Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          ydrYqbIY1aH4Lq7ioTHBqCv7/kNlfZX9HVo9V1k3Vgw=
Subject key identifier:   CB:FC:1C:1C:38:1C:6C:92:35:7B:88:3F:23:7F:1D:04:17:41:57:26
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0199FE7E15F1115B282140898D826FD2F98D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1712
Signing time:             Sun 19 Oct 2025 22:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:39 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: /geaBokUhBJZIJJvvv89pwtBxeQcOVn/hAYc6lLjs1o=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:15:f1:11:5b:28:21:40:89:8d:82:6f:d2:f9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Oct 19 22:01:39 2025 GMT
            Not After : Oct 20 22:01:39 2025 GMT
        Subject: CN=cbfc1c1c381c6c92357b883f237f1d0417415726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:fe:5b:e6:8f:52:a9:67:8e:62:98:d9:4d:
                    68:65:6c:d2:20:6a:64:b6:ea:84:06:ab:30:12:10:
                    d0:a3:16:f4:c4:6e:db:19:8a:ec:ff:5d:df:59:a3:
                    da:8a:f1:62:dd:b4:09:e1:11:45:0a:ed:ce:5f:1c:
                    3d:6b:e1:b9:bc:b3:17:3c:05:00:7a:e3:6e:98:3a:
                    88:e9:26:ac:62:cf:d6:dd:d4:34:cb:3e:42:27:d8:
                    65:10:33:de:cd:a3:a5:b1:c9:fa:89:69:5c:d6:75:
                    3c:7a:8a:32:38:07:5e:9f:11:de:3f:70:4d:f5:ec:
                    ba:34:b6:df:af:a5:69:34:69:cf:26:61:5a:a8:80:
                    ba:a2:63:73:d5:69:22:1f:bb:06:25:99:45:eb:26:
                    3d:bd:30:38:ad:a6:e7:71:be:e9:e6:16:7a:6b:b2:
                    1a:d9:7b:24:c0:35:49:ac:6d:09:5c:ef:7a:3d:d4:
                    1a:a1:8e:4e:9e:d9:22:ce:cf:02:d3:6f:8f:4e:f7:
                    36:4e:85:74:dd:7c:87:7c:5c:23:30:9b:48:7b:f5:
                    18:1c:9b:38:da:28:6e:07:ff:49:ac:b2:fe:48:57:
                    a2:2d:0c:59:0c:5c:de:56:b5:63:2a:87:c6:1f:0d:
                    18:7d:ba:7c:58:1c:03:51:1c:d9:11:c3:59:2d:fb:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:1C:1C:38:1C:6C:92:35:7B:88:3F:23:7F:1D:04:17:41:57:26
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:50:1a:53:e6:64:7e:91:9e:42:3d:4e:2b:36:a4:bb:c0:ad:
         75:3c:5f:d3:78:14:8f:3b:9b:72:82:44:b2:c1:cc:14:fb:8e:
         8d:78:00:ba:60:fc:04:f4:32:07:7d:22:d4:58:94:fc:20:b9:
         4a:4f:c5:f6:92:49:e5:3d:2a:26:43:2a:15:24:69:45:99:7c:
         14:57:4f:6a:04:19:ba:0d:37:2e:7d:00:7b:1a:b7:a4:21:8b:
         3a:ac:8a:6a:76:a8:b6:bf:8e:ed:e1:bc:8f:15:51:5b:e2:38:
         c5:2a:4f:a1:37:4c:1e:4e:90:d2:4c:18:0e:9c:39:4b:3d:12:
         87:47:2e:f7:d3:46:67:08:5e:30:8c:1b:40:9b:8c:78:da:f0:
         3c:49:8a:c4:7e:88:b6:6c:88:c8:16:8f:38:05:cc:8d:ec:8d:
         cb:8d:8b:34:3b:6e:cc:89:a7:43:92:7b:d3:32:45:8a:5f:f1:
         e2:12:06:dd:0e:01:ab:10:ef:d6:41:75:f3:b9:04:f8:db:ac:
         61:3f:9d:20:63:c9:88:3f:6a:3f:ed:53:5d:df:7a:00:8f:62:
         d0:40:9a:00:a8:fe:88:38:09:bb:c3:2c:33:bc:c0:b8:8a:11:
         25:a2:f6:70:c4:f4:22:31:da:5f:38:99:42:06:1f:6b:5f:c0:
         3d:76:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:36 2025 by rpki-client