Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          VXWEOAWnisqnI/WXiYX6qKADMlyxvE1eIjvz/jjDJZg=
Subject key identifier:   65:5B:A0:C5:72:D0:FF:BE:A4:81:42:F1:F3:E6:8C:29:CE:E1:C9:7C
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       0199FE46C65772596092DD519AA1AF2F93EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          07A6
Signing time:             Sun 19 Oct 2025 21:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:15 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: 4GN2j9syTF4fflErr5ltzke3oDbowWUQGJpIKaq+lSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:c6:57:72:59:60:92:dd:51:9a:a1:af:2f:93:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Oct 19 21:01:15 2025 GMT
            Not After : Oct 20 21:01:15 2025 GMT
        Subject: CN=655ba0c572d0ffbea48142f1f3e68c29cee1c97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:b3:d0:b7:5f:b3:5d:da:80:d3:86:30:8c:
                    c2:ab:65:d9:9b:dd:68:2c:de:12:59:0b:8c:06:6d:
                    1b:f1:df:47:46:74:3c:cb:bd:01:1f:2d:51:d7:8d:
                    7a:60:d3:06:71:5c:29:0f:a3:1a:fb:de:fa:25:b4:
                    0f:50:f9:26:4d:1e:b0:72:a2:b3:25:3c:38:bb:94:
                    37:09:4f:8e:6d:af:63:ce:7c:61:e4:c2:d6:14:54:
                    1a:b7:b7:01:06:9e:0a:fd:c5:7e:6c:ba:04:d6:d2:
                    50:55:7f:7b:91:3b:8f:95:9d:24:48:25:41:51:5f:
                    2c:cd:dd:2c:f2:0d:7e:de:76:81:72:f5:cc:a8:e6:
                    f9:47:c0:9e:1e:25:0d:df:32:52:7a:66:0f:43:9b:
                    ba:86:0d:4c:b1:40:c3:a0:12:16:5b:69:0a:6a:a6:
                    b2:39:79:d0:5c:51:51:86:81:8b:7a:57:e0:74:5a:
                    b9:05:54:26:cc:f1:ea:0f:25:9f:66:7c:cc:3f:f4:
                    d8:37:32:16:bc:d8:50:ba:47:63:a0:ce:e9:e5:58:
                    33:2c:b1:c8:d4:54:9d:6a:2c:1b:ea:78:16:97:f7:
                    4d:49:af:1f:05:1c:64:20:71:82:38:3c:1c:d6:13:
                    4e:63:a8:e7:31:4e:80:76:a5:65:e3:8a:ff:3f:8e:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5B:A0:C5:72:D0:FF:BE:A4:81:42:F1:F3:E6:8C:29:CE:E1:C9:7C
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:64:ed:02:14:97:02:02:ab:43:6b:0b:a6:aa:be:bf:03:cb:
         39:c6:d9:3b:28:84:28:32:98:91:55:1f:a3:60:65:4e:35:4d:
         9b:40:5e:99:72:35:d1:8d:47:39:7f:ae:b6:09:44:d3:b9:9f:
         8d:99:fd:a1:d8:d4:81:15:3f:a6:ef:65:8f:bb:37:e6:4b:d1:
         05:e5:bc:da:c5:d5:6c:ae:87:9c:ae:a2:0c:bf:e1:60:f3:a6:
         b4:c0:a6:32:69:5f:95:0c:55:e4:99:d8:80:19:e1:24:b8:78:
         ac:66:db:bc:e2:b7:c3:3e:f6:f1:4a:ad:78:04:c3:1b:5a:73:
         eb:11:b1:56:5a:1a:c0:ae:72:89:53:3e:61:48:e5:0f:0a:a2:
         a8:0e:33:90:59:89:12:28:15:4e:c4:e3:ce:81:3a:f2:26:de:
         3d:13:84:fe:90:aa:be:8f:ee:db:45:05:d0:de:a6:fd:7e:15:
         1c:39:fd:75:8e:de:f6:64:55:7b:90:e5:e0:79:64:07:cf:19:
         74:a9:45:a3:9f:96:ef:fe:4a:51:d7:03:9f:90:82:ae:c3:61:
         9e:c9:89:d9:4e:76:ba:0f:4f:d2:62:0a:f4:9c:a9:f7:d7:2b:
         71:d8:29:6d:30:e6:c7:1d:a7:43:82:7c:51:7f:1d:91:da:31:
         d6:d7:5e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:51 2025 by rpki-client