Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File:                     X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier:          4EV4zhmihtQJnxVo9G+PXrFvfppFsk2gVQx+4BmeXTI=
Subject key identifier:   61:59:19:B8:4A:D2:3B:0D:31:F6:E2:72:9A:16:9A:2B:E1:73:31:9E
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer:       /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial:       019A01B67BD7DB83AF58663042F10160118D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number:          0F81
Signing time:             Mon 20 Oct 2025 13:02:07 +0000
Manifest this update:     Mon 20 Oct 2025 13:02:07 +0000
Manifest next update:     Tue 21 Oct 2025 13:02:07 +0000
Files and hashes:         1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
                          2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
                          3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: w4nRf0uXcVAZ5X6WrC/9T+EAhFW+K99aFp+beBfQm6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b6:7b:d7:db:83:af:58:66:30:42:f1:01:60:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
        Validity
            Not Before: Oct 20 13:02:07 2025 GMT
            Not After : Oct 21 13:02:07 2025 GMT
        Subject: CN=615919b84ad23b0d31f6e2729a169a2be173319e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:46:03:5a:a5:3c:0d:cf:e7:53:f5:72:8c:
                    7c:c0:16:26:8e:b1:df:3d:f3:3e:cc:0f:4c:3b:91:
                    05:bd:97:77:b7:a2:60:bd:3a:57:44:b3:9e:06:a2:
                    b4:39:35:24:21:8b:5c:cc:4b:2f:bd:ff:5d:23:1d:
                    1d:69:23:7e:e1:d9:7d:b9:8d:3f:1b:52:a1:00:6a:
                    d4:a3:b4:40:29:de:18:2c:cc:6c:6e:48:da:bf:81:
                    56:45:01:ac:6b:83:2c:ba:7f:d5:b4:0a:ff:9c:bb:
                    d5:9c:5a:a4:c4:7a:38:6f:69:5e:94:08:c4:70:3f:
                    dd:ba:f3:b4:fd:cd:8f:0b:6f:0a:19:4e:a1:8f:c8:
                    1a:fb:4c:d0:bd:f9:68:3b:a6:46:de:22:77:00:8e:
                    e4:fa:f9:a2:85:b4:a0:d1:e8:f7:a3:29:2c:cf:e2:
                    81:ff:c1:c4:04:4c:94:72:c2:66:dd:f1:a7:d0:c4:
                    92:bf:73:a4:ca:77:8c:67:52:38:85:ff:65:55:68:
                    81:6a:2d:c1:df:53:77:13:a5:ed:a0:bc:07:0d:99:
                    fb:18:6a:01:6d:b8:d1:bb:1b:2a:fb:8b:21:92:53:
                    3f:6c:dd:72:3f:b6:2b:51:76:50:1a:5f:c9:c2:3f:
                    2d:d6:db:ec:89:32:99:c2:f5:af:1f:bc:63:91:20:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:19:B8:4A:D2:3B:0D:31:F6:E2:72:9A:16:9A:2B:E1:73:31:9E
            X509v3 Authority Key Identifier:
                keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:6b:fe:64:fd:ba:88:b4:98:eb:08:00:a7:f3:22:b6:e7:
         5b:f5:d7:31:fd:78:e5:df:a9:fe:2a:96:0f:db:4b:46:fb:d6:
         17:d5:d7:ff:87:62:e9:1b:9f:46:42:b4:56:40:89:fd:b2:60:
         ed:77:b0:b9:91:a7:dd:34:c3:bd:86:2c:53:a0:25:d3:29:c8:
         ab:48:9a:8a:12:1d:95:69:bd:f3:63:67:24:4c:a1:56:7a:ba:
         e3:80:7a:59:79:35:a9:1f:2e:5e:78:ac:d4:e2:62:95:b7:0e:
         9c:c9:fb:d5:31:1a:89:db:ca:51:9f:0c:91:90:3d:15:54:0d:
         7b:b6:50:96:21:4f:7b:8a:54:e4:7c:ba:fe:8d:65:d8:3a:0b:
         36:e0:96:9b:fe:26:54:28:5c:da:4b:e0:a8:77:af:28:ca:a4:
         21:c0:4b:ec:49:f4:20:a4:0d:df:24:ae:a8:40:a2:84:1c:47:
         a3:87:21:62:42:dc:42:48:66:2d:66:3e:1e:15:02:01:27:07:
         13:40:c8:a1:47:c9:71:41:5a:d4:c0:42:03:fc:f6:f0:fc:d6:
         3b:29:b7:d4:82:32:3e:9c:54:af:0b:5a:88:d4:b9:60:05:82:
         26:f3:3a:49:db:39:8f:ab:c8:32:c2:c2:bc:db:96:3a:f7:34:
         b5:cb:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:19:59 2025 by rpki-client