Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          GDQ9eNYAGIrzlfflzY1c22ThYgYSVLd8ML5UUz+HyYg=
Subject key identifier:   F0:83:B0:A0:21:73:40:59:AF:06:D7:20:EA:41:5F:23:1B:7C:D5:93
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       0199FBEB35DD1A1B9750D33D8C3F37CCF9A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          0949
Signing time:             Sun 19 Oct 2025 10:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:59 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: ioropeZb1KR0kx7fxCHUzg15DXySpmU4/IzdwnBhQXI=)
                          2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:35:dd:1a:1b:97:50:d3:3d:8c:3f:37:cc:f9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Oct 19 10:01:59 2025 GMT
            Not After : Oct 20 10:01:59 2025 GMT
        Subject: CN=f083b0a021734059af06d720ea415f231b7cd593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:45:34:a5:69:2a:56:59:45:46:53:fe:91:
                    55:b0:51:66:86:20:34:fc:6c:29:d6:34:12:56:25:
                    ed:40:38:a5:e7:29:9f:89:3d:bd:4e:20:4c:19:41:
                    0e:9f:f4:ef:db:bb:28:c5:51:6a:64:28:a9:11:fd:
                    15:2e:dc:4e:fb:cf:46:44:f1:27:ba:e7:79:cf:d7:
                    07:ef:79:0b:f8:ce:56:8a:11:49:a7:3a:98:70:89:
                    f2:47:fd:4d:82:28:14:03:71:5d:cb:a6:e7:9c:f2:
                    e6:ba:02:c7:79:63:62:2b:ac:3c:58:aa:c3:e7:c5:
                    bc:49:25:3c:77:63:d2:78:2a:34:3f:f0:67:4a:e8:
                    79:2e:fa:2d:52:58:e6:e7:be:12:4f:84:15:6e:4e:
                    5f:3f:21:cb:2c:bf:68:0c:fc:08:27:3d:be:24:d3:
                    cc:25:c5:8f:f3:26:b8:d6:92:2e:6c:2d:81:14:b9:
                    68:6a:c7:02:a4:6e:0f:7a:97:08:f2:8f:c9:7a:ac:
                    71:c0:ea:e3:fc:70:74:e9:ef:e2:53:71:d1:38:67:
                    d7:27:91:01:15:0f:ed:8e:64:18:2a:f1:ae:b3:ac:
                    be:6c:26:06:4d:b6:40:f9:8b:e0:7f:ef:4f:3f:9e:
                    9d:47:a2:c7:eb:54:ea:43:2f:ab:99:66:87:88:7f:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:B0:A0:21:73:40:59:AF:06:D7:20:EA:41:5F:23:1B:7C:D5:93
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:19:10:52:68:e2:89:7a:18:ab:42:8a:58:44:a6:66:04:db:
         1d:46:f8:e2:53:38:96:a0:09:ce:32:be:dd:58:ea:f7:3e:6c:
         d2:9f:dd:7e:83:3f:e0:dc:94:d4:ac:b3:8a:d8:19:38:58:f6:
         b4:70:c7:56:3d:e3:87:30:87:ca:33:75:4b:78:27:ee:9d:01:
         8c:5a:b5:96:6e:bb:04:22:4e:f0:dd:24:42:19:83:4d:7a:fc:
         83:b3:61:f4:fc:49:65:ec:db:1d:bd:e8:6e:81:3d:ad:8e:2f:
         e4:e7:60:29:0f:5d:f9:91:7e:5a:cf:47:62:81:50:51:d6:aa:
         61:17:51:d4:c2:76:6c:87:2b:b4:ad:c1:08:24:e4:eb:01:5c:
         c1:ab:ce:5e:b7:6b:21:51:fc:2b:5d:55:4e:27:4c:2f:b0:32:
         06:8a:23:a7:ed:df:1f:1b:d8:59:f5:8d:ad:cb:25:e4:de:b6:
         5b:29:88:56:f0:82:72:22:e4:85:a1:09:a4:00:0a:fb:2a:9e:
         7e:f4:fe:e8:fa:68:16:aa:ee:58:a4:99:aa:b7:29:35:a5:dd:
         9b:90:eb:25:56:73:b7:e3:c2:13:c6:5c:c9:d3:a1:b4:d2:20:
         08:7f:d3:88:a6:32:cb:1e:ac:0d:d5:d4:eb:c5:fb:71:1d:15:
         76:31:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:28 2025 by rpki-client