Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          Pn8lwomYs5jaKg5CKNZ+10UZ6Jn76RKFpeBBoHuKZGM=
Subject key identifier:   70:42:76:A7:88:A4:1C:46:7F:B7:DD:E3:71:27:18:CE:2C:39:EC:7B
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       0199FB7CA4A76E015B55AD4E8409F04C53FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          0875
Signing time:             Sun 19 Oct 2025 08:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:13 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: prC1xFoS1Q2p3nbyb4Cht+bkVdoxYWFmAPbWgqWMKSM=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a4:a7:6e:01:5b:55:ad:4e:84:09:f0:4c:53:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Oct 19 08:01:13 2025 GMT
            Not After : Oct 20 08:01:13 2025 GMT
        Subject: CN=704276a788a41c467fb7dde3712718ce2c39ec7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:71:c3:38:03:2a:1b:72:d6:ab:28:0c:e6:
                    d4:b8:1a:87:4f:a5:86:6e:26:4f:85:86:e7:9e:92:
                    62:20:ab:a5:17:aa:71:ce:cf:60:4c:f2:e5:9e:5d:
                    14:c9:2b:4f:34:1e:42:57:8e:f4:9d:38:39:52:68:
                    ae:e2:d5:07:3b:3b:75:c7:73:73:a6:f6:78:0e:bf:
                    83:d0:ac:5c:dd:7e:32:35:82:8e:cb:33:52:12:50:
                    f4:ff:37:e7:17:6e:18:e0:9d:c7:ae:f1:e5:25:a0:
                    d8:5a:c4:7a:57:9a:7b:88:94:d8:e7:19:d3:e2:d8:
                    57:b8:52:6e:fe:c9:c6:44:8a:3a:92:92:5b:cf:57:
                    0a:0f:3f:6e:ff:53:90:9a:56:ab:77:a5:a9:16:05:
                    c5:7d:19:18:26:46:d6:b5:42:2b:ab:b0:af:18:19:
                    63:b1:f5:ec:5c:d3:b0:f4:2c:9c:28:7c:07:20:c5:
                    67:0a:74:7c:12:10:50:28:1d:18:c6:70:28:70:3d:
                    ff:20:7d:bc:e2:65:af:43:eb:7c:20:23:f2:d8:e4:
                    3c:8f:46:43:c5:50:81:a7:e2:10:eb:c5:eb:c4:d1:
                    ef:54:16:9d:4e:f1:3a:97:81:0f:d1:f5:6b:18:64:
                    37:d8:99:db:3d:69:8d:a7:9e:a6:5b:ec:28:cc:ed:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:76:A7:88:A4:1C:46:7F:B7:DD:E3:71:27:18:CE:2C:39:EC:7B
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:06:05:e9:f9:37:01:6a:93:4d:61:91:2f:8e:28:97:09:
         ba:3f:24:f4:69:d0:89:9f:c9:79:06:5a:0e:57:78:60:8a:81:
         4e:48:9d:85:6f:4f:d5:8c:4d:4b:64:d7:43:90:79:54:13:19:
         72:6f:3a:dd:5d:13:9f:7b:21:68:6e:64:53:f7:cc:4c:29:02:
         ca:7a:85:67:52:55:76:0f:e6:d3:cc:5e:cb:a5:f6:c0:45:fe:
         e8:69:f3:ce:0e:c5:b7:9f:c1:0f:ac:32:e1:ce:f3:f8:b6:84:
         c6:60:0a:d8:77:3c:85:a2:58:bd:b2:29:b3:84:43:08:64:4e:
         4f:c8:b4:24:bd:e8:b8:a3:99:3c:50:7c:d5:6e:3c:2e:aa:a4:
         09:bf:75:4b:cd:89:83:71:83:fe:c7:8e:7b:89:00:31:a4:c5:
         c7:d5:c9:c0:1f:f9:fd:54:bc:4a:36:ed:68:40:b6:4f:3d:21:
         75:c3:00:83:97:fa:9e:85:06:e8:db:1c:70:14:9e:b6:d3:46:
         fd:0d:14:74:fe:91:bc:ab:92:0a:f1:0e:23:3b:97:a6:5f:c4:
         1e:7f:d7:d1:c7:4c:36:bf:b0:ec:9f:f6:f3:58:45:cc:c1:70:
         79:d5:b3:a1:f1:3b:8a:e4:c2:8f:6a:f7:ef:9c:ed:4f:fb:96:
         72:b8:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:11 2025 by rpki-client