Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File:                     704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier:          K2Ek9fg4rnzeDYOThfZax/HPswMr4v3p6/aw79crxpc=
Subject key identifier:   25:B7:3D:F3:F9:A3:75:88:BF:01:5C:19:39:25:A2:6E:FB:03:65:9A
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer:       /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial:       0199FC8F933957EB56E85C1ED1CFBEF17868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number:          05F8
Signing time:             Sun 19 Oct 2025 13:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:31 +0000
Files and hashes:         1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
                          2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: P5KKZPgpDPThoW1JfVtyDYR0T/e62fP+fzseM/wlWdA=)
                          3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:93:39:57:eb:56:e8:5c:1e:d1:cf:be:f1:78:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
        Validity
            Not Before: Oct 19 13:01:31 2025 GMT
            Not After : Oct 20 13:01:31 2025 GMT
        Subject: CN=25b73df3f9a37588bf015c193925a26efb03659a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:69:17:a2:ec:f3:15:01:85:ee:ef:77:ac:
                    83:62:9d:2e:68:e5:59:cb:b3:ed:4e:a4:6b:aa:92:
                    dc:3e:26:b2:16:9f:2a:08:82:fa:39:d6:81:a5:bb:
                    f3:0a:86:2c:94:9b:0e:42:90:04:af:0d:41:6e:c4:
                    59:87:f8:1f:f3:88:0e:4b:c1:ab:24:8c:24:93:48:
                    f6:4e:50:09:af:3f:d8:23:22:c4:3f:4e:89:c6:7f:
                    38:5c:1d:69:ea:1c:96:f5:11:34:94:d4:ea:b3:a7:
                    65:45:f8:fd:5f:92:e8:57:1d:88:80:f8:ef:03:93:
                    58:4e:58:10:51:e1:e0:94:2f:97:a2:ac:2b:5d:bb:
                    16:81:7b:3e:66:af:be:1c:a1:3b:22:ef:ad:b4:05:
                    c8:80:8f:b1:23:6f:33:fc:60:cf:a7:48:80:fb:83:
                    25:a0:7a:51:5b:84:68:0f:41:74:a4:f6:ec:82:4a:
                    44:3b:b1:29:30:47:16:f2:83:ec:b9:d1:40:7e:83:
                    31:c7:64:41:24:ae:a7:31:74:f1:97:b5:d1:46:43:
                    a2:1f:92:90:83:4a:b4:42:32:4f:6b:fb:e4:2c:97:
                    4e:e9:4c:dc:ed:24:28:f6:a0:9a:a6:40:d3:af:e0:
                    25:6f:e8:11:82:38:ab:4f:bf:b8:8e:17:70:ef:43:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:3D:F3:F9:A3:75:88:BF:01:5C:19:39:25:A2:6E:FB:03:65:9A
            X509v3 Authority Key Identifier:
                keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:f3:05:d3:02:c9:48:61:ed:b2:ab:df:4e:ea:82:78:c8:
         1b:54:6c:d6:00:58:14:44:d1:49:2d:9d:f4:f3:0a:5f:41:9e:
         19:73:d0:d4:d3:ba:e6:f9:2f:23:ab:0f:61:12:99:88:45:9b:
         91:72:68:8f:1c:0f:51:6e:39:3d:d2:ae:61:63:c0:17:89:57:
         8b:5a:21:ea:6b:db:0c:79:53:df:e1:ad:7c:6a:72:61:e4:b4:
         bc:2c:ed:ca:9a:83:d0:7c:c6:2d:65:e7:85:84:38:97:92:4e:
         d4:19:45:7d:2e:63:7f:bd:b2:16:98:0b:d9:0d:ea:e5:48:d8:
         3a:2d:12:a6:6d:8b:eb:e9:a7:ec:51:b9:cd:4d:94:9e:c0:c4:
         36:b7:4c:b9:26:4d:77:ce:08:49:f2:52:e3:c4:4e:be:9a:b2:
         8f:eb:6e:a6:86:3b:2f:b6:1d:2a:67:4b:ff:29:e1:e0:bd:b4:
         a3:c8:c2:cf:89:b2:76:31:f8:50:71:3a:90:a6:4f:03:5f:0d:
         d6:df:21:3e:c7:d7:a6:06:96:c8:a7:36:63:64:84:23:45:5e:
         cc:3e:35:57:d1:91:3e:0d:32:03:2d:51:ed:d4:c6:30:c8:df:
         45:5e:c8:b9:52:5a:9e:32:89:e9:65:4c:d4:bb:ca:51:3b:30:
         3c:e7:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:53 2025 by rpki-client