Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          MEPyZ2Lqy4I+9iMI3t1vytDazO2PMJKjWCIRTd3vJws=
Subject key identifier:   2A:38:4B:3A:D6:0A:C7:7A:B8:9C:BB:61:F5:11:01:B6:D9:88:25:69
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       0199FC8F4390581E58FB37DD06D104EBDD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          067A
Signing time:             Sun 19 Oct 2025 13:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:11 +0000
Files and hashes:         1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
                          2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: bzu1cWQhDIw0iiR5eillCdGZAlsjiT7NwfTtUAf9ZmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:43:90:58:1e:58:fb:37:dd:06:d1:04:eb:dd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: Oct 19 13:01:11 2025 GMT
            Not After : Oct 20 13:01:11 2025 GMT
        Subject: CN=2a384b3ad60ac77ab89cbb61f51101b6d9882569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:08:5f:ae:20:44:ec:47:21:21:b8:ef:71:
                    72:b7:e0:ed:a0:b0:b1:0a:25:18:26:98:1c:eb:0f:
                    49:93:8b:e4:97:49:06:25:18:d3:1e:fb:3c:92:d8:
                    a9:2b:fb:bd:14:53:15:08:b6:db:a8:fa:2e:8f:36:
                    90:af:c4:69:7f:ba:ec:06:4b:77:37:81:fc:5b:1b:
                    e0:6c:8d:ff:ed:19:af:a7:73:6c:1b:e2:c2:be:a3:
                    e5:3b:f5:12:a1:e6:e1:75:7a:87:6e:98:90:ac:b5:
                    3e:43:95:7d:6b:f1:ed:70:9d:82:52:f4:74:d2:69:
                    bf:b9:3b:a9:a6:c5:a3:20:04:9d:2a:9f:2a:6e:69:
                    4f:34:4e:ba:3c:1f:dd:75:bc:2f:51:93:18:66:14:
                    cf:f1:48:0b:c9:39:cb:27:26:91:95:92:ba:36:69:
                    77:32:07:da:b9:d9:c1:47:30:b9:83:bd:53:8e:6d:
                    4a:06:b6:ab:1b:a2:52:b2:a6:4e:89:d8:12:7c:d7:
                    2c:b5:6a:c9:9e:d8:34:56:fa:17:3d:56:11:f9:bc:
                    ed:30:2b:29:37:b6:c4:b7:03:02:21:7a:82:c9:c8:
                    5d:f5:b5:ac:51:1a:d4:9d:41:e7:08:c8:3b:f7:af:
                    3c:ad:8c:e8:8d:ae:bc:dc:dd:dd:9f:24:bc:a4:64:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:38:4B:3A:D6:0A:C7:7A:B8:9C:BB:61:F5:11:01:B6:D9:88:25:69
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:51:09:59:cb:4b:0d:d9:9d:31:a8:da:6c:a0:75:f0:a4:
         ce:19:25:6a:83:63:7c:9b:a1:35:19:8c:dd:7e:08:a3:80:a0:
         92:e0:9a:17:d6:71:de:6b:f6:f5:bc:af:a6:8e:a1:1c:ec:3d:
         3d:e6:6b:a9:62:8a:72:8f:13:9b:09:45:cb:0e:33:b7:64:bc:
         3e:1c:a1:b0:de:4c:f7:fc:0b:5d:18:56:7a:c6:a9:df:d9:63:
         92:3b:3e:19:b0:df:92:9e:83:b7:45:df:09:46:f5:e2:60:b6:
         f5:bb:2e:65:2e:a6:f0:4a:17:ed:ff:a0:af:d4:18:18:7a:36:
         56:cb:f9:12:70:2f:2d:f1:ed:5a:3e:a2:02:ee:6c:c1:37:9c:
         a1:e5:2f:bd:05:1c:20:30:80:33:62:9d:f6:ec:9f:f0:fa:ac:
         88:71:9f:97:8e:b0:fc:f6:3c:74:2a:16:59:a2:c8:41:4a:0a:
         de:ac:16:c4:07:3a:07:74:32:3f:88:29:48:7c:13:3b:b6:3e:
         ba:fb:25:7c:2e:26:48:be:63:83:2b:60:5e:87:eb:7c:38:26:
         df:09:4d:3a:e1:11:d9:8d:2e:ff:cf:34:67:59:67:bc:ef:13:
         38:9b:1b:4c:f2:f8:c9:ab:e6:4b:79:a5:69:2f:6f:9e:78:47:
         e7:ce:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:59 2025 by rpki-client