Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          zdsojOYduw29SLANbtV5LiNzWNBojkmiHi3SZfQjb64=
Subject key identifier:   B3:39:83:D9:A1:E7:55:42:FC:31:C0:28:01:7E:7D:34:16:43:2A:CF
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       0199FBEB02B30062399397B15135F84CD24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          0453
Signing time:             Sun 19 Oct 2025 10:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:46 +0000
Files and hashes:         1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: qslB4y7TXOk8yXAdIGcvrMjII/jnGrqY3DT478Eh1xo=)
                          2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:02:b3:00:62:39:93:97:b1:51:35:f8:4c:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Oct 19 10:01:46 2025 GMT
            Not After : Oct 20 10:01:46 2025 GMT
        Subject: CN=b33983d9a1e75542fc31c028017e7d3416432acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:4a:f6:78:ca:eb:7d:33:35:03:fc:b3:b3:
                    5b:78:ce:bc:18:2f:0f:e4:96:95:f3:87:f6:35:81:
                    c4:3c:96:ef:ed:a6:31:e4:6b:66:05:f5:58:35:ab:
                    63:7a:a8:f6:c6:42:50:6d:56:53:06:0a:cb:82:cb:
                    52:a2:79:01:be:66:f0:91:fb:4c:b5:00:ed:b0:a0:
                    48:24:bb:55:12:07:7f:2d:d8:45:d0:0e:2e:80:9d:
                    76:1d:3d:70:51:e3:a8:00:43:a6:36:66:96:6c:01:
                    99:94:76:70:99:52:2b:a6:ef:e2:c8:7c:bb:e1:ac:
                    db:ec:60:16:67:e1:9a:d9:7f:18:f4:68:50:a2:2f:
                    56:58:fe:22:4d:1f:e5:dc:7b:fe:e3:84:33:8d:8b:
                    8c:e2:fb:84:6d:c8:21:98:5f:ed:99:89:68:35:31:
                    9c:da:57:1f:b1:07:71:27:6c:29:48:fd:d2:78:e2:
                    ed:df:56:6e:cd:3b:4a:ff:8e:e7:21:19:40:f5:80:
                    08:a5:4c:8c:73:a8:b3:32:30:20:3f:a6:93:67:86:
                    af:40:e7:23:7b:7e:be:e4:ab:5e:b5:38:fd:21:f4:
                    0e:4c:84:63:ae:79:92:f5:23:78:9a:5e:2e:27:6b:
                    ba:38:ec:f0:4e:a8:bc:07:5c:ae:de:d8:24:09:35:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:83:D9:A1:E7:55:42:FC:31:C0:28:01:7E:7D:34:16:43:2A:CF
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:d6:8c:ec:31:71:96:91:a0:b5:81:34:21:35:3a:ee:33:
         6f:1e:2c:32:24:78:7d:7c:37:65:82:1d:98:2e:aa:31:30:f7:
         e9:30:4d:71:40:bd:d0:fd:e6:42:27:37:8b:cd:21:78:9b:1d:
         44:24:65:df:d9:0a:8b:ad:ba:3a:01:39:47:a2:95:f5:74:9f:
         95:81:be:bc:57:4a:61:9d:02:3c:2d:1b:5c:98:08:27:8a:c2:
         fd:bd:1d:bf:f1:cb:50:f0:77:f9:26:a7:cb:ac:44:56:47:b6:
         0c:f3:bc:38:fd:22:6d:16:7a:0e:c0:a5:cd:52:75:d7:46:4c:
         5a:33:65:90:42:11:30:e9:92:01:a4:51:3f:8c:b5:9b:d4:8e:
         3d:ac:7c:e5:8a:20:c9:d3:83:7a:b4:c9:e4:6e:a0:53:5c:4d:
         70:19:e2:ec:30:02:98:42:3e:8f:56:92:c6:04:aa:d0:b9:2d:
         89:42:99:56:85:8e:71:a2:de:9f:29:9b:73:0b:cb:a8:50:fd:
         b5:bc:b0:05:5f:18:45:7f:17:f7:ab:0b:ef:c4:d2:27:d3:c9:
         22:ed:db:e0:a7:0c:09:66:80:ed:4c:cc:a0:2b:59:8b:2b:91:
         84:e4:96:20:bd:b8:54:15:da:01:a4:f6:73:d3:b0:f0:4f:cf:
         88:69:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:43 2025 by rpki-client