Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
File:                     amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft (raw, json)
Hash identifier:          jZYaMpE6bjqq9pUczy0W1FnVq7d2F2vHh7/LDv+1Y3M=
Subject key identifier:   35:AE:79:FA:E2:05:75:F1:7F:A7:65:75:DD:A7:61:9F:45:0E:DA:92
Authority key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3
Certificate issuer:       /CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
Certificate serial:       0199FC21D2FCF8A5FE9A39FA1BBBDD30D5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
Manifest number:          55
Signing time:             Sun 19 Oct 2025 11:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:39 +0000
Files and hashes:         1: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl (hash: Be+i3e9t7Jz92AS441qoLScy8N/VZJYcyuDe3hQIK28=)
                          2: qS9lbWxycbZu6RoyXldJwuJR6TM.roa (hash: qx382/Be7wHuXq5Yjg5wuqIZocz2BMbKerwk1urC5hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:d2:fc:f8:a5:fe:9a:39:fa:1b:bb:dd:30:d5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
        Validity
            Not Before: Oct 19 11:01:39 2025 GMT
            Not After : Oct 20 11:01:39 2025 GMT
        Subject: CN=35ae79fae20575f17fa76575dda7619f450eda92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:4a:aa:1f:ec:ac:fb:32:9e:f1:37:b0:5c:
                    58:05:85:fc:bc:42:7a:62:f7:74:c1:aa:03:6a:b9:
                    d0:29:42:34:51:a5:a6:23:b9:63:80:12:69:b4:23:
                    6f:5f:72:9a:9e:60:c2:cb:63:a8:fe:20:b2:2d:e6:
                    b4:4f:89:05:33:5a:03:59:a1:f3:69:30:0e:81:79:
                    a2:16:fd:9b:c3:6d:17:da:2d:90:26:f5:90:27:19:
                    4b:89:6c:f1:16:39:7e:e6:25:81:8d:4b:20:b2:cd:
                    b6:9d:72:9f:8b:3d:6a:1b:ac:5a:a2:ba:d5:2c:eb:
                    0f:97:a5:f1:8c:65:35:6f:bc:e5:4a:d6:4d:9e:04:
                    a0:08:3d:9b:22:df:99:d5:05:25:48:4d:13:0c:de:
                    e8:5d:ad:e4:f8:19:bb:87:37:fa:15:23:c4:ab:ca:
                    0f:28:eb:f9:87:57:21:a0:29:ab:ec:8f:f6:c7:8b:
                    2c:9d:27:75:9b:1a:0b:7b:91:7c:32:57:2d:70:83:
                    c7:92:68:6b:d9:47:ed:2d:9a:64:4e:8a:1b:78:08:
                    90:7c:8d:4f:92:86:8d:4d:be:ac:08:dd:27:fd:0f:
                    53:b2:61:25:32:e8:d3:c2:35:f7:84:14:91:09:a1:
                    06:8f:ab:34:8f:15:21:a5:66:b5:51:49:25:a2:bb:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AE:79:FA:E2:05:75:F1:7F:A7:65:75:DD:A7:61:9F:45:0E:DA:92
            X509v3 Authority Key Identifier:
                keyid:6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:14:8b:d9:97:95:4f:57:b1:31:02:4e:f1:fe:7a:4a:2a:
         ff:2e:05:39:40:92:48:2c:63:b1:d9:51:2a:a2:48:51:d9:a0:
         21:d7:cd:c7:4c:4c:42:2b:8c:65:04:83:89:b6:02:ec:1c:4a:
         ef:a9:76:84:9d:ce:25:ac:27:a1:0f:3f:67:b2:bf:c6:d0:80:
         08:d4:cf:f3:08:91:67:1c:60:51:62:ba:b7:5c:16:97:42:e0:
         ef:15:28:13:79:5f:df:6e:80:b5:c4:63:d2:52:52:c1:bf:fe:
         81:3a:6b:c9:5b:83:b3:0a:81:36:08:48:69:6b:17:15:47:1d:
         7d:5a:81:f7:c9:40:bb:8c:f5:6b:fc:9b:45:42:5d:69:9b:fa:
         05:42:73:fa:40:5c:a7:e7:a1:88:4f:fe:27:fe:a2:9f:32:ac:
         31:3b:b3:52:74:ab:3f:ca:ba:53:a0:d6:1c:ac:37:c5:4d:c8:
         3f:16:53:69:87:2b:6f:ce:5b:98:d1:69:c1:d2:49:e8:aa:4d:
         f1:8a:83:ac:ee:fe:1d:fe:4f:71:8d:42:9f:e7:99:48:83:4c:
         0b:62:31:6d:cc:80:b4:60:2e:72:97:68:1d:2e:7c:05:37:e3:
         2d:9c:fb:1e:da:21:64:6b:66:2a:b1:70:5d:ed:42:08:46:76:
         85:e9:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:17 2025 by rpki-client