Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          J0o80GWptFF5e+5ZfQ24GXaeV4fXQzblSefAgI8DpSQ=
Subject key identifier:   BB:52:E6:64:81:A9:62:9C:F9:5F:12:09:E3:C7:9A:55:49:A3:72:49
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       0199FA69FDA2243E24B6E6DC10915A138F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          1416
Signing time:             Sun 19 Oct 2025 03:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:14 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: 8BW6EwfuTSM/Cqmty+MfctcORimPtcmfDL6h5eniZ3U=)
                          2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:fd:a2:24:3e:24:b6:e6:dc:10:91:5a:13:8f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Oct 19 03:01:14 2025 GMT
            Not After : Oct 20 03:01:14 2025 GMT
        Subject: CN=bb52e66481a9629cf95f1209e3c79a5549a37249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:0c:d1:a2:71:be:9d:e4:67:e1:28:64:86:
                    0c:04:48:a9:32:d2:b9:a7:ac:6b:3f:88:13:c6:19:
                    91:7d:be:51:ec:83:51:03:dc:26:d6:03:2d:06:ce:
                    d9:be:d3:da:ff:6f:66:3a:f1:c5:94:db:f5:2b:cb:
                    7d:d7:58:5b:8a:03:38:0a:13:ec:f6:fb:bf:77:56:
                    87:9a:37:8c:4b:29:d4:65:90:bc:b5:a5:ca:fd:5f:
                    fb:57:df:07:17:6f:6f:dc:24:6c:2d:7c:7b:9e:33:
                    5e:2e:6d:de:37:71:61:72:df:1d:ce:b4:0d:49:e9:
                    b1:b1:9c:8b:9a:00:af:5d:99:d6:b6:7a:d6:46:99:
                    fa:11:f8:39:e7:8a:3a:46:66:8a:cb:a5:3e:cb:6c:
                    e4:44:4e:37:b7:9a:cf:09:74:4e:90:31:8d:e1:a8:
                    3e:e7:11:87:66:27:e9:56:0e:77:fa:c1:db:59:4c:
                    a5:24:f2:7d:52:77:2c:80:92:5b:f0:59:46:c2:0e:
                    96:63:10:20:b4:b4:fe:aa:7e:78:a5:c2:58:97:e3:
                    66:ef:15:6a:77:3e:4f:01:39:fe:a9:42:57:e7:41:
                    db:2d:e0:eb:d4:65:cd:ad:17:38:9a:57:01:73:55:
                    1a:89:a7:c7:13:b6:ee:e7:50:44:f4:27:dc:a7:54:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:E6:64:81:A9:62:9C:F9:5F:12:09:E3:C7:9A:55:49:A3:72:49
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:34:bd:fa:79:d8:e4:3a:e6:e7:5b:63:3a:80:6e:08:3d:3c:
         93:1d:23:65:f4:29:58:0a:b0:09:08:3c:55:66:d7:ce:e0:d1:
         12:6e:91:20:c9:1b:3d:ea:b8:3f:54:0a:fd:cb:b9:40:0f:a3:
         7b:bc:fc:51:5f:de:9c:96:09:9a:e1:b3:c5:00:d6:ab:7d:ce:
         b6:c4:82:8b:3d:11:3b:02:de:87:49:b5:f0:54:18:50:a1:2e:
         3f:69:77:34:e7:01:5d:cb:7b:e9:21:20:0a:79:74:e9:4d:e9:
         dd:68:c9:03:a3:dc:88:4d:a6:15:03:dc:a9:6d:eb:b2:6f:15:
         1c:5e:3d:6e:9e:24:22:b7:31:0f:c9:1c:6c:e6:95:a9:1e:6c:
         8c:d8:9d:4c:61:79:73:51:51:58:ae:51:78:32:2c:c4:d0:e7:
         96:9d:6a:ef:3c:72:2d:7f:7b:a0:8c:34:9e:cf:89:f4:fe:1d:
         72:af:22:3e:87:d0:e1:2a:bb:dd:10:d6:25:7d:f4:b2:ee:d9:
         5f:ff:3b:f7:8e:12:c9:a8:60:f5:9d:35:4d:d2:40:5f:07:11:
         f5:51:25:47:58:ec:40:c6:59:ac:0a:fd:70:27:bb:6f:88:8e:
         b2:6c:be:61:1e:90:a8:ef:5c:2d:cd:d6:07:33:e5:3b:a6:75:
         ba:f7:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:38 2025 by rpki-client