Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          rI0CzRnnYzZm3lqBn9eU5cejYrtGG64cEBjHrZ929m4=
Subject key identifier:   87:18:B3:4D:FA:B2:B7:33:11:FF:94:08:1D:18:D5:5E:36:B5:F7:CF
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       019A00A2E1604D93EFE3326581BDE3E967DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          0215
Signing time:             Mon 20 Oct 2025 08:01:05 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:05 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:05 +0000
Files and hashes:         1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: 0dmdQ0jeZJxqxgICrRsxOVtTmIBNCnFVXTlqo72lkiM=)
                          2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a2:e1:60:4d:93:ef:e3:32:65:81:bd:e3:e9:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Oct 20 08:01:05 2025 GMT
            Not After : Oct 21 08:01:05 2025 GMT
        Subject: CN=8718b34dfab2b73311ff94081d18d55e36b5f7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:e9:a2:8b:33:07:15:e3:d7:fa:4b:b9:92:
                    83:d1:a1:69:19:1c:d7:1e:d1:e8:90:57:75:8f:44:
                    51:66:ab:5e:52:69:a9:dc:ad:46:78:7d:04:9c:64:
                    53:f5:e8:7f:eb:ab:a2:50:1b:e3:be:1b:36:92:dc:
                    ac:29:05:66:74:54:4e:f9:a2:bf:ae:ea:b6:08:83:
                    70:f4:59:c0:d5:7a:58:91:cf:e2:59:d7:7f:07:d7:
                    66:c5:86:7a:45:ac:03:95:92:1a:f2:3f:0a:20:47:
                    95:4b:a5:55:bc:9b:05:4d:4b:f7:6a:ce:97:ab:86:
                    c1:c3:d5:fb:a5:e9:e0:94:26:f2:03:bf:8b:17:4a:
                    bf:11:8d:d4:b6:9d:d3:e6:10:2c:21:66:2f:35:2f:
                    cd:e4:4d:36:29:6d:d3:da:d0:18:de:68:fa:2b:32:
                    94:d4:54:2c:4e:a1:d4:e0:47:e9:d0:c0:6a:0a:24:
                    ba:1a:ba:24:d5:a8:87:75:a4:e3:e9:21:e6:56:57:
                    59:81:13:67:df:e5:67:5c:66:06:4e:7e:73:06:d3:
                    64:de:59:43:51:5e:37:38:72:25:3b:01:9f:9e:3c:
                    e2:cd:2e:ae:f5:1f:bf:4c:ee:70:a7:b7:d2:0a:3c:
                    da:50:03:d4:37:19:38:27:fd:1f:fd:6b:e4:11:51:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:B3:4D:FA:B2:B7:33:11:FF:94:08:1D:18:D5:5E:36:B5:F7:CF
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:e2:67:dc:5f:77:21:8f:5c:b1:0d:56:8a:d0:26:c8:a4:
         4c:55:56:3d:d5:bd:bc:54:bb:ad:43:ad:80:a7:55:de:6a:ea:
         c4:9f:30:55:f5:f4:ee:37:71:5e:e5:db:b3:4d:85:b9:10:08:
         53:7c:73:07:f3:f0:3b:dc:76:0b:d2:a1:94:a1:08:17:0b:43:
         3d:32:59:d5:40:b4:ab:58:d2:d9:c5:3a:72:25:8d:74:99:17:
         e2:2a:36:7c:64:a1:e5:41:8c:8d:09:6f:68:10:97:eb:56:a0:
         fd:f6:9b:d5:8b:4e:b5:6f:e6:ba:43:73:9f:77:c3:25:d4:60:
         08:e7:0b:06:5b:e6:b5:78:e3:53:2d:e8:4b:28:e4:eb:d8:bb:
         ac:86:8b:ee:c6:3f:d8:0f:e7:d1:84:82:9f:aa:87:47:5f:2d:
         3b:b3:72:ab:ff:be:ef:59:36:8c:b2:5e:98:63:5e:d8:2c:e3:
         3c:63:b5:24:dc:ed:7f:95:0c:32:a2:85:32:c1:24:22:f6:0d:
         00:34:1d:89:5f:22:d6:33:28:6e:9e:94:f1:17:50:05:cf:51:
         3b:8c:a2:39:f4:e0:cf:52:a6:35:39:3d:ed:1d:0f:ec:c6:40:
         af:99:93:25:e9:d8:cc:71:2b:5f:0c:ca:02:af:c2:57:70:c3:
         35:2b:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:52 2025 by rpki-client