Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          LkOi2c5v8stLOOVwhU13otpYVlmFA4dORPAwmYK2xfU=
Subject key identifier:   DA:26:0E:04:9B:C5:8D:62:15:7E:1E:0A:82:C2:38:42:3B:0E:56:2B
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       0199FA6ABA785834B9021C83EF589CC003C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          068E
Signing time:             Sun 19 Oct 2025 03:02:02 +0000
Manifest this update:     Sun 19 Oct 2025 03:02:02 +0000
Manifest next update:     Mon 20 Oct 2025 03:02:02 +0000
Files and hashes:         1: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (hash: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=)
                          2: P1bLQZtUuJyCpYxMgBMGx1ZJUng.roa (hash: m9T9zLQ/HMGQbc2J9yvmErwcUnY6b6rs3FjEYV4pKxg=)
                          3: t5moBycZzdoljDyxSfMleeT1QmQ.roa (hash: OjS5x25lUmVQxo2WB7ZV1aQad26d91TsKsihXCHFfH4=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: /ziKarJa1LZxomClHqKQVyF3MLXGuyMKZKqr5Y5aFWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:ba:78:58:34:b9:02:1c:83:ef:58:9c:c0:03:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Oct 19 03:02:02 2025 GMT
            Not After : Oct 20 03:02:02 2025 GMT
        Subject: CN=da260e049bc58d62157e1e0a82c238423b0e562b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:4d:a2:f9:c1:a0:f1:10:74:ae:9b:99:21:
                    7f:0f:54:eb:83:e6:4b:42:fe:17:16:52:70:45:09:
                    76:b5:84:a1:ec:01:f0:94:3d:1a:1e:bf:51:07:61:
                    81:bc:27:72:87:ca:2d:f1:1a:be:54:1d:e1:cd:84:
                    9d:44:fa:6e:cf:4e:53:3c:2c:44:9a:83:11:a1:59:
                    88:04:30:ea:f7:c6:cf:69:2e:53:9e:64:00:cb:82:
                    bf:9e:84:49:33:05:57:6b:19:b8:0f:9c:c9:da:a6:
                    f5:20:39:7a:c1:2c:99:de:4f:03:ab:68:ed:e1:d2:
                    2b:8d:87:2f:b6:1c:29:cb:c1:25:3e:cf:80:9f:d9:
                    d9:ea:68:03:0b:73:fd:52:ae:4f:9a:fb:5e:5f:fb:
                    88:e0:30:5b:42:05:b2:70:f9:17:fa:59:fb:48:2a:
                    25:fb:5a:87:45:5a:57:03:0b:dd:37:ab:80:8f:f7:
                    f1:75:d2:b1:15:d2:c8:c1:8b:22:40:11:0e:26:e4:
                    37:c2:de:cf:4a:aa:f6:9a:7e:48:4f:51:17:04:06:
                    4f:4a:32:10:5a:7f:08:6c:60:b2:f7:6f:5e:e5:a4:
                    94:14:fe:06:d1:97:fe:5e:2b:0b:ae:2e:21:a5:8b:
                    47:74:7c:c9:54:ec:43:b1:56:11:d6:32:b8:2f:15:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:0E:04:9B:C5:8D:62:15:7E:1E:0A:82:C2:38:42:3B:0E:56:2B
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:94:56:10:95:7a:c0:ba:59:ab:4f:04:c0:4a:d4:b9:ed:
         a1:da:b0:ef:d7:89:6c:bd:5e:55:e4:80:c5:b1:1e:6f:c2:98:
         3d:bb:80:3f:e8:5a:fa:7a:26:ec:b5:2b:01:ed:f6:55:a5:6b:
         cf:81:0a:15:e2:01:96:7e:cf:3b:c5:b3:ff:d1:c4:0c:ab:33:
         67:1d:74:27:86:58:65:91:b0:df:e9:f7:2a:b6:71:d8:64:59:
         7a:b6:6e:55:a2:b9:60:21:fb:96:f7:91:92:11:c4:80:16:ae:
         b9:e7:c6:e6:bf:c0:36:92:8c:7e:15:e4:ed:34:c6:51:7b:63:
         d3:90:9e:50:8b:d0:b8:51:dd:a3:b2:d4:69:4e:30:fd:1a:12:
         3b:33:38:97:b8:e8:63:6a:23:d9:35:bc:cb:e6:42:a7:c3:d8:
         5a:6e:5f:61:c6:ba:bb:ad:88:dc:ac:32:b3:cb:bf:b5:1d:36:
         66:a0:57:f3:11:bd:af:15:84:02:9e:51:f5:d8:d6:be:e9:ef:
         34:98:15:b1:95:12:53:6c:e6:db:a4:92:fc:ae:dc:fc:f7:74:
         7d:56:a6:94:ae:b3:1b:b0:a5:55:c9:df:a1:ce:d4:01:59:d6:
         ce:e6:f4:c8:81:da:7e:56:df:39:3e:19:da:21:ce:fd:c5:6b:
         58:ce:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:52 2025 by rpki-client