Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          9H+NeG2Ut6Xyn5cPhvJImd6Ut/rkE2cVQ+UAH4LnRLU=
Subject key identifier:   94:FB:9F:96:EC:2A:1A:84:80:36:95:D3:83:39:0C:DC:50:F7:EA:AF
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       0199FFC783F808FB20BEA4CF6E57B27B64B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          1674
Signing time:             Mon 20 Oct 2025 04:01:29 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:29 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:29 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: NRUp6Vrl0jL2ew4oSVbySbwnJrNfDGnGYixCXmJJvMM=)
                          2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:83:f8:08:fb:20:be:a4:cf:6e:57:b2:7b:64:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Oct 20 04:01:29 2025 GMT
            Not After : Oct 21 04:01:29 2025 GMT
        Subject: CN=94fb9f96ec2a1a84803695d383390cdc50f7eaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:e8:bc:67:97:da:d8:32:03:18:85:2d:d7:
                    70:f5:aa:1f:7b:b4:e2:ef:f7:3b:6c:62:57:0c:8e:
                    9f:44:1c:ab:12:7d:66:24:0b:47:aa:13:fa:cc:82:
                    73:a8:55:54:5d:05:e8:5f:52:46:a0:31:43:fd:90:
                    5f:96:c7:8e:57:64:7b:b5:cf:65:97:1e:40:c3:6b:
                    3c:14:b3:46:e5:22:e2:6a:c6:8f:07:62:f8:8d:af:
                    94:d1:1c:f4:45:1c:2f:f6:41:88:72:84:ae:43:c7:
                    03:07:03:06:20:f9:49:d0:dc:2c:4a:bd:8d:f3:27:
                    59:93:91:54:ee:93:70:cf:21:e3:1e:82:3a:69:66:
                    32:dc:4d:53:8e:e6:11:1f:4f:6c:f4:04:93:20:a0:
                    d8:51:71:a8:9b:8d:ae:c9:32:47:6e:21:d7:12:e0:
                    2b:71:7e:ef:b0:c4:1b:80:02:04:61:23:9a:4a:e4:
                    b7:20:7c:fc:e1:8e:b6:b7:de:f3:20:ea:1a:a0:c9:
                    5c:66:ce:02:b7:82:d3:ed:b9:8b:13:da:e4:13:9c:
                    c1:39:42:7a:51:99:27:f9:71:12:45:45:e7:4d:95:
                    7a:59:d1:95:27:11:d2:3d:88:9c:4b:27:ec:6e:66:
                    20:8a:4c:d3:9a:c1:a2:38:be:7e:05:0f:0e:b2:f8:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:9F:96:EC:2A:1A:84:80:36:95:D3:83:39:0C:DC:50:F7:EA:AF
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:55:ba:09:6f:c7:1b:05:01:df:6e:33:e2:62:13:c0:a7:
         56:2e:bf:f5:1d:dc:5f:2d:8c:f2:0c:5e:95:a2:16:a6:b1:06:
         1b:b0:16:88:6c:66:4d:3d:9c:a7:92:64:ce:e5:50:97:0e:9d:
         4e:cc:60:f1:4f:5d:94:09:27:c7:2b:81:35:83:78:4e:47:62:
         3b:8a:a5:f8:2c:9e:dd:04:c7:59:89:73:d4:d2:59:9d:87:44:
         9b:02:71:4a:13:f2:b6:1e:94:52:4f:ba:9b:32:3c:52:92:c8:
         f7:12:99:49:27:d8:79:4c:34:5e:35:73:50:27:76:56:b5:21:
         a5:ce:c4:bb:75:ea:44:a6:b8:d9:c1:ba:a4:ab:b2:d2:bf:f9:
         7e:72:ed:61:ff:9c:f4:d7:6d:d3:cc:01:07:ec:f6:06:a4:fb:
         d2:1e:89:b3:da:08:f2:d5:4c:ce:8d:8f:6a:2a:62:05:56:22:
         2d:51:4f:6a:8c:8b:42:84:18:43:90:19:ef:2d:92:28:97:82:
         be:6a:54:9f:7b:15:6a:ed:7d:58:f9:bb:9b:94:78:a2:1f:19:
         5e:4f:29:a8:5c:aa:26:b3:54:8f:2a:67:3c:c9:2b:89:7b:4e:
         65:b4:5a:17:6e:5d:9a:17:3f:d1:01:96:b8:62:f2:f4:dd:ba:
         b9:c0:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:54 2025 by rpki-client