Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File:                     mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier:          s/hSAwefKVtfxytMKSdv4GCMYcu9bCu+LSTq3IProvA=
Subject key identifier:   9C:24:A0:C4:41:B0:36:F3:75:CF:9E:1A:BA:A7:A2:72:70:8D:0C:CA
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer:       /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial:       0199FB7CD64C93D25B8564066697077B9925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number:          0344
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: bJ_iwVujMcklNyoPPnV6NVD5zm0.roa (hash: 7Mm1XlFD1wQ7r5xMGnLxxurh8Au27N7TujgdM8NcOpg=)
                          2: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (hash: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=)
                          3: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: +wiBgqI9rasFGfjp4CdAk0muNpGhjyHQ/dbVE5VwH3c=)
                          4: xouPf0QMMTAL1EjtGFEB8zKRaaw.roa (hash: RP5CrDZJxrGj2kXL8u1z5sEk/FoXNQ43FbO4Ypi7J9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d6:4c:93:d2:5b:85:64:06:66:97:07:7b:99:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=9c24a0c441b036f375cf9e1abaa7a272708d0cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:ef:64:d0:e5:6f:c5:87:c5:01:a3:fe:e8:
                    6e:e4:97:33:c3:9c:4f:52:20:6c:66:f8:cd:21:72:
                    48:c1:a5:b3:22:f0:57:d1:64:ba:ce:0d:7b:17:72:
                    6b:e3:df:03:a6:1b:56:57:3b:10:0d:a5:08:fa:53:
                    41:bf:64:17:bd:42:cc:51:8b:a0:c2:a4:e5:ca:33:
                    dc:87:79:7b:cf:17:f2:e9:0a:8e:fd:7d:65:3f:7d:
                    fb:0a:f7:22:2f:9a:e9:12:4b:3c:eb:d5:5c:f3:c9:
                    af:1b:d4:51:be:5e:48:2a:e4:76:8a:b2:b3:67:09:
                    83:ef:0b:b4:a6:b9:3f:b0:4a:7b:fa:0b:1e:7f:5b:
                    80:96:91:aa:99:0d:74:14:a7:70:88:7f:65:40:52:
                    1d:41:c5:de:73:c4:76:4b:e6:3c:6f:b3:8b:7c:3b:
                    8b:5f:93:df:93:0e:4d:65:34:2a:69:ae:4d:e6:e0:
                    01:77:4e:a9:30:2e:88:b6:3a:65:ad:09:a2:87:ed:
                    4d:44:d5:97:6e:19:94:8c:02:55:d3:5f:ac:f0:bd:
                    90:d9:3e:51:67:04:dd:36:0e:8c:03:58:2b:f3:bb:
                    42:9a:06:40:b0:76:ee:de:e6:8f:c9:70:f7:c0:82:
                    7f:10:ac:66:8c:a1:d4:18:17:23:58:a7:89:d9:73:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:A0:C4:41:B0:36:F3:75:CF:9E:1A:BA:A7:A2:72:70:8D:0C:CA
            X509v3 Authority Key Identifier:
                keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:fe:76:6b:51:e9:87:ee:7b:74:7e:1c:19:a1:25:25:e8:
         62:49:9f:8b:c2:a9:6d:75:67:03:4d:b9:fc:ec:09:69:6a:dd:
         97:88:a9:67:1a:24:0e:db:f7:3c:86:0c:42:e1:88:aa:12:9a:
         d6:10:0c:e7:79:bd:07:85:6f:96:19:04:90:cf:74:6c:fa:5e:
         83:01:a8:ba:a8:35:39:24:be:8c:20:fb:fc:a7:b4:86:c6:36:
         f7:b7:1a:3c:89:50:c5:d4:46:ea:c8:a3:5c:cd:54:cb:30:cb:
         cb:cd:ca:92:f5:b4:3b:b8:0f:71:d9:07:02:6e:53:5c:11:f2:
         d6:2f:5b:49:ab:0b:89:ed:94:65:ee:13:5e:31:5f:64:d8:5c:
         78:9d:2c:19:e7:3e:9e:13:49:c2:20:a9:7b:5c:48:17:13:75:
         13:c1:3a:a8:c0:c3:c5:4e:51:d9:96:4e:92:23:d2:19:bc:f3:
         4d:9c:3a:eb:29:d6:50:fc:19:54:11:f5:dc:a6:c2:a8:80:c2:
         6b:84:5c:65:e7:5a:99:48:b6:fe:84:6f:94:e2:8a:14:d2:2c:
         9e:e0:85:a9:94:c6:cb:c9:9d:dc:e9:a5:72:6d:88:62:92:62:
         aa:c3:67:77:ae:c1:66:9c:7c:42:29:8a:f8:1c:0f:dc:17:ac:
         c5:9c:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client