Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          lcFsWjXTYwNS2eRTPvL54fvT2FJyQhWfBu4/QPq3Kfc=
Subject key identifier:   73:0E:D2:90:88:96:D4:CE:C9:86:6D:DF:AB:E0:B2:5A:2E:AD:0B:74
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       0199FD3445E54303C1E8CA5EE1A6EE8F4D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1423
Signing time:             Sun 19 Oct 2025 16:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:25 +0000
Files and hashes:         1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=)
                          2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: 2efWv8Weuck5ODpm38lLgR3+QGo9Josg5tTVvEJmraU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:45:e5:43:03:c1:e8:ca:5e:e1:a6:ee:8f:4d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Oct 19 16:01:25 2025 GMT
            Not After : Oct 20 16:01:25 2025 GMT
        Subject: CN=730ed2908896d4cec9866ddfabe0b25a2ead0b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:b0:0b:e1:92:7c:b5:4a:ef:a5:dd:76:03:
                    42:62:8a:ce:75:23:ab:69:1d:ce:e2:a5:82:aa:6d:
                    bd:c9:4c:53:88:34:92:a8:06:b6:4b:bd:60:05:f6:
                    a3:ec:06:b2:99:8c:f0:10:c0:25:0f:01:15:19:a4:
                    39:15:b1:2d:ce:a7:ec:44:a1:d3:2a:db:d2:78:4b:
                    e7:fd:86:dc:a4:fa:94:d7:12:be:03:8f:0b:d5:2b:
                    af:89:cc:97:03:a0:d4:7b:a0:82:71:82:f9:57:a2:
                    dc:47:3f:78:a9:49:85:2e:b4:32:80:60:5d:3f:3b:
                    3a:bf:5b:f5:8f:44:77:10:96:58:5c:9c:d2:49:0b:
                    2d:83:46:9c:1c:7a:ca:ae:9d:a1:ce:c9:b6:6a:e2:
                    83:6b:3f:5c:80:fc:47:4a:b3:6d:f1:ba:0a:7a:cc:
                    fb:7e:00:d7:d2:e6:c1:f2:c9:e0:b7:05:11:14:c2:
                    d8:37:33:1b:f3:2e:d9:64:1b:d1:b0:a5:2e:f2:96:
                    74:dc:e0:2c:ab:a2:ba:dc:1b:48:3a:a1:f1:76:e1:
                    f8:03:bf:6b:94:f5:d7:d9:6c:2e:e4:55:79:6d:ed:
                    2b:91:49:d7:ac:e2:56:aa:88:6b:5e:77:6f:f8:b5:
                    62:f4:f5:6f:5a:f4:90:b1:e3:35:25:43:86:3f:fd:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:D2:90:88:96:D4:CE:C9:86:6D:DF:AB:E0:B2:5A:2E:AD:0B:74
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:fb:ed:38:d8:bf:d5:ef:2e:5c:8f:36:a7:c4:74:c2:5e:
         77:0f:24:7f:41:2a:23:8b:7e:59:88:4a:c7:57:cd:3f:0e:26:
         68:b1:1b:d0:e8:75:d7:aa:50:1f:74:58:d5:4f:1c:62:02:f7:
         fe:43:43:fc:07:1e:ed:81:26:4f:8c:f1:ef:40:c6:eb:0d:3f:
         bb:7c:07:fd:68:2b:4d:c0:f7:64:2b:99:4a:9b:37:91:33:65:
         1e:ed:5c:5a:f2:00:9c:a3:17:46:98:1f:2d:ec:e1:4f:c9:28:
         7f:04:24:fb:b0:d3:14:bc:f5:33:8d:a6:e8:54:58:eb:5a:7c:
         20:df:43:9f:57:cb:bb:60:73:c2:f9:2e:f3:dd:80:f0:39:12:
         76:61:b4:53:54:98:6b:0a:4a:59:23:36:8a:db:f2:28:8e:34:
         26:a2:02:c0:41:0e:c5:3b:c8:f2:80:07:7c:cd:91:e7:08:7a:
         95:ac:2a:39:b1:aa:9b:06:58:2f:d0:b9:cb:59:c9:eb:1a:a5:
         7f:a4:86:97:6c:4a:5c:27:f7:90:b6:32:48:37:eb:ec:0d:dd:
         85:9e:2f:23:b0:0c:f5:90:48:7f:2f:1a:9d:72:01:08:13:5f:
         ce:9e:b7:e0:8f:d9:ed:c6:93:92:28:59:78:88:41:08:40:8d:
         f1:a2:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:32 2025 by rpki-client