Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File:                     xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier:          VMZVCoqx5lnqFRwBwzoDuGbq6ioC9B5fo8v10ZhGb0w=
Subject key identifier:   07:32:D4:C4:A2:97:20:6F:16:FC:C6:79:58:BF:84:77:E4:A8:D0:53
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer:       /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial:       0199FCFD6E698C54706E7773AE1571F4200C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number:          167F
Signing time:             Sun 19 Oct 2025 15:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:31 +0000
Files and hashes:         1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
                          2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 4obYgWp01kKnWEZ48dSXRjWtdqxSAOGdrGEZQTWOvow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6e:69:8c:54:70:6e:77:73:ae:15:71:f4:20:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
        Validity
            Not Before: Oct 19 15:01:31 2025 GMT
            Not After : Oct 20 15:01:31 2025 GMT
        Subject: CN=0732d4c4a297206f16fcc67958bf8477e4a8d053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:31:3d:38:79:db:c6:fa:c5:4e:38:c0:32:
                    15:ca:20:af:c2:56:3b:74:50:41:45:61:dd:8f:b8:
                    aa:88:99:21:ae:ae:05:8e:c6:9a:a8:14:df:c6:08:
                    ef:3f:c7:b7:f0:08:3e:3c:e6:0d:87:dd:03:2b:64:
                    ad:69:0d:7a:8b:8c:60:5d:2e:eb:0b:bb:dd:96:f4:
                    87:c5:0d:ce:6c:8c:0d:c3:d9:a5:76:9f:e0:c1:e8:
                    77:13:ad:fa:cf:f9:e0:dd:6f:c4:01:65:24:03:92:
                    f8:02:ff:86:fe:12:3c:7b:aa:32:7a:9d:8c:7b:b9:
                    b8:b6:6d:54:c7:b4:72:3d:59:a5:6c:53:b2:99:87:
                    a7:c4:71:61:1c:c9:42:2c:d8:59:02:2d:9b:27:35:
                    53:91:44:f2:ef:99:40:7b:b8:ba:4f:5e:70:f2:7d:
                    01:1a:37:7f:32:de:47:e3:a8:50:39:36:5d:8f:f4:
                    72:fe:07:08:80:9e:f6:45:19:43:fa:8a:49:a4:97:
                    c8:40:7b:5e:34:59:23:41:7e:cf:2f:a8:eb:c7:c9:
                    44:cd:ce:01:b8:5e:f4:e0:c9:97:47:a4:02:87:21:
                    be:4d:08:ba:73:d0:4f:0a:06:f9:f0:36:e9:1a:67:
                    fc:66:f7:ce:62:07:73:8e:69:74:57:65:6f:46:c0:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:D4:C4:A2:97:20:6F:16:FC:C6:79:58:BF:84:77:E4:A8:D0:53
            X509v3 Authority Key Identifier:
                keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:0b:83:7f:85:49:9e:a4:b5:27:e0:b7:37:e6:46:e4:70:
         b8:7e:ff:0f:d0:87:00:72:51:6c:aa:07:43:bf:07:50:f6:ad:
         6f:39:b6:69:7e:10:d0:dc:3a:b0:e4:62:63:3c:f7:ec:39:6f:
         cb:d6:76:ba:9b:5d:34:56:82:b6:40:13:08:3c:7d:7a:2f:c4:
         49:93:79:99:96:60:4a:aa:8c:3e:37:3f:75:54:fa:7a:8a:98:
         7b:f5:87:dd:08:42:62:5a:b5:71:50:5b:63:ca:8b:78:db:ed:
         f6:3a:7a:45:8d:bf:ac:47:34:46:d9:be:65:63:88:a0:5a:87:
         7b:c6:dd:0e:49:b7:ef:db:6e:07:e3:7b:36:b1:c9:f7:84:2c:
         b2:3e:60:d7:d4:81:5a:d6:35:80:8a:c9:93:ad:90:03:33:a0:
         72:fc:34:79:3f:82:38:02:ce:00:75:7d:46:6d:ae:dd:1d:0f:
         6a:e2:a1:cb:80:87:e5:ad:67:52:10:88:b7:aa:d6:a0:0a:a2:
         e6:a0:e3:c2:5d:14:d1:f2:99:00:3d:e9:5f:8d:54:e8:67:fb:
         5e:ca:46:4a:a2:d2:fa:f1:b5:a0:d5:39:2b:32:ad:06:6e:8b:
         47:00:37:43:84:45:27:c0:43:71:d4:e9:94:ec:83:1e:4a:ac:
         b5:00:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:31 2025 by rpki-client