Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          D5OTgqmr2QmuUtZsUpggzt55zpfJIsNM47Wa/aDAzmk=
Subject key identifier:   7A:09:41:E0:CD:E1:2E:70:60:FF:86:E7:8E:AC:A2:E5:2C:D0:5F:BC
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       0199FC58397CC89617F1DD91A2B730A10879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0B62
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: nXoluICX64IXO7BN/F8Huf4r33BHVqDgYDZMdyKDTGY=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:39:7c:c8:96:17:f1:dd:91:a2:b7:30:a1:08:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=7a0941e0cde12e7060ff86e78eaca2e52cd05fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:08:3b:a4:68:33:2f:7f:58:74:5c:3f:30:
                    eb:d6:9e:ac:21:aa:13:49:77:bd:b5:00:e6:8e:4c:
                    3f:69:9b:c6:f3:8b:fb:c4:f2:df:29:db:8d:a3:3c:
                    b3:c8:3f:4f:1c:b9:8e:63:d2:27:2b:0e:31:37:e5:
                    1f:92:58:7a:ac:99:e0:47:e3:9e:07:cd:1a:34:8c:
                    ca:e4:4f:b5:f6:7b:72:23:c6:cf:de:48:96:ba:4c:
                    cd:f7:ac:28:63:72:f9:3c:ef:24:15:73:56:76:b1:
                    d8:0b:87:a1:21:0e:e5:24:32:6e:2d:46:48:8e:e1:
                    3f:4d:82:21:3c:b9:1c:28:f0:01:b9:af:73:13:be:
                    ee:4f:89:e3:74:6a:aa:16:7a:e9:d4:ae:0b:63:63:
                    62:09:bd:f8:9a:87:98:a8:ef:57:bd:6b:91:4a:63:
                    cc:9a:03:c9:8d:af:f4:8f:41:98:8b:e4:13:7b:fb:
                    d6:59:fd:a9:1a:7e:5c:fa:2c:15:8b:39:18:1b:8a:
                    0d:0c:8c:e6:7a:57:a4:99:25:29:09:93:ef:a5:3f:
                    bc:a5:26:9a:14:5c:07:89:67:eb:bc:4b:d7:0a:be:
                    e0:3b:83:94:6b:42:bf:47:62:e3:6f:70:d6:65:17:
                    ed:b4:1d:ec:4e:16:08:56:26:a5:0a:03:7a:bb:ba:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:41:E0:CD:E1:2E:70:60:FF:86:E7:8E:AC:A2:E5:2C:D0:5F:BC
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:af:00:d3:69:8f:f0:11:11:63:da:bd:f6:70:8d:6e:e6:ce:
         92:d9:e5:d3:36:37:58:d4:b3:6f:82:f1:dc:cb:7a:94:08:57:
         c4:5b:d9:a9:d8:b7:7a:e8:0c:5f:fd:8b:0c:11:b3:f2:90:b8:
         ad:ef:fb:02:6a:84:f7:30:37:49:00:99:8a:5f:d9:fc:0f:8c:
         04:c1:71:c1:e2:e5:c4:b6:9c:0d:ab:fb:da:cd:0c:a5:5b:07:
         82:9c:10:f5:32:2f:e9:f1:e5:a5:3b:bd:3b:82:65:1e:4b:52:
         14:e9:51:8c:ae:82:3f:ab:4c:2d:a5:b5:1a:14:73:5a:76:fa:
         9e:05:33:f0:9f:c7:f6:41:b1:99:af:7f:80:f3:29:c1:4c:bb:
         c4:aa:43:fb:54:a5:9f:80:31:6e:26:aa:28:78:84:8b:52:c3:
         60:2c:8b:a8:9f:81:4f:61:1b:3a:4f:b4:34:fc:d3:82:50:21:
         e1:e6:51:90:8d:e3:22:0e:c1:af:7e:a5:49:7e:11:60:ac:95:
         8b:0f:fa:9b:48:5a:07:e1:b5:76:01:06:e1:fb:9a:7c:18:d0:
         43:28:19:0c:b0:35:18:25:f7:e7:53:45:b4:e1:3d:6b:fe:e4:
         88:f1:1a:88:d1:f2:c6:6a:79:30:33:a4:7c:5e:e6:62:b5:e8:
         40:f4:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:49 2025 by rpki-client