Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File:                     XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier:          dqyBdpNWQ8FM/wEA7YrVXOcCbj0/ioqIEWZ6YIOEtLs=
Subject key identifier:   48:38:28:8C:67:A1:F9:19:21:49:B0:BD:5C:BC:12:3C:B7:09:F1:FB
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer:       /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial:       0199FC58BA8B07FA5768A3C26C6C58462C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number:          117D
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
                          2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 2Qw32LGLAUWi5qUGaYUIdj4zzRHWV7Acdm1/3083diQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ba:8b:07:fa:57:68:a3:c2:6c:6c:58:46:2c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=4838288c67a1f9192149b0bd5cbc123cb709f1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:e0:d8:1f:70:7e:61:46:21:f3:ba:dd:99:
                    a8:54:1b:2b:f2:b5:bd:61:6e:7a:b9:86:7f:06:c0:
                    e8:39:c2:6f:13:98:b8:40:f0:59:e7:fe:0d:72:ee:
                    ed:3f:71:ef:8f:98:3b:3a:27:46:f5:0f:63:e6:d6:
                    6d:51:ab:15:d3:3b:06:89:ea:01:b5:86:28:bc:f6:
                    69:c0:e7:f0:c7:10:3f:17:6b:bb:49:35:4a:8f:dd:
                    8b:7b:a0:72:76:9c:a1:ae:91:d9:29:0c:b1:2e:c5:
                    df:c6:4d:dc:0a:75:58:05:fc:99:fc:af:b4:af:77:
                    52:77:70:1a:16:1d:57:76:0c:47:d7:57:1f:2a:16:
                    9f:b9:a3:7a:68:e8:92:ba:ce:8c:b2:22:92:50:fd:
                    93:fd:87:55:a7:5e:f1:4e:fb:e2:a6:ad:12:49:40:
                    10:09:52:73:9f:4f:3a:7c:79:58:90:a4:f6:b0:40:
                    9f:c1:c7:69:1a:02:fc:37:be:87:8a:21:99:2c:e0:
                    8f:52:98:9f:a0:ef:7f:35:0d:f6:a0:15:b1:38:1b:
                    37:be:85:aa:d7:bb:26:66:6d:9d:74:17:7d:59:b6:
                    a1:40:a9:9e:80:b4:fa:d2:69:ef:0f:73:f9:33:1b:
                    8a:e1:a8:d0:bb:8c:7f:60:ca:43:04:a0:bf:0d:03:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:28:8C:67:A1:F9:19:21:49:B0:BD:5C:BC:12:3C:B7:09:F1:FB
            X509v3 Authority Key Identifier:
                keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:07:e6:f4:69:d2:a2:08:5c:47:f9:11:24:fe:c6:b7:88:
         46:f6:ae:53:36:d3:18:57:24:45:cb:c6:37:db:e9:54:1e:e7:
         16:c3:cc:98:b8:cc:b1:40:be:3c:09:2f:6d:91:c7:dd:6d:a8:
         40:4b:a0:4a:59:ab:d0:04:17:49:63:c6:6b:d5:01:84:9c:cb:
         d6:c2:24:71:94:df:9f:db:53:38:67:ce:22:4a:3c:44:89:dc:
         45:f4:f0:fc:6a:5e:1e:bd:01:e2:9e:4c:ac:28:31:3b:47:42:
         d1:30:36:4e:a8:db:df:3b:12:f8:aa:e2:08:55:c0:ae:68:6a:
         d8:d1:20:c2:cb:7b:4b:90:fd:48:c9:cd:b4:30:82:62:c8:e2:
         06:2e:c6:09:65:3b:81:7a:e2:96:8d:c8:bb:7f:ca:ec:6d:be:
         d2:37:08:4c:96:b1:11:75:77:f7:60:b0:1d:61:5b:04:30:f7:
         54:7b:c4:6b:de:29:ce:7f:12:72:5a:0c:c7:a2:9a:f5:8c:0d:
         c9:46:43:58:ef:08:d5:23:6a:bc:bf:b0:f1:b0:42:12:ab:c9:
         a5:1d:fb:62:aa:96:a5:d0:02:7f:ce:c4:51:0f:33:07:39:99:
         d9:e6:ce:48:4a:8b:c2:0c:9f:03:28:9f:d8:51:99:2c:29:dd:
         8f:f5:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:10 2025 by rpki-client