Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          bkrH1Xk2Gw8tLr32cfVzTa9tQdkWGKr4LKKJAEJ2hVs=
Subject key identifier:   B4:6B:86:3D:25:BF:08:1F:CD:78:E1:92:13:D0:93:0B:B2:45:74:71
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       0199FE7DA59C5BB2895F40DFC194E3FD2702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          15B5
Signing time:             Sun 19 Oct 2025 22:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:11 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: /2nqCfIk9WRoYRV4PpH0hqu0uNaJng7eV9mMvFHRiFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:a5:9c:5b:b2:89:5f:40:df:c1:94:e3:fd:27:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Oct 19 22:01:11 2025 GMT
            Not After : Oct 20 22:01:11 2025 GMT
        Subject: CN=b46b863d25bf081fcd78e19213d0930bb2457471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:cf:ae:b0:33:19:86:f2:36:24:d7:b4:f4:
                    0e:d7:95:ec:65:10:79:b7:66:07:8c:3f:54:59:00:
                    2e:cc:34:bb:4d:3e:f9:eb:f6:12:f4:4c:db:5b:95:
                    b8:b1:12:06:f6:62:01:e7:fa:cf:30:25:9b:d8:2f:
                    75:e7:17:f4:e6:81:8d:33:0f:ea:ba:0f:fe:54:22:
                    50:cd:eb:e0:64:15:4a:e6:94:06:b7:49:94:c0:c8:
                    ea:32:91:8b:24:34:0f:49:d8:6c:a2:63:25:11:f1:
                    e9:33:d4:59:ab:8f:94:d9:dc:10:db:c0:fc:3c:4d:
                    92:62:21:95:09:1e:4d:ba:e9:4d:50:c1:1e:79:a7:
                    7c:10:cd:5a:a2:17:3c:d3:c8:c4:eb:3c:e7:6c:a8:
                    ec:fd:e9:73:ec:f2:99:e5:65:c0:fd:ab:f5:a8:c9:
                    ea:aa:dc:2e:4b:99:d3:85:fa:43:b6:55:f6:ec:95:
                    26:93:66:af:39:1d:58:79:46:eb:6e:ab:39:95:ec:
                    60:6d:64:fe:af:56:10:c7:0f:40:9d:f0:42:ab:08:
                    ef:56:fe:0a:a4:77:54:30:76:5c:3f:06:db:b1:9b:
                    94:0a:5b:75:4d:b3:b8:1d:0a:f1:c7:11:d0:3e:67:
                    bd:7e:b0:9b:b2:30:54:80:98:cb:15:cf:ca:da:80:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:86:3D:25:BF:08:1F:CD:78:E1:92:13:D0:93:0B:B2:45:74:71
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:91:7d:50:e0:00:29:6e:fe:c7:c5:6d:d2:39:67:6c:ea:77:
         01:f5:89:f5:ed:d9:ff:a8:1b:02:bf:59:b9:91:78:c2:03:78:
         86:49:a1:47:ea:d6:6d:f1:b8:d7:a8:83:14:21:67:3c:ee:66:
         63:64:af:80:50:99:91:50:38:c1:b8:4b:8e:df:94:9d:56:6a:
         bb:c0:44:23:53:4a:72:60:af:c0:af:8e:aa:80:f0:f0:07:a4:
         8d:b1:3e:ff:3e:69:19:c3:bf:1e:5b:00:db:72:d7:e9:c2:b8:
         a1:37:5d:41:fc:bc:8e:3b:9a:1c:d7:bb:89:4e:c0:c0:b1:36:
         15:69:67:6c:44:c3:54:69:4a:2e:fa:47:4b:d0:b3:36:06:21:
         77:75:d6:56:18:41:61:e0:4f:d6:02:ec:7c:af:07:82:d0:b5:
         30:34:90:9b:c6:af:42:eb:f8:6e:85:cc:d8:03:f8:35:58:5c:
         a3:08:fe:f7:05:af:4e:b5:97:0b:d9:c2:71:e6:00:62:1c:1e:
         d5:33:aa:e7:5b:54:df:f1:a9:e7:79:15:be:ef:41:88:db:0e:
         8b:62:78:31:ee:b9:ff:bc:94:06:c4:f2:b0:e0:fe:7d:5f:b4:
         55:d6:ca:ae:20:ab:98:35:3f:73:3b:5a:59:98:cd:ef:f2:fb:
         0f:0f:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:58 2025 by rpki-client