fb:3a:0a:d8:9c:fd:f7:1b:37:10:2b:0d:
         f5:6c:69:c7:34:26:b5:48:93:c4:25:1b:8e:bb:87:de:e3:ef:
         72:0b:a2:b0:05:bc:99:4e:49:0a:1e:e5:67:8d:85:91:44:df:
         a9:11:33:79:1f:8a:84:34:21:dd:b4:e3:0b:e1:6c:ec:d0:a7:
         73:c5:cc:ab:95:e8:c3:ae:f9:b5:9a:b0:e1:85:a2:d9:71:98:
         7a:bb:d7:2e:54:8b:1a:59:c0:74:9a:07:ba:2d:d4:35:cb:ff:
         0b:fe:41:3c:ec:c2:7f:1e:a3:81:7b:17:6b:ae:88:b8:f9:45:
         ad:08:b2:f7:51:1e:72:b7:f2:52:02:2f:2c:53:0a:42:51:8f:
         d6:a4:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:02 2025 by rpki-client