Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          NqdUkzJYZlv2AL1vjFvkmn4KfutYFYwTAfEOWK2UrTA=
Subject key identifier:   E3:00:8F:8D:AA:1C:8B:CC:35:9A:1A:AC:40:99:D8:04:1C:9A:0D:E2
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       0199FEB4D78C69E937277FC997314C0D7E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          1394
Signing time:             Sun 19 Oct 2025 23:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:28 +0000
Files and hashes:         1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=)
                          2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=)
                          3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=)
                          4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=)
                          5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: O9sLF05cXpSYRPD8kvMgrRqq+oMriKm1Eyp0lNP1XGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:d7:8c:69:e9:37:27:7f:c9:97:31:4c:0d:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Oct 19 23:01:28 2025 GMT
            Not After : Oct 20 23:01:28 2025 GMT
        Subject: CN=e3008f8daa1c8bcc359a1aac4099d8041c9a0de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:03:f9:bd:d1:86:6a:51:d7:29:65:44:98:
                    14:a4:0a:ca:5d:a9:3f:6e:29:d5:8b:21:8b:a6:91:
                    a3:03:39:22:db:9a:59:17:38:7a:f0:f9:ed:a4:0d:
                    76:81:48:1e:2c:57:51:79:9d:f2:c7:9f:af:4a:6b:
                    0c:a7:b4:7a:b7:80:f0:ce:9e:ef:ad:cb:d8:83:62:
                    ca:e4:e3:45:97:af:54:f7:96:9f:ca:fa:04:42:89:
                    e8:fa:43:0b:17:a5:95:b2:c9:7e:d9:6f:9e:ff:fe:
                    00:0f:ca:72:fd:9c:a4:78:f1:cc:aa:64:22:1e:26:
                    47:06:6a:d4:4a:26:49:ec:f7:be:a4:fe:86:03:7b:
                    b7:f6:88:a7:ec:f9:36:c8:f0:c3:d1:70:ff:8b:89:
                    3c:ab:0f:75:57:5e:c5:cf:28:ef:d0:34:66:9d:27:
                    66:aa:78:20:29:64:6c:95:04:28:e2:a4:0a:c9:36:
                    4e:e1:23:d8:fd:65:46:e3:40:c8:cd:74:52:44:b0:
                    21:c3:dd:eb:b4:fb:de:15:a4:fb:ba:0d:ca:01:33:
                    31:37:66:60:60:b4:c9:e1:a2:af:a9:8d:9f:77:1f:
                    d7:7e:63:e2:e9:46:4a:10:4c:60:47:61:83:11:8e:
                    4b:59:9d:60:26:12:e1:f4:73:da:25:79:00:01:7b:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:8F:8D:AA:1C:8B:CC:35:9A:1A:AC:40:99:D8:04:1C:9A:0D:E2
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a6:b4:ea:06:54:79:8d:ba:73:cb:7b:52:30:e2:21:91:f8:
         eb:b6:f9:36:86:57:d4:82:fb:c0:e7:03:2d:cf:ba:63:09:87:
         90:db:c3:4b:92:5d:8e:e1:ae:99:39:13:79:ad:29:87:04:42:
         17:0f:62:3a:89:3b:cd:3a:11:e1:96:ad:48:3c:d4:12:91:54:
         dd:e7:d9:5d:0a:70:53:1d:4d:a8:30:22:93:51:66:96:a4:4e:
         35:28:5c:94:90:00:1f:07:4f:e0:68:0d:0b:3a:1f:4d:d2:35:
         0c:ca:5a:0a:02:58:24:49:93:51:11:ce:a3:9a:2d:e8:08:fc:
         db:a7:3e:41:42:43:d9:34:3e:41:c6:1b:0f:cb:ff:65:dc:5a:
         b4:75:eb:f8:6b:ae:2c:5c:28:b4:14:b7:bf:b5:a7:e6:3d:93:
         b3:3c:7f:f1:24:1b:a1:2b:dc:17:c1:9c:d1:57:42:92:b6:2f:
         29:8d:5c:f1:f0:84:82:e5:74:1f:b1:ac:90:4b:a8:3f:4e:8d:
         1e:71:a4:61:5d:60:ef:71:45:ea:de:26:8b:7a:e1:70:d3:a3:
         a8:6c:85:18:b6:93:c9:4e:fc:1d:b1:6e:6b:0e:99:a3:e7:bb:
         86:62:15:55:7f:3f:80:8d:54:bc:d5:bf:12:ce:b0:2b:04:0b:
         f2:fc:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:21 2025 by rpki-client