Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          alIROEmxqlMIXXBjxungANp8cSR378xzjW2mRiJ1eJQ=
Subject key identifier:   E4:1E:97:D9:F3:DA:DB:8B:52:E9:90:48:57:CB:29:24:53:65:37:E3
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       0199FF22734A5CB2090F6C3BF2907A55BF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          05BD
Signing time:             Mon 20 Oct 2025 01:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:11 +0000
Files and hashes:         1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
                          2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
                          3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: AXCQsaNOgjhLVlCvqYNDBkFE0DQ92HCWIUGYyI6/J4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:73:4a:5c:b2:09:0f:6c:3b:f2:90:7a:55:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Oct 20 01:01:11 2025 GMT
            Not After : Oct 21 01:01:11 2025 GMT
        Subject: CN=e41e97d9f3dadb8b52e9904857cb2924536537e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:b7:6a:d8:5f:af:4a:e5:d7:ba:9e:5a:a4:
                    6d:5e:6a:06:89:71:14:c5:f4:e2:78:cc:b6:a9:d1:
                    93:42:16:88:20:eb:e3:9c:8d:9e:3d:00:f9:94:b7:
                    66:38:49:b8:ce:5c:8a:97:6b:12:3e:bf:59:b2:fe:
                    48:09:a0:04:0d:e0:5c:f3:02:dc:c7:24:ec:14:e0:
                    ba:c4:c6:ed:5d:26:a0:4d:9f:b5:07:ed:60:3c:5f:
                    8a:6e:78:33:b6:c4:ae:60:8d:b2:73:e6:bf:07:e0:
                    ba:04:29:8b:52:bf:0e:12:1f:5d:be:ec:ef:8d:08:
                    bb:00:84:b4:57:e6:c3:3e:cf:53:59:ff:83:c8:86:
                    15:b3:eb:94:1b:18:2c:0d:fd:66:13:39:77:8b:32:
                    76:2d:d7:3a:d8:66:aa:12:60:a6:24:4d:09:2f:61:
                    fa:3e:02:ef:93:e2:59:5b:36:6b:83:95:28:80:8c:
                    48:f4:70:fd:92:56:d4:3d:bc:32:be:d9:d2:3f:6a:
                    aa:b1:7f:e6:9a:7c:90:90:75:ce:bd:7b:83:63:92:
                    89:92:f4:9f:08:09:78:10:2e:3d:a5:cb:b9:fd:cf:
                    3a:44:27:f4:6e:c0:80:db:7a:5f:b1:bf:42:2a:01:
                    1a:8f:26:d5:de:67:24:59:0e:8a:52:05:c8:82:a9:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1E:97:D9:F3:DA:DB:8B:52:E9:90:48:57:CB:29:24:53:65:37:E3
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1a:f0:3c:26:ac:58:6f:d9:c2:aa:c8:c9:5c:d3:c9:7d:ce:
         2a:e5:1a:66:15:19:9e:22:80:10:2d:59:ca:2e:03:0d:6d:eb:
         84:94:5d:57:81:fc:2f:d1:15:68:8b:84:66:bd:a5:95:b1:e3:
         4b:cd:5e:38:cb:af:26:59:b1:c9:f9:71:98:7d:67:84:bd:fe:
         33:d9:ff:44:7a:f1:5b:0d:ba:28:04:9a:6a:86:cb:3f:1e:58:
         33:41:f3:ef:8d:a8:c5:5c:35:78:de:93:5f:59:3a:97:87:11:
         3e:42:ae:b0:c4:4d:2e:70:0c:e1:38:4e:e5:ea:75:39:79:d2:
         58:66:7d:5b:a4:06:e6:6c:2d:af:eb:d0:14:25:8d:e1:0b:97:
         3a:d2:df:a6:dc:d4:e9:15:63:82:fe:a6:64:23:f5:9e:fa:b2:
         8e:88:43:52:26:de:59:27:dd:9a:20:56:96:d4:a8:62:8f:1a:
         d0:37:f6:87:59:0c:50:15:df:71:31:7b:e8:60:d5:4b:5c:b1:
         73:cb:fc:04:46:c7:88:73:22:77:af:f1:f7:5a:d3:d1:a5:35:
         a4:4c:01:16:43:64:42:da:21:ec:83:59:7d:5a:3c:69:cb:7a:
         9c:e1:a3:b1:9e:9c:c8:f5:22:92:37:b6:fb:bc:6b:9c:4a:74:
         f4:4e:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:56 2025 by rpki-client