Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File:                     XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier:          32gpZu6gncE9qJsI/ov+DnfyQfN8uxulEagAs77lRgQ=
Subject key identifier:   23:C1:91:BE:37:20:6C:7E:90:52:56:E0:FD:56:B2:75:32:A6:89:BA
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer:       /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial:       0199FBEB056AEA0FE73C9E03B8BAF734419A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 10:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:47 +0000
Files and hashes:         1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
                          2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: F9NwVSWT/qKOwO8eRI7V0Im1GA51wN1w22Fb7ztFWN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:05:6a:ea:0f:e7:3c:9e:03:b8:ba:f7:34:41:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
        Validity
            Not Before: Oct 19 10:01:47 2025 GMT
            Not After : Oct 20 10:01:47 2025 GMT
        Subject: CN=23c191be37206c7e905256e0fd56b27532a689ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:75:65:40:12:94:90:6f:7e:ee:a9:1f:2d:
                    b2:30:9c:05:bf:de:e0:28:9f:0c:cf:b0:10:bb:bd:
                    17:0a:0a:f0:c2:8d:53:93:86:0e:77:fd:32:06:d3:
                    b7:5f:d7:e7:c5:aa:eb:73:59:d1:5e:3f:4c:e6:1c:
                    14:d1:25:82:56:c9:22:5b:a9:63:4f:c2:bf:d7:6b:
                    9e:bc:e6:7c:f0:e0:e0:c6:24:81:34:f1:18:7d:04:
                    80:90:8b:db:e9:80:84:fb:e3:00:99:b0:de:98:4c:
                    6a:73:4b:87:d1:7c:ae:f9:2d:c9:92:d1:98:33:37:
                    67:4b:42:5c:91:19:ee:18:18:14:a2:df:1f:d3:53:
                    dc:49:cb:1e:dc:19:7f:a0:7f:b4:6e:1e:e9:f8:ff:
                    ab:2c:86:0d:a5:00:28:26:23:6c:42:ae:bf:99:1c:
                    b1:cd:14:31:a3:4e:cf:f0:d3:63:c5:89:2f:ff:72:
                    af:3d:c0:01:fe:2c:2d:11:77:e0:4b:ac:42:f5:15:
                    53:6a:fc:b2:fc:91:cf:28:2e:ac:b6:31:02:ff:55:
                    44:3d:cb:bb:b4:f9:d8:b7:95:0c:b8:c2:55:56:4c:
                    a8:df:1e:dd:b5:f0:2a:2c:d1:7f:9e:95:98:35:b9:
                    66:d9:24:49:fd:67:b2:b4:8d:93:97:d7:ee:19:fa:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:91:BE:37:20:6C:7E:90:52:56:E0:FD:56:B2:75:32:A6:89:BA
            X509v3 Authority Key Identifier:
                keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:ff:7c:cd:34:f5:80:15:ca:d2:96:2a:d7:e0:2f:20:ff:
         ad:28:a9:18:76:97:ef:41:32:ac:0a:b6:67:96:da:97:cc:a4:
         81:e6:95:2e:70:10:7a:b5:fa:e0:6f:c5:72:d8:f1:62:c7:46:
         8d:3f:b4:76:0b:98:7f:c9:72:0d:bd:26:5f:27:d8:30:1b:d6:
         79:23:2a:58:0b:af:65:14:1f:f5:ef:41:a8:06:ff:8c:68:8f:
         18:33:fd:71:52:4f:8f:ab:32:8a:c1:a8:3d:c9:6d:5a:c1:fd:
         91:26:ec:5f:05:4a:dd:c6:06:77:ce:0a:3a:48:bf:97:c0:2d:
         ca:17:56:de:f1:1e:3b:db:8f:b4:97:2e:34:a7:ae:e0:2c:a6:
         a1:fb:f1:a9:84:bd:04:f0:72:84:f5:f2:dd:88:66:c2:85:19:
         1e:cb:1c:9d:84:b0:af:08:8c:26:ca:d8:56:18:ef:37:23:a7:
         9c:22:52:e7:fd:bc:99:d1:b0:49:69:9b:7c:ea:ed:2e:67:98:
         70:4a:3e:de:2c:93:0b:01:1e:e2:70:e2:49:ee:2f:9e:f0:aa:
         40:62:78:cf:b1:53:75:b2:92:10:f0:7e:57:b8:bd:c6:bd:56:
         88:d1:9c:7d:e0:95:82:86:62:c3:48:a7:d3:ee:4f:f3:5c:c8:
         6b:a0:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:19 2025 by rpki-client