Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File:                     68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier:          CiQ6GZ4I6jwWu8/K9IFlz3HoufZ36z+nxqTBjiMo0WM=
Subject key identifier:   CE:3D:00:EC:4B:08:8C:C1:79:87:86:61:A4:4F:AC:19:21:C3:94:8C
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer:       /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial:       0199FC58EBC33965F31BBA12B7BF7C9BD3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number:          0FEF
Signing time:             Sun 19 Oct 2025 12:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:49 +0000
Files and hashes:         1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: YQNSEw9zKyK8shWmeDexe57es8KfQaMpVx86vMNIjpM=)
                          2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:eb:c3:39:65:f3:1b:ba:12:b7:bf:7c:9b:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
        Validity
            Not Before: Oct 19 12:01:49 2025 GMT
            Not After : Oct 20 12:01:49 2025 GMT
        Subject: CN=ce3d00ec4b088cc179878661a44fac1921c3948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:e7:e1:4c:4b:46:d6:93:46:59:c6:16:80:
                    d8:fb:4f:08:38:50:a5:78:14:04:79:bd:f1:fc:55:
                    b4:b6:49:79:18:03:ba:26:eb:4f:19:0e:da:95:23:
                    f5:36:d3:1a:64:ba:cb:bb:da:43:f9:8d:58:91:32:
                    d2:85:a2:ac:3e:bc:16:a2:55:79:40:f3:70:52:5c:
                    c1:2e:06:79:a3:0d:2a:20:d1:1e:53:59:53:93:9b:
                    cb:c4:f6:70:f6:53:41:06:83:37:9e:11:66:29:6d:
                    a6:0c:25:67:9c:c7:a0:c6:d0:74:d4:e1:ef:a6:dd:
                    65:fe:33:27:34:d3:55:2d:d5:7e:9d:86:43:75:00:
                    92:1a:b1:1b:48:24:65:50:dc:b0:2a:63:f9:89:98:
                    a7:98:f4:51:48:bd:2b:17:63:05:c9:b8:11:33:53:
                    aa:3d:08:7b:70:1c:67:34:92:bd:3b:fb:cd:35:7a:
                    26:89:6f:f3:23:1a:d1:52:66:4a:49:b7:55:35:59:
                    7c:42:00:84:d4:0c:de:a7:ef:21:cc:b3:f7:6d:cb:
                    d8:19:dc:12:0e:30:0f:40:72:39:2f:95:d6:8c:df:
                    c1:c2:3e:8d:ee:09:f0:d3:12:34:03:5a:f3:ed:db:
                    83:00:96:6a:d4:6a:62:59:e5:e4:f7:c2:0a:3c:2d:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3D:00:EC:4B:08:8C:C1:79:87:86:61:A4:4F:AC:19:21:C3:94:8C
            X509v3 Authority Key Identifier:
                keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:49:b7:56:90:5b:56:e1:58:32:87:1b:3d:0c:f6:93:8c:
         8a:cf:d7:49:61:2d:ce:d4:c7:b5:94:e9:ee:5a:c4:c3:32:53:
         39:2b:3d:36:5b:91:10:ea:0c:6c:dd:c3:c9:60:1b:ff:3e:ee:
         59:f5:b3:36:db:02:18:fd:9c:2b:a9:31:c5:38:7b:9b:cf:ec:
         d6:32:62:61:b6:ff:6f:76:c6:fb:8a:d6:54:62:42:24:a5:a4:
         9d:75:37:65:81:c7:4d:0b:d5:8f:20:a9:f2:f9:99:15:c5:b1:
         f6:c3:e9:8b:75:e9:75:a7:f9:0a:c0:71:a8:fe:d0:db:61:4f:
         df:6c:77:20:20:e4:fe:5d:8c:cb:43:c1:e7:5a:38:9b:54:58:
         f8:19:d3:f1:17:9b:0e:f8:a9:1a:38:71:2e:05:95:34:6e:a3:
         3e:30:28:98:7b:ee:bb:9a:bd:bf:30:6c:1b:6f:c8:16:d9:8b:
         5e:d6:2c:4a:b5:89:37:94:7b:74:5f:65:c9:e9:43:fa:fd:3f:
         5c:2c:9d:64:12:b9:f0:4b:76:96:63:ef:f5:59:98:48:78:f4:
         68:c5:b1:60:da:f8:a1:09:92:c4:75:9b:17:3b:29:10:49:e0:
         c3:5a:27:41:a8:3d:e1:b0:ed:29:8e:d1:7c:1c:71:74:d7:69:
         b5:3f:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:24 2025 by rpki-client