Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          k9bbjlIJ7Jn0Po+e8iJb9b2V7A+4i3qgeuuxrEji6w8=
Subject key identifier:   5B:0C:21:F4:14:FA:AF:66:88:17:29:C1:79:57:90:75:B9:47:6B:81
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       0199FEB53B65AAEFA151ECD3159E82CCEDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0D64
Signing time:             Sun 19 Oct 2025 23:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:53 +0000
Files and hashes:         1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: 1AS27MmgWcrm2rXwoRi6g8qYlqYOqSio8szGhf56iYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:3b:65:aa:ef:a1:51:ec:d3:15:9e:82:cc:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Oct 19 23:01:53 2025 GMT
            Not After : Oct 20 23:01:53 2025 GMT
        Subject: CN=5b0c21f414faaf66881729c179579075b9476b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:d4:7f:ae:72:28:79:5b:4d:7b:53:c4:bc:
                    7f:f9:72:7e:b9:fd:fd:1a:c2:d2:29:d6:ea:80:b3:
                    be:00:ea:a4:21:a2:58:1c:10:2c:dc:49:09:38:92:
                    49:6c:fc:c9:e0:79:9c:78:6e:3c:ee:30:d1:31:d7:
                    9b:09:ab:d6:a0:8f:cb:99:f3:cf:26:92:91:52:cf:
                    f4:6c:ed:53:40:e9:2a:e0:d0:c2:5f:46:51:81:21:
                    fe:4e:eb:ac:3c:db:78:46:30:63:9f:df:34:8a:91:
                    c5:30:32:db:f2:5a:2f:02:df:3a:e3:3f:7e:54:0d:
                    03:de:7c:b7:fd:25:cb:c2:49:f9:df:3b:62:39:08:
                    33:0c:a4:64:b0:6b:f4:f8:08:c7:2c:05:3f:99:db:
                    6a:08:30:88:06:4b:fe:32:35:0b:e1:79:12:a2:e8:
                    e0:5d:da:5d:2f:c7:ad:11:0a:e0:91:63:cb:41:e4:
                    46:14:23:6d:22:91:60:e2:95:6c:d9:ce:01:0c:f5:
                    a5:be:f3:38:88:66:4d:a6:b7:a0:28:fe:31:20:23:
                    ee:0b:e9:a5:87:2f:a5:40:ce:84:7a:9b:23:94:1f:
                    46:bd:4c:a7:09:40:1b:8c:09:ee:4f:18:84:fe:02:
                    a5:00:cd:70:b3:14:45:d9:39:76:a5:6f:02:45:bd:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:21:F4:14:FA:AF:66:88:17:29:C1:79:57:90:75:B9:47:6B:81
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:b6:32:36:15:00:b7:4b:5b:a0:f7:6e:c8:55:8b:6d:0e:
         6f:0e:c7:12:19:b4:d7:30:c0:0c:15:25:ee:ba:ac:d5:01:59:
         9f:7c:2e:7b:a9:16:86:b9:6a:bb:07:1d:74:9f:f6:4a:37:2c:
         c3:fe:db:38:00:7f:ca:bb:09:22:d9:1b:17:0b:d8:0e:2c:0e:
         13:dd:21:4b:2a:b3:cd:95:b7:48:ff:a5:7a:c4:95:4b:6e:16:
         5b:bb:d1:c9:01:af:62:c3:1c:cb:dc:c2:39:c9:2f:74:e2:90:
         54:3f:ce:6d:ef:4a:5b:20:78:96:b0:dc:0f:06:a0:1c:db:8b:
         2c:7d:dd:10:26:a7:da:01:6d:f0:b2:3f:ee:14:05:56:24:4d:
         c3:4a:0c:46:c4:4e:89:1e:74:77:a7:50:de:8d:79:0c:19:08:
         ee:e8:ec:7a:67:45:00:55:91:2e:a4:a7:cc:9e:16:eb:40:a5:
         1c:4f:7a:79:1a:7b:b3:a0:b4:df:46:ff:08:14:4c:73:82:04:
         17:d9:f1:9b:a3:39:67:7f:41:ac:02:05:30:34:c2:e0:bd:fe:
         51:99:f6:e1:13:a0:cb:78:e9:2a:73:f6:ba:e2:7b:83:8f:37:
         3d:fb:ed:d3:c3:d0:5f:bc:d9:27:c1:b2:24:20:d6:e1:56:02:
         9a:b9:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:36 2025 by rpki-client