Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          7JkEji56J2E8skfIr1CbZTAWjvRqyvp9IGL+j/cxF0I=
Subject key identifier:   20:5D:57:A5:5D:0B:C7:17:A7:83:8D:5B:B8:6C:46:43:C4:9F:56:89
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       0199FDD91B3514BE195722CC9A70953116D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          048C
Signing time:             Sun 19 Oct 2025 19:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:27 +0000
Files and hashes:         1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
                          2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: bWMAKlvs15J11bnsxcN20N83aMa+EpeGJImP1z/wtTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:1b:35:14:be:19:57:22:cc:9a:70:95:31:16:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Oct 19 19:01:27 2025 GMT
            Not After : Oct 20 19:01:27 2025 GMT
        Subject: CN=205d57a55d0bc717a7838d5bb86c4643c49f5689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:de:2c:e3:36:95:a6:e9:fe:4f:fe:98:ae:
                    e6:69:3e:09:9f:18:c8:7a:be:b6:6d:59:a5:25:cd:
                    94:6d:e6:2e:b7:e3:08:a1:4e:fd:2d:78:dc:ed:0b:
                    b5:f9:a1:82:74:f3:72:82:9a:5a:d4:51:a3:e9:39:
                    d5:21:e1:e2:1d:a8:c3:0f:46:c9:62:4a:b4:82:f2:
                    d8:05:5e:09:b2:16:52:4f:17:ea:1b:ab:8b:d5:03:
                    8f:18:1c:c2:8e:d6:d5:cf:21:b1:89:aa:00:d9:cc:
                    ac:df:7a:72:96:7b:5a:87:c2:05:e2:78:f6:b7:81:
                    90:76:29:84:18:b7:30:75:2e:89:38:1f:4c:ad:5c:
                    df:22:b9:a8:30:17:42:6e:25:65:14:67:15:17:a7:
                    b4:96:e3:36:8d:09:ea:ac:f7:97:86:b3:31:9e:e7:
                    d7:ec:a1:c4:fd:bb:ff:ab:90:fa:11:fe:5a:ab:17:
                    e6:3c:77:4a:01:72:99:c6:9b:ff:15:48:5a:3d:83:
                    74:87:d6:fd:5a:83:f2:27:dc:83:ee:a0:af:8c:40:
                    a0:4c:a1:5c:b1:c2:a4:da:36:0d:4c:bb:22:7b:c1:
                    ee:ff:cc:c8:79:de:24:97:e4:40:78:07:a6:f0:53:
                    41:53:a8:d9:fc:e8:a0:8e:99:fa:ce:e4:d6:b8:9e:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5D:57:A5:5D:0B:C7:17:A7:83:8D:5B:B8:6C:46:43:C4:9F:56:89
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:03:08:2a:40:46:33:4b:21:34:b2:7b:0c:e5:df:bd:3f:
         6d:2e:cc:34:0a:d2:6c:22:3c:50:6e:36:35:69:b5:f4:4a:12:
         a2:ad:06:8a:8b:3f:8b:fe:90:25:e1:47:c0:1c:3d:01:e6:5f:
         80:06:36:6f:da:80:29:8b:86:21:96:26:e1:c7:47:ab:e8:ac:
         20:4a:9c:8a:03:50:61:2c:43:65:dc:35:c1:f3:ab:f5:8a:95:
         7b:8f:53:0b:87:e0:4d:1a:e1:4b:c5:ad:a7:8d:00:a7:fa:0c:
         4e:ab:89:9c:91:6e:a3:a6:90:c7:c8:79:31:e5:ed:3e:90:b3:
         9d:61:18:d7:78:71:1f:f3:27:2b:68:ad:d8:1d:43:fe:99:b6:
         30:b3:20:22:24:c6:29:d3:5a:e8:3b:5f:e2:cf:14:79:2d:33:
         d2:04:fa:cc:c7:dd:87:29:10:c0:1a:0d:24:1d:3b:1c:4a:9e:
         36:6e:f9:f5:82:32:ef:36:98:9d:b8:e6:b9:da:bd:40:67:0f:
         86:39:7a:34:8b:7d:b0:cf:00:71:45:e5:3f:ab:a6:09:99:5b:
         51:7a:bd:ba:89:d4:08:75:57:31:00:df:b1:d3:84:5b:a0:f2:
         b1:72:96:ca:ab:0c:07:9f:7d:9e:9e:cf:ee:6a:37:0b:18:e1:
         64:e0:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:53 2025 by rpki-client