Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File:                     _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier:          QngA51AMCejSYl787h9HdolgiLOWGobb4FWgpTOwiYk=
Subject key identifier:   FD:9C:91:C2:C4:54:13:AF:BE:19:B0:12:08:5E:92:A7:56:35:15:9C
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer:       /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial:       0199FE7DF2BD67FF23759FD5B5C94063A2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number:          068E
Signing time:             Sun 19 Oct 2025 22:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:30 +0000
Files and hashes:         1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
                          2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: //MQwEqNiORtFSpMGsMKAY1elca4eKSAUnmhL/JH2XE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:f2:bd:67:ff:23:75:9f:d5:b5:c9:40:63:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
        Validity
            Not Before: Oct 19 22:01:30 2025 GMT
            Not After : Oct 20 22:01:30 2025 GMT
        Subject: CN=fd9c91c2c45413afbe19b012085e92a75635159c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:7e:23:8e:21:e7:7e:1f:96:eb:19:a3:fe:
                    b6:96:54:00:33:5b:6b:fc:95:a7:7c:89:7e:47:62:
                    74:84:a7:64:7e:19:16:90:52:d9:9c:9e:37:12:17:
                    20:99:d5:5b:3d:4f:77:11:0f:84:20:53:b6:b9:fc:
                    29:0e:d2:f1:1a:12:03:72:22:df:d2:0b:17:d4:d6:
                    2f:b3:e0:c6:be:69:ef:63:ff:9e:de:c6:86:28:65:
                    c5:30:63:4f:cf:51:81:bf:4d:fe:3f:4a:fe:04:0a:
                    ae:0b:d7:16:c4:8c:a1:43:38:49:c0:87:b6:17:0e:
                    d9:7a:ae:7f:5a:64:fa:1a:33:01:1c:49:83:57:4b:
                    ff:c3:eb:c4:9b:8d:5f:39:64:e1:79:48:50:46:03:
                    de:be:75:ed:dd:0d:ec:74:b1:34:7a:e5:f8:89:67:
                    82:51:6d:f3:10:d4:ba:0c:03:4d:a2:48:54:cd:4b:
                    43:3b:c1:de:1c:2f:75:1d:b2:e0:66:51:b1:0a:36:
                    87:7c:bb:81:26:ec:e6:bc:5b:13:af:7e:c1:bb:62:
                    67:45:d2:42:37:25:87:a7:d1:32:26:d5:74:5d:61:
                    16:6f:5b:d6:30:ee:20:46:b2:55:7b:89:81:39:64:
                    9d:ec:9d:d1:ac:1e:e5:6f:e7:47:71:c0:58:83:80:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:91:C2:C4:54:13:AF:BE:19:B0:12:08:5E:92:A7:56:35:15:9C
            X509v3 Authority Key Identifier:
                keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d7:6b:44:f0:0d:9d:e7:c3:db:ec:c5:95:7a:f1:e6:f7:0c:
         55:f7:6e:d7:63:e4:b6:4b:13:97:d1:f9:6c:8b:a4:7a:8e:c1:
         74:62:7b:ca:07:9e:f5:87:64:37:7c:0a:83:d6:e3:29:0c:e3:
         6e:13:f0:15:af:e6:72:33:01:8c:c8:1a:df:54:c0:f2:e0:03:
         7d:50:9d:97:e5:6a:6f:6b:37:2e:56:0d:39:1f:10:23:33:1d:
         8e:f9:3e:8b:be:a8:6b:1c:6c:a9:ce:38:11:51:28:c8:26:7d:
         b7:ee:18:a6:4a:a7:0c:e0:0c:4d:15:13:c2:78:5b:54:6d:5d:
         88:c3:a5:52:ae:62:a3:e0:e4:9f:19:e3:20:89:1e:f1:01:24:
         a4:c1:2b:d4:1c:81:9d:dc:e1:40:65:ff:f7:dd:de:a8:58:ee:
         78:46:87:70:3b:f5:64:43:82:27:a0:16:0c:64:da:c0:5c:09:
         7d:f9:b9:86:ef:85:57:c5:60:56:d5:5e:c3:6c:61:59:17:62:
         81:ac:06:02:cd:ae:2a:82:19:16:5d:db:78:1f:5f:5c:6a:ab:
         cc:fe:0c:8f:53:23:e7:b5:8f:0b:9a:30:5b:61:2d:77:fa:69:
         6b:a9:7d:f0:48:5a:ca:7d:3f:ac:69:7b:2d:f2:4c:db:3e:3b:
         ae:b0:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:42 2025 by rpki-client