Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File:                     SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier:          nAchFVKGfeo5G7McmjR8K8EbYU7B03AwCNDuT+ThTdk=
Subject key identifier:   12:A4:38:F1:EC:8D:D1:C5:20:9A:B1:1B:7C:38:43:94:3D:3D:44:06
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer:       /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial:       019A02FEED13C5E2F8A9708DD340A1609D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number:          0BED
Signing time:             Mon 20 Oct 2025 19:00:52 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:52 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:52 +0000
Files and hashes:         1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
                          2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: cvVjNTgxwgcPmbaBBXLZzI5NG0hjkSg+7qETg10hk6s=)
                          3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:ed:13:c5:e2:f8:a9:70:8d:d3:40:a1:60:9d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
        Validity
            Not Before: Oct 20 19:00:52 2025 GMT
            Not After : Oct 21 19:00:52 2025 GMT
        Subject: CN=12a438f1ec8dd1c5209ab11b7c3843943d3d4406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:55:58:f6:a5:84:af:f3:4f:be:38:08:07:
                    71:0f:45:1a:c9:87:27:f6:ed:1f:4d:1f:66:9d:4f:
                    c9:b8:e2:7d:e2:ab:ee:24:c8:54:b6:10:1e:9d:f6:
                    6a:c5:78:98:ee:70:04:20:53:74:31:84:1b:2e:ec:
                    ed:d4:3a:c1:16:62:b2:33:93:f7:b6:4c:c6:68:0b:
                    8d:c7:0f:6f:58:41:ee:64:20:85:de:4b:d2:c4:ac:
                    96:e8:77:01:04:20:cd:0a:cd:f9:d4:da:d6:ee:5e:
                    ed:53:bb:d5:1b:5d:6a:fe:35:fc:9c:d3:09:c7:4f:
                    ea:3b:ad:0a:e5:e1:24:ee:df:d2:20:46:63:97:f9:
                    b7:b2:22:30:d4:da:e8:1c:20:46:29:cb:21:6a:3d:
                    5e:76:c3:73:2a:89:3e:81:92:ea:32:51:a4:cd:a3:
                    ae:19:fb:4a:ce:95:d7:d5:d8:4e:6f:1a:97:56:a4:
                    8d:05:d1:ef:d3:8f:ce:62:bf:d8:9d:49:17:f3:88:
                    ac:a7:de:42:a3:bd:74:12:d2:70:e9:55:a5:dc:c0:
                    cd:64:29:a8:15:6c:e9:61:22:89:76:ff:0a:a7:f4:
                    27:19:91:02:7e:7b:84:f8:c5:a8:14:0a:90:1a:75:
                    1b:53:b7:b3:ce:d4:81:6e:8b:1d:b4:de:90:51:50:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:38:F1:EC:8D:D1:C5:20:9A:B1:1B:7C:38:43:94:3D:3D:44:06
            X509v3 Authority Key Identifier:
                keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:8f:b8:ab:49:f6:28:e1:13:dc:06:62:45:13:f0:97:5d:
         a0:13:f4:d2:f5:36:6b:96:96:c2:b3:10:e8:76:bd:87:86:7c:
         76:37:47:be:7e:16:5e:d9:09:dd:fd:36:ab:1f:9e:f7:13:28:
         e8:2a:b7:f8:86:63:0d:fa:a5:9d:57:3b:cb:13:53:77:27:12:
         6e:e6:f3:2d:51:81:8f:c1:85:f8:d7:37:c3:5c:11:20:ec:cc:
         ba:42:76:42:7b:1f:cb:e4:31:00:a7:d9:06:19:4f:20:d7:6a:
         4d:e0:2b:ba:21:1b:c3:d0:c5:99:38:0e:8d:ef:1e:52:0e:bc:
         47:b7:ad:86:dc:77:dd:1e:83:a8:0d:ae:8f:61:ba:fe:92:6b:
         64:35:96:8a:82:2f:7e:52:ec:02:b8:1e:b9:88:06:60:1f:ae:
         65:5e:8c:ec:48:de:96:06:4c:cc:e6:f8:cd:6b:a7:82:d6:00:
         7b:e3:4d:ea:93:e5:72:99:c9:83:ef:e6:9f:9f:43:86:33:d5:
         49:02:dc:fe:a7:66:5b:e3:02:4f:da:bf:f6:31:b1:d2:e1:e8:
         1d:c8:41:e1:06:50:4e:94:cf:28:0e:dc:b7:d2:62:7f:47:73:
         75:a7:bb:4e:c8:a7:d0:72:fe:54:ca:98:5c:d4:d6:d3:27:64:
         78:0b:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:23 2025 by rpki-client