Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File:                     C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier:          s0QBJv3By6NA7NnPoBDopq36G5fLTJdH8ZhwzlcoILU=
Subject key identifier:   67:BF:5A:B8:50:AE:86:6F:C9:4E:D4:AB:4D:E4:48:AA:C6:40:79:DB
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer:       /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial:       0199FAD7A5A44902113206192A1C681F1E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number:          0B09
Signing time:             Sun 19 Oct 2025 05:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:00 +0000
Files and hashes:         1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
                          2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: AM/atGtHi63yrFVqr3G83B8LxzNd09cL1X25wT8YFT0=)
                          3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:a5:a4:49:02:11:32:06:19:2a:1c:68:1f:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
        Validity
            Not Before: Oct 19 05:01:00 2025 GMT
            Not After : Oct 20 05:01:00 2025 GMT
        Subject: CN=67bf5ab850ae866fc94ed4ab4de448aac64079db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:4a:31:e5:36:7e:cd:a9:41:87:98:97:87:
                    87:98:b8:75:5f:6c:9a:ff:10:d0:86:67:08:27:4a:
                    06:bc:e9:53:5a:8d:3e:4b:69:44:42:9b:03:98:79:
                    7d:2d:1b:bf:f7:80:b3:32:c7:0a:d3:6a:e4:56:4c:
                    eb:ce:65:71:47:96:48:51:2c:5b:c1:0b:d6:9e:db:
                    b1:e5:4b:1d:48:15:b9:fe:3a:23:d7:e1:12:9b:7f:
                    f8:8d:14:4c:cd:8b:88:50:ae:73:77:6c:07:1f:0e:
                    e6:a5:53:f3:ec:6c:d7:41:cd:3e:2f:c6:7f:84:5c:
                    be:de:60:2c:56:d1:74:22:26:9a:95:d5:5f:45:c8:
                    f7:ba:3e:d2:10:af:8c:c4:da:20:37:d8:ae:3f:53:
                    fe:13:8d:5e:69:c1:1c:fb:e5:64:46:c6:ab:75:a2:
                    c3:8f:16:8f:05:22:31:71:3e:39:b0:b6:13:dc:88:
                    90:11:59:95:50:83:2f:e8:c0:b3:e5:82:8c:16:ad:
                    d4:68:ba:00:a5:22:58:aa:a1:a1:fb:c2:38:9b:87:
                    9c:e2:ea:12:40:23:ec:3a:37:a8:88:75:44:73:96:
                    35:2a:bb:1f:17:fe:3d:99:dd:88:73:a4:1f:61:5f:
                    d0:61:36:93:75:3b:3e:35:57:f7:6d:63:45:c4:d1:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:5A:B8:50:AE:86:6F:C9:4E:D4:AB:4D:E4:48:AA:C6:40:79:DB
            X509v3 Authority Key Identifier:
                keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:ff:c0:f5:a6:21:4b:e8:3c:64:54:56:10:1a:49:ff:96:
         95:2c:b6:cb:69:51:97:c8:bf:e1:ed:4a:83:b4:2b:bd:48:80:
         02:8a:6d:97:e3:92:96:83:ce:bb:77:af:4c:b1:90:b0:d8:21:
         38:de:22:ab:52:04:ab:8b:82:4c:c1:1a:29:9e:83:fa:58:50:
         6f:a9:a3:fd:75:a5:7c:a8:12:33:8b:17:9e:91:ba:20:18:c1:
         66:95:be:3b:ba:3c:8b:ce:6f:d5:8b:11:03:3f:2b:ee:23:13:
         28:b6:9d:56:8e:fa:7d:71:b5:6c:bd:7d:48:b0:19:ea:d3:19:
         f9:d0:6b:c8:26:14:54:64:37:bf:f5:7b:48:3b:24:d6:2e:56:
         ae:31:37:43:a5:88:4f:dd:52:38:34:f5:ef:e1:1c:ed:f1:9c:
         30:2d:9d:76:d2:c9:a6:03:2d:e4:da:a2:26:ec:6e:dc:24:12:
         78:c1:b9:86:a0:50:f0:0e:9f:3c:c1:2f:2c:b7:50:a2:da:cb:
         23:32:fb:19:a0:2d:31:88:c8:64:62:05:11:db:63:52:70:7f:
         ef:de:5c:9f:c8:35:94:56:4a:31:ad:29:8f:ad:db:7f:7a:f7:
         89:a5:cf:9d:2d:ef:c5:24:74:a1:1b:c5:e7:90:c0:95:87:34:
         72:03:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:13 2025 by rpki-client