Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File:                     1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier:          Yl9icfX3UYFtUJ/VGi7LpIy9bJ4CpljhNLq2PZkXCmU=
Subject key identifier:   56:7F:47:FE:06:0C:79:33:47:53:8E:01:EA:7B:63:00:31:C8:EE:56
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       0199FAA0D3227553CDF98EF3507FA29A6421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number:          170D
Signing time:             Sun 19 Oct 2025 04:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:07 +0000
Files and hashes:         1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: X7iRX8m/gQ2fz8c8WKPzV3wOA351Pcb7MQ83a6eJ3ng=)
                          2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=)
                          3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=)
                          4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=)
                          5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=)
                          6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:d3:22:75:53:cd:f9:8e:f3:50:7f:a2:9a:64:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Oct 19 04:01:07 2025 GMT
            Not After : Oct 20 04:01:07 2025 GMT
        Subject: CN=567f47fe060c793347538e01ea7b630031c8ee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:75:58:a6:7a:ab:ea:6d:44:77:58:f4:e8:
                    d4:14:fd:96:d4:91:af:cc:0e:49:f5:21:bc:79:f8:
                    2d:a6:c2:63:c6:db:4b:1f:f6:c0:5e:81:36:95:75:
                    cf:a5:82:0e:22:59:f0:b5:a0:a9:08:b3:80:2f:e5:
                    f5:1e:f7:98:80:e1:fc:39:4b:0b:55:4d:46:7e:3f:
                    a0:b7:db:f0:0c:d7:c6:95:8c:c0:2a:7a:6e:2e:ba:
                    85:be:c3:76:c6:cd:5a:94:5b:5d:69:1b:61:97:ab:
                    2d:53:cf:20:9d:f0:d9:b2:ef:85:62:d7:b6:88:fc:
                    5f:25:dd:2e:df:93:67:5b:b2:cf:c3:aa:8e:f5:de:
                    d2:68:7e:29:74:1d:80:ea:a7:7c:d8:c6:83:56:76:
                    1b:07:6c:08:9a:ad:87:cc:c1:f9:2b:80:fc:6a:d0:
                    da:20:f8:07:6a:a9:98:dc:40:ef:d9:99:39:ab:8e:
                    d4:df:3a:c9:ca:12:7f:c6:bb:e0:c8:62:2c:85:88:
                    66:15:47:b2:c9:01:ec:32:93:0d:5c:5b:f4:d8:db:
                    4f:68:30:76:29:1a:83:00:d3:31:7f:33:7a:08:ac:
                    d0:ba:55:19:86:2b:31:4e:5e:7f:50:d3:8b:c9:f6:
                    82:fa:6a:54:e2:df:db:0f:eb:fe:2e:05:c4:f8:08:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7F:47:FE:06:0C:79:33:47:53:8E:01:EA:7B:63:00:31:C8:EE:56
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:7a:97:06:36:e3:ba:3a:ac:74:e0:f3:1b:9e:95:79:00:
         3c:ff:95:71:aa:dc:41:ef:6f:8d:eb:8d:54:49:54:c6:8c:d0:
         cd:0a:c0:61:2e:d1:08:f9:7b:bc:b8:71:b8:9b:33:52:24:08:
         58:5b:bc:ce:3d:c2:9d:f7:90:e3:07:15:78:c2:f1:4d:74:27:
         02:f5:ee:6d:32:e2:48:cd:33:7e:75:4d:0b:9a:ca:56:38:06:
         02:45:19:0a:30:9a:29:e7:1d:b7:37:ca:87:47:bb:a1:6d:24:
         41:77:6d:67:fb:bc:bb:00:de:2a:97:88:b3:7b:5f:63:7b:3b:
         56:4b:1b:f4:e3:cc:8b:61:0c:b9:53:05:7f:c1:ef:16:77:ac:
         ac:c4:93:69:bf:e6:0c:50:40:1b:47:03:a1:7b:be:89:f3:ae:
         55:af:8c:86:7a:39:c5:ca:93:36:93:91:8d:2f:7d:b7:bf:a1:
         bc:9a:dd:1c:02:b6:d6:41:3d:19:d4:19:33:bc:96:be:2d:98:
         77:31:c8:57:10:a6:af:dd:bc:c3:4a:5a:89:1c:0a:f0:23:d6:
         15:b6:32:6a:0e:b7:16:09:9f:ec:97:01:8c:f0:d2:27:8e:fb:
         48:4a:db:c6:47:cc:59:66:82:e0:a8:ee:8c:b2:30:f3:2e:45:
         73:bf:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:56 2025 by rpki-client