Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          h+fnYpLNcVsXADXCXLvbQXIsCxSKoEloumIY4TD0a/c=
Subject key identifier:   62:17:B2:A3:1B:37:0E:AB:83:98:3A:DC:6D:F3:00:E6:18:70:CA:AE
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       0199FE0FC452BB89080A773C4FE8F110B9EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          141A
Signing time:             Sun 19 Oct 2025 20:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:10 +0000
Files and hashes:         1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: S8N4187SLA/5EClVqPZn8mq7hpK49IdhyYGG8HWu/LQ=)
                          2: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (hash: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=)
                          3: dkb5gZIob1tpW-aZ36OG6g6eqVg.roa (hash: 6qmzftK2St+wbMPcDJN5VBpBK/rYP12e7Qen5uHlL/g=)
                          4: mgi-sHB9BvG_JhGVaolwV53PdcI.roa (hash: Mp5ienel094fK7II/BeJb819aKnF3b9Sr1dy+H9Nl2U=)
                          5: rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (hash: kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=)
                          6: vAX6cMjo8la6961Io6NKSibrpLs.roa (hash: QGc4CY1otQW+SDtxZLvjRsQAMwHLQ4AN0c1HPwQX50Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:c4:52:bb:89:08:0a:77:3c:4f:e8:f1:10:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Oct 19 20:01:10 2025 GMT
            Not After : Oct 20 20:01:10 2025 GMT
        Subject: CN=6217b2a31b370eab83983adc6df300e61870caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:32:75:67:b9:55:90:1c:b4:82:d8:7b:78:
                    2d:72:57:17:12:fc:91:30:a4:57:0a:94:e6:74:d6:
                    4e:d6:aa:c0:c5:3a:3b:51:3e:73:56:b2:65:76:3e:
                    ac:2c:8a:14:c4:6f:d2:cb:af:0b:3c:46:a4:24:c1:
                    60:78:68:f7:c5:08:e9:59:37:c7:bb:42:67:21:8a:
                    74:94:2d:57:4f:7e:d4:ea:69:5e:b1:d4:e7:ca:72:
                    a7:34:3f:42:62:26:de:d0:f2:d5:bf:9c:6d:de:9f:
                    75:4c:dc:2c:4a:c2:27:9e:7c:87:99:86:59:28:83:
                    17:ec:96:d5:f0:28:73:9e:f1:87:23:85:01:c6:d5:
                    96:38:27:23:5c:8d:fe:45:59:45:ee:84:a4:5f:07:
                    8f:3d:a2:d3:40:15:68:14:9e:ca:dd:61:93:79:55:
                    f2:79:fe:8b:53:10:03:b7:b1:67:30:e5:92:83:1c:
                    11:6d:25:5e:20:c2:76:b5:f6:b1:0d:c6:f0:f3:e3:
                    30:72:4f:ac:11:58:33:ef:3e:9d:e8:f0:94:4a:3a:
                    5d:12:af:56:f1:5f:5e:8e:b3:36:93:4e:1c:69:62:
                    ae:99:86:fe:37:bd:ac:d8:21:d5:e7:01:05:0d:01:
                    d3:2d:8e:29:24:b4:f3:9c:13:8f:95:ab:54:9c:b3:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:B2:A3:1B:37:0E:AB:83:98:3A:DC:6D:F3:00:E6:18:70:CA:AE
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f8:88:04:03:b3:02:53:ac:94:af:76:6f:8b:de:ee:d0:45:
         02:16:5b:90:e8:c6:26:50:3f:6e:12:75:03:e9:7f:31:6f:ab:
         25:a5:fa:57:d4:89:38:3b:41:59:ed:78:1a:db:91:66:32:b1:
         50:db:ea:83:92:45:00:6b:34:14:00:8e:0b:0c:ef:07:7e:5b:
         4b:d6:f7:22:b0:f8:89:f1:a5:9c:28:1f:2a:29:bd:29:4d:f9:
         d4:72:56:f4:34:6a:97:1d:b4:49:d3:cb:ea:1f:69:35:fc:2e:
         aa:0c:9d:9a:7d:f5:c5:1c:2a:9e:53:ef:22:a9:a3:1c:78:9b:
         a3:a0:7e:95:16:43:05:30:6e:5f:60:5f:87:6d:6e:1d:42:f0:
         f9:c1:06:ab:c8:ec:73:c6:b2:3b:14:99:10:5c:08:8b:06:e6:
         05:e3:0b:23:f2:3a:33:50:df:2d:8f:56:fe:99:96:b8:a7:83:
         35:c2:fc:66:de:bb:e0:e7:d7:50:b6:2c:4b:6f:2a:de:98:4a:
         b2:a3:6c:20:0e:b6:4f:01:e1:e3:95:60:d9:cc:ac:bc:2e:77:
         09:09:a6:c3:3d:c4:4e:de:ed:b2:0c:24:62:6e:9f:8a:ff:82:
         ee:8e:cb:db:95:a3:14:25:8e:8d:c3:40:d8:11:28:82:48:9f:
         c2:25:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:17 2025 by rpki-client