Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          CWbE54FpYBPlzb3VV3xAY+7qN4VmzU+cbBmAjRSdVu0=
Subject key identifier:   4B:11:E0:7E:D3:42:2F:B1:6F:01:93:AC:F5:D8:04:30:69:CC:E5:AD
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       0199FBEA8CB6514647F3C587FC5FBC86B2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          1239
Signing time:             Sun 19 Oct 2025 10:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:16 +0000
Files and hashes:         1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: M5FcyceAAUHJWCVivOztPs3N1r6WbclZ4UGebM5btLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:8c:b6:51:46:47:f3:c5:87:fc:5f:bc:86:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Oct 19 10:01:16 2025 GMT
            Not After : Oct 20 10:01:16 2025 GMT
        Subject: CN=4b11e07ed3422fb16f0193acf5d8043069cce5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:57:9c:fa:20:7b:bf:ae:53:12:bb:14:29:
                    8f:49:bd:f4:1f:cd:8c:58:95:60:26:19:63:81:bb:
                    49:3c:19:c6:ac:df:3f:c0:64:6d:69:c3:a5:dd:f1:
                    15:61:cc:7d:47:42:6f:07:bf:83:62:1b:bf:c9:5b:
                    09:84:da:b6:25:8e:17:79:d5:38:46:b1:fa:1e:8f:
                    93:6f:90:36:79:27:04:44:e8:e4:84:1b:eb:42:83:
                    29:84:98:c0:e9:89:e6:ee:ae:c8:8c:79:bb:6f:b8:
                    ae:9b:d3:26:35:87:a5:42:a8:4f:cc:3d:38:e3:f5:
                    bc:b3:27:03:44:66:77:0d:da:a1:01:77:10:a8:4b:
                    41:5e:6a:55:20:07:c9:d9:4d:59:d1:fa:2f:bd:fd:
                    5b:36:1d:56:a2:fb:eb:4c:80:7d:f8:e8:f8:3f:62:
                    05:76:34:4a:57:c1:93:c7:a0:9f:e5:b5:0f:ce:3e:
                    e5:ff:95:62:87:06:60:b5:2b:3e:0b:30:28:e0:99:
                    43:2d:3f:c0:f3:3b:69:a8:14:31:f9:f2:84:93:21:
                    99:13:58:b2:b9:ac:62:bd:17:35:5e:7c:9c:73:8e:
                    6e:b3:cc:5e:b6:6a:50:d0:87:2d:0a:ec:e8:30:b0:
                    92:58:96:a3:78:5e:13:77:c0:7a:03:3e:99:67:66:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:11:E0:7E:D3:42:2F:B1:6F:01:93:AC:F5:D8:04:30:69:CC:E5:AD
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:52:b6:b3:ea:23:b3:6a:1c:32:6e:90:ec:6b:6d:1c:9e:a8:
         3d:8c:7f:e3:83:59:07:df:57:7d:40:07:4f:55:3f:00:d3:f0:
         02:10:27:6e:9c:13:70:47:b7:f5:c7:e9:6e:89:8c:3b:f8:f3:
         4c:2a:c4:cc:af:fd:7f:11:b6:70:0f:86:0f:e9:85:49:4c:b0:
         f4:aa:92:1b:e3:56:8c:74:f1:a6:1d:aa:80:90:3b:2f:db:3e:
         7a:f1:83:b0:99:30:2d:ba:81:7d:fb:c5:94:92:3d:2a:80:45:
         f1:52:46:13:13:35:fd:53:59:c5:71:c1:fc:93:06:57:98:f3:
         c8:09:fe:3f:c0:a5:72:96:d6:ca:af:51:a3:b1:7c:be:7d:bd:
         72:b5:8a:86:f8:83:75:86:39:ae:e1:b2:7c:37:73:31:39:64:
         87:2f:81:58:9d:51:d7:5c:4f:eb:09:46:fe:fd:a2:a8:32:aa:
         da:e2:be:20:46:44:af:ed:db:4d:f8:b7:2b:56:b2:a0:33:8b:
         06:d4:c8:26:0a:37:9f:85:0f:5d:0c:c1:53:0f:e8:90:3f:ff:
         4c:9d:27:8e:8c:c3:37:ae:34:f2:d0:03:cb:5b:0a:30:2e:eb:
         78:2e:b8:bb:39:ae:8e:98:92:ae:3a:ec:f2:9a:1d:57:be:e6:
         8a:7e:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:19 2025 by rpki-client