Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          pifIF8I5JK0Gp5q3TYVWim7+LlMp6Ud1YVsI4f+Wi/4=
Subject key identifier:   3C:FE:51:DF:FA:6D:CB:67:21:5D:19:9B:ED:93:26:FC:A4:33:52:85
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       0199FC21689FCBFADC447ACD96C66684C695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0D6E
Signing time:             Sun 19 Oct 2025 11:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:11 +0000
Files and hashes:         1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
                          2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: W6oI0iqIIx+92vPvySEYllMJHyh7qfgxhcMnfWaQ13s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:68:9f:cb:fa:dc:44:7a:cd:96:c6:66:84:c6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Oct 19 11:01:11 2025 GMT
            Not After : Oct 20 11:01:11 2025 GMT
        Subject: CN=3cfe51dffa6dcb67215d199bed9326fca4335285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:32:be:e5:7f:de:a3:47:e8:36:ca:87:1b:
                    45:43:3a:99:79:33:ca:3d:1f:80:50:6c:83:36:9c:
                    6a:fa:30:6b:52:7a:8c:0c:25:14:ff:d9:b9:a0:92:
                    15:93:69:cd:ef:6b:b4:25:79:0e:6a:79:2d:3b:4a:
                    c2:aa:b0:16:a7:18:48:70:ed:34:fd:e6:f8:2e:49:
                    52:3c:eb:80:17:28:20:65:70:fb:01:6a:ad:d2:0c:
                    23:b6:16:ec:35:19:42:c7:23:de:2f:65:b4:4d:2b:
                    4c:51:48:7b:a8:c6:96:30:8f:cf:6f:e9:ca:f0:54:
                    15:59:b5:91:f7:5b:4b:b7:45:1f:bc:81:38:92:8d:
                    97:c7:b9:19:3c:25:50:dc:3f:6a:ab:ec:bd:67:3a:
                    7f:f4:53:6d:37:5e:f7:89:85:cf:ea:2c:70:75:2b:
                    72:ff:dc:f6:6a:db:00:f6:97:be:cd:7e:86:41:f3:
                    df:02:4b:35:b3:b3:91:dd:60:eb:5e:08:fd:29:3c:
                    9f:dd:3b:38:b0:3b:c3:6f:de:f8:3d:b5:7a:75:ce:
                    9b:6d:fa:06:6a:e4:6d:9a:10:e7:bb:47:35:52:22:
                    ae:2f:34:0f:60:7f:63:b6:ec:2b:0d:d0:e8:42:f1:
                    0b:ca:d3:a6:08:21:87:db:7c:53:bc:fd:2e:61:db:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:51:DF:FA:6D:CB:67:21:5D:19:9B:ED:93:26:FC:A4:33:52:85
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:1a:fa:ed:06:1a:49:72:e9:40:d6:36:f8:4d:76:cb:e9:
         78:02:31:f7:22:9c:85:dd:1c:a9:d8:1c:85:db:79:41:fd:7b:
         05:6b:21:d9:1f:dd:59:06:40:43:12:c3:9e:d9:e4:0c:18:a4:
         80:8b:67:19:40:df:e3:f5:e9:a0:2f:39:74:61:1d:1c:96:9d:
         41:37:50:d5:62:f6:33:46:a9:48:a3:88:3d:db:6b:a1:e2:84:
         f5:73:f5:13:53:6d:7d:28:37:46:51:bd:3a:be:61:d5:e5:2f:
         ff:1f:54:22:fa:86:d5:42:35:d2:7f:ed:ed:6b:c9:6a:e8:55:
         54:04:ad:27:89:ee:c4:ba:10:07:aa:4b:2a:36:b4:96:cb:ce:
         6b:c8:a4:f5:73:d2:83:96:c5:b3:69:c6:45:bc:7f:95:0c:dc:
         4d:1f:05:6e:10:1a:7f:ac:20:0d:f5:c3:86:27:7c:cb:db:9d:
         3f:57:ea:44:08:55:63:2f:44:5e:18:91:08:6f:9f:aa:e1:d1:
         a5:f6:05:ab:e0:46:db:3a:2a:d0:ba:1b:7c:c8:4b:7e:f5:94:
         b6:19:ae:78:53:63:63:d9:fa:d5:2d:2a:b5:14:5c:88:88:07:
         cd:15:84:cd:2e:d7:a1:f0:3f:06:f3:2b:59:a8:52:17:50:12:
         5a:11:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:14 2025 by rpki-client