Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File:                     aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier:          Yfub2NkbqXjjHdfcCieYX/FHEOcL4oR4y0ug2sNeCRU=
Subject key identifier:   D9:91:ED:08:F6:41:E5:C2:27:FB:B3:89:FF:B4:64:F1:D7:B8:EC:E6
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer:       /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial:       0199FC2189208970AD3D6BD2A4C15936A6FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number:          06FC
Signing time:             Sun 19 Oct 2025 11:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:20 +0000
Files and hashes:         1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
                          2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: FLVLZP8dxp2tXz712P3LgS0yhnYugEefrwW2sx3uykc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:89:20:89:70:ad:3d:6b:d2:a4:c1:59:36:a6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
        Validity
            Not Before: Oct 19 11:01:20 2025 GMT
            Not After : Oct 20 11:01:20 2025 GMT
        Subject: CN=d991ed08f641e5c227fbb389ffb464f1d7b8ece6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:5d:7f:d1:0b:94:b1:37:0d:a0:f0:a1:46:
                    a3:b9:d8:56:5b:f1:fa:6c:48:43:2a:a5:70:29:ba:
                    39:97:88:ab:20:dc:be:80:31:b2:5a:dc:85:61:af:
                    5b:b0:86:2f:62:f6:c4:3d:9f:e0:33:8f:f6:fd:e0:
                    dd:16:13:38:f6:ab:fa:4b:c3:b2:20:72:11:fe:20:
                    82:f7:38:77:7b:51:cb:36:69:e2:4e:40:a1:ac:c2:
                    c6:fa:f2:ff:19:2a:c9:95:c0:49:d1:08:09:58:e3:
                    09:4d:1d:72:e0:e6:01:cc:5d:ba:8c:8e:43:65:cf:
                    59:a3:09:7e:0f:fe:6b:f9:77:e7:3b:44:77:0b:da:
                    63:d6:25:12:04:09:31:4f:de:13:ad:5d:89:8d:08:
                    21:f2:bc:c6:57:da:9f:b0:5d:31:9d:6a:a1:71:22:
                    8b:e3:a0:95:9e:98:d5:7c:10:7b:53:3d:52:b9:a5:
                    05:6c:cf:37:74:0f:3a:4f:5a:58:7f:c7:1e:c5:5a:
                    73:aa:93:40:35:8e:98:6e:c7:bc:8e:3c:7c:10:72:
                    f6:34:e8:c7:7c:04:c1:63:44:26:29:97:5d:25:5c:
                    7f:34:f3:19:42:bc:8c:54:67:72:be:7b:52:e7:c6:
                    0b:08:b7:8d:94:01:f9:aa:e7:98:bc:69:ac:4f:b4:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:ED:08:F6:41:E5:C2:27:FB:B3:89:FF:B4:64:F1:D7:B8:EC:E6
            X509v3 Authority Key Identifier:
                keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:74:89:de:9e:09:72:ed:9d:02:10:3e:2a:f8:af:67:78:c7:
         34:26:05:3e:5c:91:6e:86:ee:bc:dd:a2:e9:1b:10:f1:d7:f3:
         85:dc:90:49:5b:82:25:35:f3:de:b2:49:78:36:ca:5d:04:ab:
         f3:83:d4:87:9e:ef:f1:99:2b:dd:9e:46:7b:18:d0:10:ab:00:
         ee:a9:fb:fd:9c:90:6d:93:87:46:45:bc:e9:4e:7b:e6:40:fd:
         cd:1f:4b:1f:59:86:69:e3:bc:e1:b9:e7:70:fc:65:8e:f2:4f:
         e5:14:f5:3d:fe:68:b2:7b:6c:b9:55:06:7c:a6:2a:ad:de:8f:
         30:96:21:3e:a1:fa:b3:6f:38:1e:61:68:5d:21:51:db:fe:dc:
         c6:57:a8:3b:75:a9:ce:a9:fe:4a:7e:f2:5f:bd:3a:0d:f7:4e:
         35:5c:35:d4:49:72:cb:c6:e5:99:f3:9a:07:60:11:42:34:77:
         44:95:99:10:bd:b7:93:87:32:eb:7f:fc:b5:e5:25:a2:ba:91:
         2d:91:b9:1a:59:a0:00:2f:0b:11:dd:c1:bc:1e:f3:a6:e5:9f:
         a1:59:22:19:26:cb:82:ab:b7:2f:8d:41:fb:ce:2e:28:b7:a3:
         f4:b6:3a:07:fb:11:0f:11:fd:e6:d9:9b:b8:cc:f2:f1:c5:2e:
         7e:b8:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:10 2025 by rpki-client