Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File:                     8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier:          tU8SJVm/pAEiqprDuULm+m1dVFyhoBamnr1ovKfWXbs=
Subject key identifier:   8E:07:86:1A:CC:77:8F:ED:40:2B:1C:F3:43:7A:5D:9B:2C:28:00:EC
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer:       /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial:       0199FC58B13C7E18FD7E99181274F012ECCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number:          0DDB
Signing time:             Sun 19 Oct 2025 12:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:34 +0000
Files and hashes:         1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
                          2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: mg1uIjSVda5oqRHJYHMCJKUJXTW2mcPJv/xOg2fiu+c=)
                          3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:b1:3c:7e:18:fd:7e:99:18:12:74:f0:12:ec:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
        Validity
            Not Before: Oct 19 12:01:34 2025 GMT
            Not After : Oct 20 12:01:34 2025 GMT
        Subject: CN=8e07861acc778fed402b1cf3437a5d9b2c2800ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:fb:cc:55:e9:74:6a:b6:22:95:db:99:43:
                    30:e4:d4:55:b7:f1:3f:ab:00:38:80:1b:81:46:44:
                    1d:5b:74:ec:d3:3d:29:a2:83:28:6c:49:d5:19:eb:
                    00:58:59:10:85:a9:d0:51:87:79:09:ac:bc:66:27:
                    9b:c9:30:d2:9e:51:5e:c9:33:1e:f4:ac:9c:69:ff:
                    3c:62:34:1e:b1:4d:ad:56:73:99:67:53:25:45:4f:
                    c1:6d:7d:07:ab:de:7e:52:77:f2:11:e9:57:9b:f4:
                    0a:ae:c1:d9:bf:12:15:c6:e1:cc:d1:df:b7:eb:1b:
                    8d:4f:dc:37:b5:be:9b:b6:a8:91:79:ff:6a:49:52:
                    98:a3:75:00:0e:01:67:5a:4f:0d:63:5d:ee:03:bb:
                    f4:8e:6c:0d:02:4e:d9:7c:5a:d3:4b:7d:bf:c3:f9:
                    9a:e6:af:ac:99:95:dc:88:bf:9f:85:cf:30:5f:fd:
                    40:ff:ec:d6:68:4f:ef:72:a4:87:b0:d9:d2:57:fc:
                    07:68:5c:04:fc:f1:46:a5:39:77:52:f2:71:67:55:
                    29:68:d6:12:31:22:02:df:06:eb:27:cf:07:aa:73:
                    d5:64:60:99:13:8a:c1:0e:e5:44:2e:4b:d5:bb:69:
                    90:0f:ae:63:f3:e9:1e:a9:64:5a:f9:38:0b:d8:22:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:86:1A:CC:77:8F:ED:40:2B:1C:F3:43:7A:5D:9B:2C:28:00:EC
            X509v3 Authority Key Identifier:
                keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:90:c6:36:44:9f:1b:9a:9d:77:94:ca:ef:1a:b3:a1:61:1b:
         31:9c:d9:c2:27:0d:4c:e0:61:75:e7:79:fb:98:a2:f0:67:54:
         1e:48:b1:99:48:be:32:a7:b5:31:69:56:da:1b:d7:0d:d6:26:
         bf:b2:5d:0b:96:f6:3a:d9:49:99:dc:22:da:16:fa:ef:88:52:
         47:aa:9a:78:14:d5:a5:98:b3:49:fe:f3:68:71:76:b5:05:c2:
         eb:df:a4:ac:9c:f0:b5:47:69:81:2c:d8:f2:39:5c:c6:bd:9f:
         36:35:b6:3f:59:8c:08:4b:63:8a:eb:3a:87:bf:97:08:a8:c2:
         f0:59:9f:42:37:6f:5c:bd:c9:22:0e:88:06:93:98:d4:a7:cb:
         4b:32:c9:d5:73:2a:16:b5:ec:79:ba:0c:2d:68:36:07:c4:31:
         5a:73:f4:88:dc:3f:ea:85:08:09:61:d8:81:8d:f6:fb:e6:f7:
         35:92:87:75:aa:78:6b:a9:b4:b1:99:2f:26:e9:76:8d:f6:61:
         e2:d5:b3:fc:a8:6a:9b:12:66:eb:e1:da:49:d8:ce:aa:49:57:
         34:f9:df:ef:67:70:a4:c1:c7:9c:7c:06:b5:24:e5:c2:9f:8e:
         e1:51:14:87:01:de:07:fe:f8:04:9b:a3:c1:c3:32:7e:f2:e2:
         3e:de:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:32 2025 by rpki-client