Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File:                     tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier:          6C+NrYSvhHxW9gJ6fjP79eZTktLd7dgnnN+9IDb5d5M=
Subject key identifier:   D1:B8:63:89:B3:33:F0:2C:CF:63:C2:3B:A1:7A:F9:7D:85:44:99:C6
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer:       /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial:       0199FEEC27733866D3DD024A76636E741424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number:          0976
Signing time:             Mon 20 Oct 2025 00:01:53 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:53 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:53 +0000
Files and hashes:         1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
                          2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: 2cKFMThotE07OQ5ix+t29fc0sfQ0uCjQg3U7KmL38bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:ec:27:73:38:66:d3:dd:02:4a:76:63:6e:74:14:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
        Validity
            Not Before: Oct 20 00:01:53 2025 GMT
            Not After : Oct 21 00:01:53 2025 GMT
        Subject: CN=d1b86389b333f02ccf63c23ba17af97d854499c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:69:01:6f:94:f6:6e:8f:84:af:33:07:00:
                    b2:a0:d6:5c:9c:b0:1a:c4:2e:12:c4:15:92:07:9a:
                    32:43:a9:70:ce:d0:97:5f:a6:47:47:56:cc:5e:52:
                    b5:c4:95:b3:b4:a4:1c:b0:3e:03:5f:3d:0f:ff:67:
                    b4:b9:ee:e7:0b:92:0b:ce:5e:07:a4:f2:13:b4:b2:
                    63:96:df:2c:00:c9:ce:83:cb:45:9b:a4:b6:dd:d9:
                    52:cd:25:27:4d:68:f6:f3:45:7d:ec:83:81:0e:4d:
                    a7:19:80:d7:35:8e:70:d5:27:b5:ec:62:a7:05:91:
                    8f:62:c8:ec:01:08:c0:07:5a:a1:87:bc:a3:3b:c9:
                    94:a7:02:54:a3:84:dc:85:4c:61:47:b9:37:b0:b4:
                    58:06:68:f1:2d:64:43:6c:2b:eb:4c:aa:0d:da:f4:
                    25:f4:4f:c3:c8:c4:f2:05:6e:ed:b2:62:ac:9e:31:
                    f5:f9:c3:31:b9:65:e8:f9:26:9d:4c:18:2b:04:4f:
                    80:62:2b:45:1c:fa:97:98:12:e6:f1:23:30:48:e4:
                    63:d9:61:1f:c0:95:77:bf:8a:cc:f7:61:70:2d:94:
                    eb:7a:2b:78:8e:fa:9e:71:11:31:5f:f7:14:61:ef:
                    ea:6d:f2:e6:29:d2:f4:85:81:05:d0:03:5e:b9:90:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:63:89:B3:33:F0:2C:CF:63:C2:3B:A1:7A:F9:7D:85:44:99:C6
            X509v3 Authority Key Identifier:
                keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:49:c7:97:85:d9:53:68:37:da:50:3c:08:0f:10:35:66:af:
         d3:11:84:4f:9e:49:ea:97:72:da:17:32:7a:9d:e4:b5:03:ce:
         a1:b1:01:17:b0:a9:eb:e1:c0:1e:fe:9f:60:06:0b:ee:19:69:
         9e:1c:d1:90:06:f2:bc:eb:0f:7b:08:18:fa:f1:6a:67:33:60:
         29:cd:cb:0b:b6:42:b0:63:0a:ff:a0:70:0a:74:40:35:65:bd:
         78:40:4d:b2:12:f6:66:d9:c3:d3:1a:ed:0f:ce:df:61:e5:63:
         9e:55:b7:1c:c2:05:0b:d5:94:b2:c4:d5:99:cf:89:40:d3:34:
         46:59:22:bc:e6:a7:84:5d:37:9d:3f:4d:7c:86:a7:ba:83:21:
         af:06:b7:56:d9:b6:bc:4e:07:e8:d0:ab:41:cb:1e:e5:e4:00:
         ea:c8:92:2a:d5:6d:f2:21:a1:fa:82:66:65:f3:57:08:90:76:
         e9:11:53:7c:33:8e:fe:7e:cc:91:9e:bd:54:fd:c4:80:34:c2:
         6b:3d:d5:f1:af:f4:88:3d:84:74:94:9a:73:94:1e:32:bf:dd:
         8d:86:57:1c:81:d8:a7:3d:c1:ed:77:9b:1d:dd:19:45:a4:71:
         ef:ea:d9:6a:b6:cd:32:0d:88:06:5c:5a:f0:ab:88:c9:ee:9c:
         96:3d:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:03 2025 by rpki-client