Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier:          QmRmsIgdVh9UFMFd/FwSf6Z2tmxhk6VFKwo1rTb96yg=
Subject key identifier:   1D:D1:6A:9D:B0:FE:C5:D1:5E:64:32:6A:01:64:EB:4E:FD:AE:C9:57
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       0199FBEB06C90C9734AE7E99C0F737AE39D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number:          0A62
Signing time:             Sun 19 Oct 2025 10:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:47 +0000
Files and hashes:         1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
                          2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: YmFC0ffryb10N+yXKlw6rWLSaWw0aL3w39NvPLTmOJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:06:c9:0c:97:34:ae:7e:99:c0:f7:37:ae:39:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: Oct 19 10:01:47 2025 GMT
            Not After : Oct 20 10:01:47 2025 GMT
        Subject: CN=1dd16a9db0fec5d15e64326a0164eb4efdaec957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:43:0b:b8:1c:1e:cc:e4:61:f3:28:45:29:
                    85:92:85:57:ab:7c:60:af:41:51:c9:57:a9:a7:8d:
                    5a:e0:db:eb:da:62:6e:ab:0d:e5:02:57:7f:b9:80:
                    92:f7:5c:ba:8e:74:87:22:d3:f0:e6:b0:e4:de:68:
                    5e:3e:ee:b3:c8:65:c1:6d:20:96:ea:d3:63:fa:b4:
                    ea:0c:54:2d:4e:be:37:2c:ae:4c:35:c7:a6:88:05:
                    46:f2:ec:20:b7:27:98:7e:e8:d8:54:b4:e0:c4:7f:
                    fa:d1:79:8b:54:2f:fe:31:f1:2e:bf:0a:a1:ab:b1:
                    d9:45:7b:92:12:e0:25:64:70:e4:3d:49:36:6b:26:
                    52:62:2f:18:df:2a:9d:a1:5d:54:f4:1d:41:58:5f:
                    29:44:13:53:dd:58:58:b9:2c:62:94:e2:b9:40:b7:
                    b5:a9:ba:3f:4d:be:e1:c6:0f:7c:ba:58:ed:52:d9:
                    bc:be:da:af:08:ce:ca:ca:79:69:d8:7a:3d:8f:c9:
                    b8:4d:6d:07:3a:c2:f4:72:01:86:1a:36:1a:5f:b3:
                    ca:b7:6f:1a:3a:bc:04:a4:27:b5:1a:c7:b4:c9:d0:
                    9a:4b:41:a1:b2:3f:53:51:d7:65:c1:d3:ee:7d:fd:
                    f2:19:00:df:d3:95:f8:30:4c:40:1c:f7:08:65:ed:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:6A:9D:B0:FE:C5:D1:5E:64:32:6A:01:64:EB:4E:FD:AE:C9:57
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:a9:83:30:5d:20:86:23:68:ab:b3:16:52:25:1f:93:27:
         6d:44:f5:b8:41:c4:ab:5d:fd:96:64:6d:be:10:a6:a4:89:7a:
         75:be:03:38:8c:97:5d:fa:87:d0:13:e9:6e:16:20:bf:39:90:
         12:67:5e:0a:96:7f:79:2b:ed:50:dd:0f:98:46:a2:89:12:08:
         e8:55:b5:fb:48:6a:02:58:21:c9:8c:91:2f:75:06:47:41:aa:
         ea:0a:3a:b2:1b:dc:e7:c4:91:6a:e4:80:e7:6c:a7:5d:8b:d3:
         90:8d:db:96:f5:1e:3f:ce:56:f0:fb:b7:93:c5:86:41:2a:8a:
         09:86:f5:2a:4d:1b:7a:4a:a4:32:57:b0:63:cb:3c:3b:7d:57:
         e4:68:c0:31:00:a6:28:17:ef:2f:c1:44:db:ab:cf:2e:fa:52:
         a9:dd:f6:2f:cc:6b:05:32:2e:26:8c:13:8a:16:ea:d0:56:23:
         11:90:e1:18:a0:94:76:6f:57:3f:71:a2:0b:e0:64:6d:cc:f5:
         2f:da:c6:a9:99:f6:59:d7:0e:73:44:d6:9d:c0:dc:66:03:0a:
         6c:f2:03:3b:f5:d2:fc:31:74:59:c0:f0:c9:bd:4c:65:d0:68:
         bb:cf:85:81:01:ba:1c:9c:12:ad:e5:9b:39:2e:77:a6:68:4a:
         65:a1:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:39 2025 by rpki-client