Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          AhFiyt09FgLvmEYgs4NUT5qMfiiDV8CuMUy2gj9nB2M=
Subject key identifier:   E7:9A:35:25:51:C1:E7:EA:EE:B5:91:23:E1:5B:64:7C:9A:2E:88:E7
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       0199FBEB9BF04974305EA3D4E0E899F88608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          104E
Signing time:             Sun 19 Oct 2025 10:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:26 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: 1IhS7v4QHHuuC+vRoWm4dGEbs25rYNE+t1Cdt4jxTRw=)
                          2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9b:f0:49:74:30:5e:a3:d4:e0:e8:99:f8:86:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Oct 19 10:02:26 2025 GMT
            Not After : Oct 20 10:02:26 2025 GMT
        Subject: CN=e79a352551c1e7eaeeb59123e15b647c9a2e88e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:14:43:ce:e4:41:02:86:8b:29:7e:af:09:5f:
                    22:29:4b:10:ed:1a:a5:2e:cc:2e:ef:5c:a2:4e:5d:
                    f7:54:65:19:ca:12:22:fb:9b:90:87:e3:0b:11:40:
                    49:1d:03:69:f9:84:56:32:2b:48:15:cb:7d:a4:25:
                    44:9f:3f:a2:7a:b8:81:10:f6:fa:1e:d1:45:c1:b3:
                    a0:85:53:a6:78:a7:59:2f:b0:b2:d8:7a:ae:7d:0e:
                    8f:35:40:d8:e0:29:b1:fa:18:72:1f:bd:98:ca:0b:
                    d6:bb:63:28:96:6e:2b:b9:e5:3c:68:3d:98:23:cd:
                    31:ef:17:36:d8:2a:dc:cf:65:9b:3f:27:f6:ce:9c:
                    a8:e2:6d:64:0a:72:68:60:a1:df:c6:da:ba:27:0f:
                    85:1f:04:2d:39:42:0f:f9:c2:da:81:a5:ba:ff:0a:
                    60:6f:eb:3f:7b:14:c2:44:bd:ff:6d:98:3f:c7:06:
                    e6:d5:b1:0f:90:81:50:e9:e1:8f:82:ef:1d:14:dc:
                    c6:47:b1:e1:9a:98:89:da:4e:02:5d:f6:95:79:b9:
                    09:4a:0a:82:6b:e5:df:94:32:6e:dd:40:58:f0:70:
                    c0:30:16:dd:2f:2c:c5:2e:7d:8d:71:2e:d5:1f:fa:
                    66:36:5f:22:31:2e:e6:98:8a:7c:37:e6:91:74:e2:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:35:25:51:C1:E7:EA:EE:B5:91:23:E1:5B:64:7C:9A:2E:88:E7
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:af:da:02:29:48:4c:ac:30:53:9b:01:cc:d8:a8:c9:52:7b:
         9c:39:ce:04:cb:e7:d0:6e:eb:ae:92:7d:e3:56:88:aa:12:48:
         7f:42:6c:d1:2a:58:c4:73:af:c2:28:50:3c:9c:c6:e7:fe:69:
         fb:21:88:4f:96:6d:5c:bf:83:65:d5:8d:79:23:c2:12:a9:6e:
         e5:70:8d:54:29:05:5d:2d:d0:5c:c2:23:b2:db:41:54:4d:92:
         41:83:2c:94:be:91:6e:3f:4b:a3:64:fe:60:57:dd:36:bb:58:
         1b:05:bc:1b:db:79:76:b9:c2:87:01:33:29:2e:03:7b:4c:b5:
         ea:bb:ab:00:9d:4b:9c:9b:0d:c1:9c:de:d3:74:8a:2b:2a:47:
         fd:b9:25:68:a9:e4:10:3e:82:d9:c4:1e:97:ee:9e:9e:54:43:
         67:cc:d0:23:8b:23:ac:9f:9c:8d:26:3a:22:41:ca:91:42:33:
         85:bc:96:03:24:19:a9:20:d8:60:4c:81:68:71:c2:af:5f:83:
         a5:cf:2e:94:82:45:88:23:16:8c:02:9f:fa:ea:d1:9f:5d:0a:
         d3:3b:94:33:3c:9e:d0:f9:a4:cf:36:4f:1d:3e:c0:50:18:c1:
         19:0a:93:7d:e2:20:4a:2e:71:06:11:b0:65:3d:04:4c:59:e6:
         2e:88:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:26 2025 by rpki-client