Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          MjgDnoOwH1/5DWnAyV+16uy/TDKCthJ+7TwaHAunAzE=
Subject key identifier:   A8:68:41:6C:30:97:47:39:5A:C5:90:19:EE:7D:33:A9:D7:AD:CE:DC
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       0199FF22B4AEE0563B24FCE67B6603F23941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          07E9
Signing time:             Mon 20 Oct 2025 01:01:28 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:28 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:28 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: XaA/tbEArrWJVlIxxj0cqxGGnVQqQVNSJ7LH75UnEUk=)
                          2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:b4:ae:e0:56:3b:24:fc:e6:7b:66:03:f2:39:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Oct 20 01:01:28 2025 GMT
            Not After : Oct 21 01:01:28 2025 GMT
        Subject: CN=a868416c309747395ac59019ee7d33a9d7adcedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:59:ad:34:d5:c9:d3:4c:92:c9:27:28:fc:
                    be:ba:cf:4a:4a:61:38:ab:a0:20:cf:cb:bf:60:1c:
                    ae:13:48:6f:2f:3c:4a:5a:7b:c8:9c:6b:6f:53:b6:
                    e0:d3:c6:31:2e:a3:ed:4e:4a:e6:0c:73:9d:4c:43:
                    66:ef:c9:26:33:c1:4b:4e:bd:98:f7:ee:13:b2:d4:
                    2a:6c:e9:c4:89:25:78:1d:5a:d7:8d:09:0f:3a:88:
                    19:03:5e:2f:91:1a:f8:69:86:b3:ab:a0:b4:08:a5:
                    75:db:ef:8a:5a:6a:51:43:d9:25:82:6c:03:a5:2c:
                    34:58:f1:d4:32:fc:97:43:14:c3:e0:eb:92:99:49:
                    8c:86:8e:1a:33:54:10:30:a3:69:55:34:52:4f:6f:
                    a9:99:2d:d6:73:5d:c2:fb:b9:b4:a1:04:7f:0b:ea:
                    f4:bb:17:83:2b:39:f3:f5:8d:27:7e:1c:44:81:2c:
                    93:56:87:16:dc:79:05:56:7d:aa:0a:0a:6c:8f:94:
                    3c:6a:d4:d9:1c:4d:9a:14:5c:5c:ad:89:19:7a:9a:
                    8b:53:43:2e:01:66:d6:57:1d:17:9c:61:04:3f:50:
                    a9:f8:03:43:74:23:da:36:20:df:ee:2f:f0:33:3f:
                    fd:f8:38:6f:80:46:2c:aa:de:6e:45:70:55:08:06:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:68:41:6C:30:97:47:39:5A:C5:90:19:EE:7D:33:A9:D7:AD:CE:DC
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:56:ff:97:19:e7:c9:fa:cf:0f:de:5e:fe:00:3c:18:70:4c:
         9b:f1:21:98:0b:e8:28:24:3c:d6:76:11:93:e2:2b:3c:10:c4:
         62:27:07:45:fb:3d:f9:7e:c4:20:97:81:23:f0:a3:fe:68:b3:
         70:a2:3f:6c:56:50:c3:4a:b8:2f:d6:de:10:18:29:32:17:d0:
         d7:c7:65:a8:18:06:b0:54:b8:ad:ea:cc:66:75:7e:a1:78:ef:
         ec:57:df:b1:67:0b:1e:d3:12:11:d2:0b:7f:4e:6a:3b:82:6e:
         b6:da:65:9a:7f:77:fa:f5:a2:e1:6f:39:ec:38:46:7b:7a:cf:
         21:a7:a6:e0:64:98:1b:d7:e8:ca:b6:af:71:b0:86:10:69:ad:
         9e:7b:d6:b0:11:4b:f8:01:2d:e0:ed:6d:64:1a:3d:fe:f5:2b:
         df:78:45:bc:df:51:f9:d1:f1:1e:74:32:13:c9:b6:82:4a:6d:
         63:94:91:6b:5b:52:de:9d:e0:5b:ab:0d:24:fa:fe:6b:89:77:
         9d:07:22:38:84:56:31:3c:38:0f:be:db:78:b5:44:f2:0d:27:
         c2:cc:b9:6d:71:43:8a:96:92:c1:e2:87:32:e7:6e:cd:d7:78:
         8f:20:8b:ec:cd:b3:77:0c:90:4e:f2:a0:8e:91:e5:c2:a5:24:
         69:27:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:14:02 2025 by rpki-client