Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File:                     _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier:          tdEsPK0xe1P++05R+L5K0X0RfIKFBuAvymgBilcLc2k=
Subject key identifier:   30:F8:B7:7B:5E:F4:66:F8:12:C7:19:63:BB:57:96:EB:44:A7:29:B6
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer:       /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial:       0199FBEAC1767E684F3AE903B8227F9A93EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number:          1103
Signing time:             Sun 19 Oct 2025 10:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:30 +0000
Files and hashes:         1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
                          2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: QJcL0HBVq5nhP6WS38HD5wQAyPVIPwTcxbGQhcNjdkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c1:76:7e:68:4f:3a:e9:03:b8:22:7f:9a:93:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Validity
            Not Before: Oct 19 10:01:30 2025 GMT
            Not After : Oct 20 10:01:30 2025 GMT
        Subject: CN=30f8b77b5ef466f812c71963bb5796eb44a729b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:69:b7:a0:ad:9b:bd:27:e1:35:22:16:cc:
                    f0:55:bc:43:54:7c:cc:03:b8:b7:ed:d2:3c:93:11:
                    f3:46:fb:7a:fb:9d:f9:04:58:9a:1b:6c:71:a4:57:
                    24:c6:9f:3d:f8:89:f8:77:c0:39:af:13:ac:5b:c9:
                    5b:67:31:bf:41:33:14:a2:78:7d:5c:5c:5f:ef:40:
                    6b:a1:86:ff:29:8d:da:24:81:e6:bd:ab:45:cd:4f:
                    ae:39:01:46:03:16:24:c0:64:3d:5e:5e:7b:70:52:
                    04:d4:5f:f8:ca:78:b5:75:8c:70:9e:d8:89:f6:21:
                    bf:c8:7b:2c:bc:21:ba:e4:a3:5e:73:00:2e:58:82:
                    3e:99:98:ef:69:0a:ac:58:d7:dd:44:7f:02:0b:c4:
                    cc:dc:bd:88:61:1e:b5:24:8e:5a:f6:4c:0c:53:cb:
                    ef:e5:e8:a6:bd:f7:7c:3b:60:9d:b8:75:84:72:c0:
                    49:64:1d:a6:54:03:e9:7b:8e:cc:de:2a:20:90:ec:
                    e4:8c:85:a1:2e:63:9e:b2:0d:7d:c9:cf:ae:45:ec:
                    67:87:ed:63:63:38:2e:e7:8e:cf:8a:d9:39:00:f5:
                    bd:80:52:7c:6f:75:6d:4c:74:d4:ec:a3:c3:df:bc:
                    f5:e4:69:ee:5b:7f:fe:22:b5:b3:b9:8d:5e:33:d0:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F8:B7:7B:5E:F4:66:F8:12:C7:19:63:BB:57:96:EB:44:A7:29:B6
            X509v3 Authority Key Identifier:
                keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:34:07:6b:41:8f:f2:0a:d6:5b:2c:ef:c7:72:17:a1:16:
         30:bb:c0:9d:7b:d0:22:77:62:e0:19:03:4a:e2:f7:18:e6:fb:
         ae:fa:1c:05:0e:90:91:2f:0a:ad:e5:65:a9:5a:39:a5:67:6a:
         2e:c7:99:54:87:78:b3:1f:67:80:a4:91:37:d5:55:3a:46:6a:
         79:ac:93:ad:d7:c7:e5:c9:16:3e:9e:42:6f:ff:df:c3:2e:36:
         f8:b4:be:60:d8:68:79:85:3f:ed:00:73:19:12:23:19:19:e3:
         8f:1c:8c:5e:4e:ac:ec:a8:72:36:16:9d:27:81:dc:65:8f:e3:
         cb:57:32:19:fb:52:51:6f:a0:ea:d2:45:77:1d:fd:a9:ab:1a:
         2d:66:e9:1f:07:dd:cf:18:de:a9:19:86:5f:81:d0:1d:4b:f4:
         72:69:03:51:de:fa:3d:f7:f5:6b:69:34:f4:81:ad:1a:f6:ae:
         dc:ad:50:f2:c8:4c:fe:32:b7:60:19:e4:96:c3:c0:f8:86:3e:
         32:24:52:13:20:a5:69:0f:ba:ba:29:f7:3a:43:4e:1a:89:a1:
         68:3c:bc:58:fd:9e:5a:da:ac:ff:21:8f:7c:c5:43:cc:13:7f:
         0d:eb:55:19:46:f8:f3:df:53:6c:1f:a1:df:ff:d4:23:bf:6d:
         ce:e7:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:04 2025 by rpki-client