Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
File:                     txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json)
Hash identifier:          ddYfcybHQ03lXYbxNspJj1U3BvoAlx8kBiwmg8xGYVU=
Subject key identifier:   8D:7E:EE:85:B1:25:B6:BA:4F:85:27:1A:C4:2F:27:F6:0A:F4:27:C8
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Certificate issuer:       /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial:       0199FBEB6BE483676B46790717E0CFCF4AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
Manifest number:          13AC
Signing time:             Sun 19 Oct 2025 10:02:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:13 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:13 +0000
Files and hashes:         1: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: J1sTDz5ma94QArOAHac0K0ag2wNK5oYU8dyMq3P9qA0=)
                          2: y7dJRRp79aTyhXJq7SLE893fmyk.roa (hash: QjKSW2+AFDFFoGHFdC8m0Zba5598T5O0nbfB4lqoZ3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:6b:e4:83:67:6b:46:79:07:17:e0:cf:cf:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
        Validity
            Not Before: Oct 19 10:02:13 2025 GMT
            Not After : Oct 20 10:02:13 2025 GMT
        Subject: CN=8d7eee85b125b6ba4f85271ac42f27f60af427c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:4b:9e:60:e6:f8:18:2e:70:b3:0d:b3:d6:
                    94:ab:91:05:ab:91:39:45:67:99:71:9b:6a:a4:5b:
                    13:8c:0f:47:2f:09:46:06:9e:62:d8:69:47:19:73:
                    1c:b8:70:4d:62:b3:42:46:68:9a:41:d8:ac:04:2c:
                    ab:38:5a:db:f6:0d:55:84:d6:fd:e2:07:85:54:c0:
                    91:4a:46:b6:43:32:cb:ee:99:77:31:ef:40:a1:a5:
                    5e:c1:4b:a1:7a:55:84:3f:10:34:1a:09:a8:bb:10:
                    59:92:ef:79:38:8b:d5:62:36:3d:7c:a3:16:a2:37:
                    6e:34:db:2b:af:e4:a0:53:a8:d8:5e:f4:80:a0:0a:
                    16:08:7e:f7:79:9d:62:01:a0:22:09:92:bf:49:b9:
                    48:27:a1:3b:87:fd:d8:fa:b2:9f:5e:69:d9:15:23:
                    1c:a9:7e:bf:3d:f1:bc:3d:bc:db:33:53:09:53:96:
                    79:70:d5:e7:e6:a8:d3:1c:f0:1a:83:ca:7e:c8:f3:
                    3c:f8:9f:db:1e:8b:6e:79:10:77:20:56:96:1b:42:
                    b6:7f:b0:40:15:d3:b4:a9:41:33:d2:8d:dd:19:79:
                    0c:23:bc:93:49:05:72:f3:38:03:a7:89:b1:0a:90:
                    10:9d:9d:8f:e5:b3:7c:3b:42:e8:4d:14:28:4f:2e:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:EE:85:B1:25:B6:BA:4F:85:27:1A:C4:2F:27:F6:0A:F4:27:C8
            X509v3 Authority Key Identifier:
                keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:53:5a:9e:34:68:f2:67:d4:09:57:6f:7e:af:97:92:3f:73:
         ff:44:ec:5e:6e:3b:ff:6d:e7:28:92:d1:97:4a:1d:de:dd:2a:
         e4:61:97:b2:20:fa:af:d4:4c:60:c5:57:1d:c6:d0:97:e5:b4:
         fe:de:f6:5d:f4:b4:c4:49:97:c2:9f:83:bb:22:08:62:97:c5:
         34:7b:4b:b2:94:e0:c0:82:db:63:cd:e9:67:c2:cd:80:6c:10:
         b5:ef:6f:2b:1e:22:1e:b3:f6:28:6e:24:04:1e:0f:82:52:e0:
         8e:05:ad:54:ad:0b:99:ba:9f:66:01:8a:ed:fd:b0:87:fc:5f:
         49:eb:2f:b3:7a:63:2d:80:ea:da:9f:ae:e6:bc:c1:f7:69:4e:
         62:0a:12:a9:61:27:56:12:dd:c2:8a:8f:56:0c:31:c5:39:18:
         e4:73:81:75:01:5a:95:d9:3e:62:3f:78:66:50:56:94:30:35:
         a6:5d:22:35:25:6d:45:4c:76:4d:c4:10:2c:de:55:6f:8a:53:
         69:73:b4:ed:45:0b:c6:cf:d6:d4:20:49:7d:28:97:22:26:0d:
         9c:da:4f:07:eb:52:53:92:cb:07:43:fc:03:cb:6f:46:b7:91:
         2d:c4:92:72:ca:4f:9a:c6:96:1a:cf:1d:8a:eb:59:15:02:87:
         43:74:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:40 2025 by rpki-client