Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          /7XIoWHnSzVHDiBR0Zgh61ixkUXlQWQXwMEm1pDN6XY=
Subject key identifier:   02:3D:81:0B:14:38:72:44:96:81:AB:0E:C4:1F:CB:97:2D:1A:C5:80
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       0199FC216782089E155CB4FA43FD2264DFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          077C
Signing time:             Sun 19 Oct 2025 11:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:11 +0000
Files and hashes:         1: RdGYazcblxjw10A1GXBrScv2ZUw.roa (hash: cthxVd9Tm4tHhJQTv20dl7UKI0DsMHEY2NNEIm16wNQ=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: YKCsr7QJsTITvTUMTkE94MK7OWhPjLP3+c/BOUbGdv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:67:82:08:9e:15:5c:b4:fa:43:fd:22:64:df:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Oct 19 11:01:11 2025 GMT
            Not After : Oct 20 11:01:11 2025 GMT
        Subject: CN=023d810b143872449681ab0ec41fcb972d1ac580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:17:13:e4:a8:67:db:e8:90:e1:2c:45:eb:
                    33:88:67:85:01:94:11:f3:58:1a:e8:38:99:3c:83:
                    e5:f9:2a:f9:47:d0:19:aa:c6:31:d2:5c:1a:55:2e:
                    db:0e:03:9d:bb:70:e4:d8:09:d1:57:fa:9e:f6:c1:
                    0c:39:33:7f:93:84:b1:be:ab:c5:f4:50:2c:61:bb:
                    1a:f6:6a:b1:af:8b:3f:a3:6c:41:68:dc:bd:7a:d9:
                    79:82:9e:12:56:3e:43:3a:83:21:0b:0e:c0:92:57:
                    ff:22:a8:ff:55:00:dc:66:08:ec:06:ea:09:5a:5d:
                    e2:ce:b0:f7:c2:18:04:ff:c8:5a:61:7d:c0:c3:fc:
                    14:5c:ce:76:d2:cd:dc:47:23:2f:07:83:83:c0:b1:
                    a9:2b:cd:37:25:d0:32:85:fe:94:c4:13:9d:a3:ce:
                    1d:78:0a:52:e0:f0:2f:cc:af:81:01:44:d2:43:29:
                    95:ba:ac:86:88:bd:79:3a:74:02:5b:92:f9:ef:55:
                    3b:38:49:7b:f1:32:da:02:ce:7c:1d:bf:88:df:00:
                    4d:e3:31:8a:22:b0:fa:36:4f:91:6b:4e:86:5a:1b:
                    3b:0c:30:b2:94:e7:79:7f:26:60:83:3d:99:3b:23:
                    cf:c3:11:f0:62:e4:f2:f1:88:38:8b:73:38:d9:55:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3D:81:0B:14:38:72:44:96:81:AB:0E:C4:1F:CB:97:2D:1A:C5:80
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cd:91:10:66:cf:6d:f0:18:75:c0:66:52:f3:4e:8c:9c:01:
         79:56:b5:71:0c:2d:c7:9b:64:e8:5d:df:cc:22:ce:d5:f9:53:
         a5:fc:eb:95:f9:df:da:02:3f:33:1e:5a:47:b2:2d:f9:2d:08:
         31:44:dc:d1:13:64:31:72:52:84:7b:6f:4f:06:58:54:98:4c:
         c3:14:8e:ae:77:96:1d:ff:d9:d9:af:ce:51:58:f4:08:16:76:
         6a:3b:55:8e:1b:f4:ce:bc:14:20:4b:42:76:4c:c7:ca:9b:bf:
         2b:ca:6b:bd:be:9b:67:bb:25:13:b9:2b:86:e3:4f:d2:2f:bb:
         44:c5:7b:ac:a3:ab:b9:77:1b:70:3a:a7:fd:88:eb:02:49:6e:
         9d:dd:3c:db:0f:84:a6:50:bc:95:00:3f:c3:19:73:c7:d7:23:
         5c:95:be:39:98:8e:ba:dc:74:da:af:63:bf:45:07:56:8e:58:
         f1:3a:14:66:53:e3:70:34:a8:9c:a9:4b:64:2e:ab:87:5e:9d:
         b3:17:98:49:36:ab:e3:e2:cc:24:74:64:90:e9:1a:a2:81:21:
         74:81:f9:b3:02:b2:56:4f:03:9b:ee:28:2d:c0:1c:34:eb:0b:
         68:10:d4:3f:d2:6d:69:53:17:16:39:0c:99:1f:1b:67:9a:ef:
         9c:cc:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:24 2025 by rpki-client