Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File:                     rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier:          /Npm7dOczV2bOnGKUbjYzm5ns4zSKsywaiwRz+TLLEY=
Subject key identifier:   3B:17:F8:73:2F:3D:C0:E8:C1:73:CE:9B:0A:74:35:2D:EC:9C:56:22
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer:       /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial:       0199FEEBF2EBADC062047A007DB00B80ECAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number:          1426
Signing time:             Mon 20 Oct 2025 00:01:39 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:39 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:39 +0000
Files and hashes:         1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
                          2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: dJ1bt6CVEke6F7BLigYRIb5+mOf5LEe+ag6YLgkA9Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:f2:eb:ad:c0:62:04:7a:00:7d:b0:0b:80:ec:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
        Validity
            Not Before: Oct 20 00:01:39 2025 GMT
            Not After : Oct 21 00:01:39 2025 GMT
        Subject: CN=3b17f8732f3dc0e8c173ce9b0a74352dec9c5622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:76:78:72:94:64:43:37:94:59:c9:e3:53:
                    c6:34:4c:10:aa:d6:83:b5:d3:88:2c:94:32:20:e5:
                    a9:b5:02:b4:32:fc:b5:e8:c4:d7:9b:e0:6a:d7:ed:
                    9a:a8:b0:08:e1:a2:be:6f:f5:54:73:06:d5:78:c8:
                    27:1a:84:93:1f:1f:d2:04:94:ff:c7:84:78:92:ef:
                    3f:3c:9b:9e:18:67:83:40:72:37:a6:bc:ae:7b:01:
                    04:3d:67:99:5e:29:45:66:af:80:98:93:cb:8e:05:
                    63:86:31:29:c0:93:3f:b3:08:f8:73:1d:a9:97:cd:
                    a1:c0:f7:1c:82:45:94:e5:92:d5:01:08:ae:3f:d1:
                    23:1d:80:1e:4d:79:a3:c8:43:c8:59:03:76:7a:34:
                    94:6b:59:a3:0c:79:0c:0a:57:b2:fb:fa:78:67:70:
                    2a:80:5b:ed:64:ec:26:0a:78:fc:dc:32:f7:01:9a:
                    99:01:ed:1d:13:68:e7:2f:2d:06:60:0e:ea:f7:92:
                    cd:13:58:69:5a:ff:8f:e0:f5:fb:2e:5f:54:54:6b:
                    56:6b:06:67:ea:a4:06:f6:ae:86:53:24:e3:28:d5:
                    38:bd:6b:9e:3f:81:37:87:17:26:55:76:64:52:61:
                    14:50:89:32:52:56:e7:47:2a:85:86:47:12:71:59:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:F8:73:2F:3D:C0:E8:C1:73:CE:9B:0A:74:35:2D:EC:9C:56:22
            X509v3 Authority Key Identifier:
                keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:11:ae:25:8c:08:77:c6:e1:b8:52:72:74:c9:c2:ad:c1:19:
         d7:51:c9:92:d9:de:36:cc:8b:08:13:56:4a:45:df:32:e2:77:
         6c:71:85:2b:bc:1c:75:8a:58:3b:6e:c4:82:79:0f:73:2f:da:
         42:4a:ea:1c:a4:5c:e2:29:85:12:a5:0c:06:91:36:97:48:48:
         bf:f5:d3:e9:27:33:1e:14:5b:d6:41:d8:1d:d6:f0:41:90:e1:
         41:85:0f:f9:11:2e:9b:11:c8:98:c8:02:9f:88:0c:ea:5b:40:
         0b:27:65:61:a7:b9:8c:41:cf:b7:3e:11:f7:71:0a:b3:11:9c:
         d8:b3:fe:9e:e7:0c:86:c1:44:da:d7:49:aa:34:1d:13:64:ae:
         f4:8a:c9:74:08:b4:e4:34:bd:a6:f2:fc:87:ad:e6:3a:de:c7:
         72:cf:25:7e:83:2f:e4:78:15:a2:92:8d:bc:82:09:9f:ae:3f:
         c4:cc:17:66:6d:64:25:6c:75:22:aa:c5:f6:27:4b:d9:b2:66:
         fd:08:6e:4a:9e:44:8c:ad:21:d7:52:01:78:5d:f3:4d:ae:04:
         18:bc:fa:e6:19:10:ad:aa:d0:53:c6:80:24:91:6f:86:2e:be:
         27:71:3b:bd:73:10:26:0b:48:70:d7:2d:03:53:a3:f7:24:b0:
         ec:6f:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:03 2025 by rpki-client