Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File:                     rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier:          hPePQYgxG5uwNUWj6WH7eyYRNOQijS/hl+oxYSt61Js=
Subject key identifier:   75:24:83:ED:35:2C:8F:F2:EF:CD:66:A5:9B:BE:83:6C:62:BD:E7:71
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer:       /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial:       0199FB0EC9DAE65308253B5F2F32D24B14EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number:          0CEA
Signing time:             Sun 19 Oct 2025 06:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:14 +0000
Files and hashes:         1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
                          2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 4FsVJCyExbczu8XwIe5ReSkJijOYA1sxmLFXuRPKRI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:c9:da:e6:53:08:25:3b:5f:2f:32:d2:4b:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
        Validity
            Not Before: Oct 19 06:01:14 2025 GMT
            Not After : Oct 20 06:01:14 2025 GMT
        Subject: CN=752483ed352c8ff2efcd66a59bbe836c62bde771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:ee:0f:e0:08:bc:79:13:03:59:86:a9:cc:
                    53:26:35:64:10:23:4e:c4:38:25:0c:c0:ab:14:c0:
                    ea:e2:cc:ed:71:11:92:18:db:80:f1:4c:0b:4b:54:
                    4b:a3:5a:b5:d0:3d:d9:28:94:9e:11:fe:b3:38:88:
                    e8:ca:8e:5f:6d:4f:9c:80:38:69:04:1c:16:ec:43:
                    b2:ca:01:14:ab:b1:e9:c4:57:b1:da:7a:0c:cb:72:
                    b8:ba:89:ea:08:35:fd:57:d9:bb:45:92:44:3c:1d:
                    63:32:83:ce:85:b1:75:ae:ff:9c:0b:2d:f5:9e:92:
                    98:b0:a3:3b:bb:28:ed:6a:5e:30:f9:29:42:7e:6c:
                    21:64:3a:31:5c:9f:98:ab:51:2f:22:6b:da:69:64:
                    24:8d:e3:47:19:31:f0:14:4e:4f:32:76:3b:d5:30:
                    28:d7:ba:4f:92:66:88:56:37:1b:fe:92:be:0a:de:
                    e4:12:5f:f1:be:04:cc:a9:9f:11:b5:30:f7:7b:1b:
                    59:bf:82:1f:36:89:57:04:56:a0:a2:6e:8f:08:e6:
                    f7:ba:7a:4a:4d:0b:b3:51:7e:b1:25:a3:7f:98:2a:
                    e8:eb:82:ee:0d:6b:a2:0b:8b:c8:fa:a6:de:8a:57:
                    08:b1:35:3e:4e:fa:b4:a0:72:cf:f4:e9:27:70:fe:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:83:ED:35:2C:8F:F2:EF:CD:66:A5:9B:BE:83:6C:62:BD:E7:71
            X509v3 Authority Key Identifier:
                keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:33:14:6c:23:c9:ff:48:0e:32:a2:3c:f5:3a:14:fb:0b:
         6d:80:55:92:99:21:80:2d:08:0f:d2:47:7a:5f:b3:6b:0c:9d:
         27:91:dd:fc:b8:0f:13:a6:41:bc:01:cf:b9:c6:36:42:5f:b9:
         76:bf:7c:f4:c1:ac:55:65:89:c9:7d:eb:cc:4b:d5:02:0e:42:
         7b:46:23:53:d8:80:6f:a8:f3:fa:5b:63:d8:21:f5:76:16:40:
         e1:25:7e:44:d2:19:1d:c5:85:a1:36:47:fd:c5:6c:10:29:b9:
         5f:ce:aa:1b:9c:4c:f9:57:4b:c4:30:42:21:d7:75:d5:b1:2a:
         1b:51:c2:d5:57:15:39:ce:c9:b9:2c:66:34:5f:47:cb:47:23:
         e4:df:2b:b4:12:01:29:5a:a3:ab:5d:dd:1c:79:e4:5d:da:9e:
         30:df:4d:b2:d4:46:5b:06:89:29:1c:5c:2c:95:ab:f0:1c:f3:
         ff:af:15:c8:b6:2c:ba:63:25:52:66:8e:99:e1:39:78:cc:1a:
         44:cf:97:93:23:a1:b5:76:c5:64:24:36:47:e3:50:12:98:ff:
         2f:3a:09:e2:ae:0d:9d:37:b2:5d:21:99:79:30:30:25:a8:79:
         aa:cf:0a:77:cc:79:a0:10:c1:66:93:65:ed:0d:d2:af:65:ce:
         06:5f:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:36 2025 by rpki-client