Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File:                     2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier:          Rs2ZmqtccJ/hLoudzfoTOC1RZT0Xn9Yq3UHYgVXkIlg=
Subject key identifier:   26:07:79:E5:84:99:D7:B9:3B:E8:01:B6:DD:EE:9B:8A:AB:35:96:42
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer:       /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial:       0199FC5859B53510870F83907DE3878F98AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number:          02C6
Signing time:             Sun 19 Oct 2025 12:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:12 +0000
Files and hashes:         1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: 8w1S/e+HF9rV2KZ3xGaK8uthBb23IU2bQlfta1wONXo=)
                          2: u49LP2KZbug5chay4GBuyj76KF4.roa (hash: iitJr/xtGKA9fcThsDwdBfqlW1f+LjPeCOduA3NSE/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:59:b5:35:10:87:0f:83:90:7d:e3:87:8f:98:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
        Validity
            Not Before: Oct 19 12:01:12 2025 GMT
            Not After : Oct 20 12:01:12 2025 GMT
        Subject: CN=260779e58499d7b93be801b6ddee9b8aab359642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:67:84:58:42:12:1d:fb:40:89:39:82:e1:
                    9f:9b:ae:e4:83:3e:84:09:ca:28:ba:51:41:76:76:
                    48:96:fc:11:92:fe:fe:c1:97:0d:2e:b5:be:cc:c1:
                    dc:78:b8:cb:50:cb:2f:ac:ca:39:22:23:33:25:47:
                    69:d8:82:87:71:36:04:6a:d5:0d:9b:e2:1a:19:42:
                    71:a5:9a:8f:c8:c6:f8:73:78:6d:ff:94:3f:04:e2:
                    73:59:34:de:0a:fa:4b:e2:59:50:ab:b0:c5:9c:54:
                    6a:be:07:fa:08:d1:c3:bc:96:2b:7e:90:75:2f:69:
                    67:bc:39:2a:f3:6a:00:30:ad:40:98:74:38:88:71:
                    93:d6:fe:df:41:ff:41:c6:38:17:bd:37:e7:36:98:
                    b9:cc:79:08:f5:ac:83:af:88:ba:9f:ed:94:a6:61:
                    df:17:1f:da:1d:d5:ec:0f:b4:17:24:25:5b:90:cc:
                    66:06:55:b8:7f:d0:5a:d7:95:4b:c8:2c:a0:8e:ed:
                    7d:65:b3:0e:09:15:40:d1:d0:7f:a8:00:20:8e:a6:
                    4e:e2:14:fe:ab:a7:fe:80:9b:49:69:09:66:ff:94:
                    69:13:b8:db:9f:54:a3:b7:2e:18:89:0a:a3:68:e7:
                    5e:22:19:a3:6e:45:8f:c6:0c:bc:5b:c4:8e:a6:d9:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:79:E5:84:99:D7:B9:3B:E8:01:B6:DD:EE:9B:8A:AB:35:96:42
            X509v3 Authority Key Identifier:
                keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:97:33:37:03:8f:f7:2c:3d:ab:aa:49:ad:b7:99:2f:c0:cb:
         f6:a1:d4:4e:8c:92:47:21:19:d3:23:1d:cb:42:59:84:d0:48:
         ce:e9:a6:05:fa:3d:99:35:6e:9a:e5:07:b6:92:3a:e6:9b:18:
         c4:ac:66:eb:d4:35:02:73:50:d6:a8:6a:3d:e9:bf:02:c2:a0:
         6c:2f:8d:b5:0e:8f:bc:d1:65:92:53:76:73:ba:5a:6a:ee:9e:
         2a:4a:45:9f:37:de:56:fc:da:c3:a0:6f:c5:1d:57:83:65:e9:
         1b:a7:80:90:4d:85:e0:af:5d:c5:1e:16:b2:18:16:0e:dd:1f:
         b1:47:50:e4:6e:f4:70:62:e7:8f:c4:f3:8c:2a:e6:e2:e5:7a:
         af:e8:7d:c4:3b:a2:7e:13:e8:df:de:4e:53:45:13:4a:50:6a:
         8a:4d:ed:6e:1b:d5:dc:53:a0:1d:35:72:14:22:da:f7:8a:22:
         f7:02:b6:6e:09:f1:a9:6b:b4:d7:9d:5f:ca:5a:18:bc:a3:25:
         cb:ac:42:89:2f:cd:c7:ac:e8:16:a0:ce:12:d9:d4:e1:7d:e7:
         d0:7c:0d:55:1b:96:0a:5f:dc:67:61:ed:32:b9:a4:95:39:9d:
         9e:c2:aa:ba:fa:84:07:04:43:02:50:06:c8:d1:f4:db:7a:d3:
         c6:66:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:12 2025 by rpki-client