Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File:                     xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier:          RUwwvlE+O77V1e39+ZoGv4BGO5BOYK4VfqnDMslDmjs=
Subject key identifier:   1C:6D:6D:BC:12:40:A5:D7:16:FB:13:6B:FD:27:20:0A:EA:D5:F3:A6
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer:       /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial:       0199FAD8029F038A5C9BEE9D8C00A48DD8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number:          0D63
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
                          2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: 3KAyGoR/8U5WGT6P650AIGNAH/kVpuy5py3tfeGmsXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:02:9f:03:8a:5c:9b:ee:9d:8c:00:a4:8d:d8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=1c6d6dbc1240a5d716fb136bfd27200aead5f3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:30:10:06:40:a7:2f:9c:79:26:53:c6:45:
                    4d:bf:23:33:b2:78:97:b2:93:77:6f:a7:41:a5:49:
                    29:13:46:2a:48:44:9c:ad:66:17:e3:78:2b:31:da:
                    48:eb:a0:a1:87:10:d2:6b:b7:b3:2c:6a:01:ab:2f:
                    4f:0c:2a:08:33:19:45:af:9a:68:14:42:c8:ee:ca:
                    36:47:2d:f8:6b:57:b0:aa:99:cf:d6:2f:4a:f8:3e:
                    db:05:e7:f2:b6:a6:b7:ab:40:c2:f4:51:29:f5:fd:
                    a7:72:5a:1d:77:d7:7c:58:34:5e:cf:16:30:82:0f:
                    69:4f:95:d1:6f:8f:d4:8f:51:8e:d2:50:54:36:99:
                    67:1d:88:62:b5:8f:87:8a:97:d3:c9:8b:40:30:cd:
                    7b:00:a7:45:b9:77:58:00:6d:93:5e:2d:15:4d:45:
                    4b:33:9b:7b:9c:19:9b:44:cc:98:c7:ea:08:a8:4f:
                    4b:e2:9b:ef:be:05:bf:d7:f9:41:c7:38:04:77:3d:
                    39:69:27:e9:ec:74:3c:7e:1c:8e:3e:d7:ca:2d:5b:
                    dd:66:00:fc:2e:17:96:e7:ab:a1:ba:19:61:3f:47:
                    56:8f:de:f9:40:2d:9d:76:64:72:1e:fa:c5:70:2a:
                    bc:79:7e:1f:96:fc:ca:62:43:fa:1c:ed:28:bc:b1:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:6D:BC:12:40:A5:D7:16:FB:13:6B:FD:27:20:0A:EA:D5:F3:A6
            X509v3 Authority Key Identifier:
                keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:eb:e2:07:85:6e:85:40:d4:fc:6c:dd:b1:3e:c3:50:b5:
         29:07:98:9a:12:b4:0a:7c:18:69:cd:08:40:e5:97:17:9f:e7:
         95:2e:81:09:5c:a1:52:fa:29:c0:c7:8e:57:bd:66:db:93:1f:
         70:7a:dd:b1:8d:51:c1:ce:6a:90:0a:3f:a0:19:02:77:55:b5:
         d9:d6:c2:43:6f:84:6f:6d:26:2c:ea:89:f9:90:01:c9:09:46:
         fa:00:0f:21:f4:f1:75:d4:08:b6:85:fa:97:c7:1f:ea:4b:38:
         36:a2:5c:02:d7:d9:89:fd:8b:7e:be:19:55:e1:a4:f2:ee:74:
         02:bb:52:47:e6:f7:2d:95:03:bd:37:97:cf:6b:79:96:78:0b:
         a6:89:70:36:57:bb:14:06:e0:b0:8c:02:97:9f:2b:be:60:17:
         89:f3:38:a1:83:1b:c5:a3:17:b1:d4:02:f9:f8:c5:2c:41:94:
         c8:16:a7:37:c2:22:81:6c:ac:ef:b4:1d:a8:1b:16:d0:af:f8:
         b8:a1:16:ea:27:c9:25:b4:a9:a8:56:59:bf:9e:27:ff:74:30:
         04:c3:00:e4:34:84:93:83:66:1e:e4:6b:2e:0f:c1:92:c2:04:
         b1:af:5d:d7:3d:3c:65:a2:90:73:87:09:f2:2b:53:23:80:1f:
         3e:14:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:52 2025 by rpki-client