Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          N9dr1rZLN5stglu3R0bC9Ve1wbwyBTKQ9fqFl26aRVk=
Subject key identifier:   12:39:03:42:41:58:48:52:DD:08:A5:62:6C:9D:FD:19:C7:C1:BD:20
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       0199FE1014107780F1D1C90E39CCA71C8190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          115B
Signing time:             Sun 19 Oct 2025 20:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:30 +0000
Files and hashes:         1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=)
                          2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: 6i490hQbkPIq+vIq35TmvAQZP3duvnLzkd80PYSMvEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:14:10:77:80:f1:d1:c9:0e:39:cc:a7:1c:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: Oct 19 20:01:30 2025 GMT
            Not After : Oct 20 20:01:30 2025 GMT
        Subject: CN=1239034241584852dd08a5626c9dfd19c7c1bd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d8:8a:cc:d1:c5:ba:a4:ab:cb:8e:49:34:7c:
                    f3:c4:53:ef:fe:6c:c2:72:53:c9:cd:47:2c:1e:7c:
                    36:28:11:49:79:fa:2a:c3:ad:94:b5:e3:aa:ca:e9:
                    9b:b6:c8:f0:88:df:61:e6:79:c5:cf:2a:52:bb:da:
                    5d:6f:08:21:b6:51:dc:08:cd:df:d7:86:de:81:e9:
                    50:d6:f0:c2:05:39:8f:e7:92:d2:82:58:99:63:f2:
                    3c:3d:96:75:87:49:4a:eb:de:bc:e3:4a:dc:a5:be:
                    69:27:29:73:ee:46:f1:ac:25:f0:05:90:06:ac:c4:
                    6b:c7:3a:b2:fb:d1:ec:bd:4b:6b:d9:0d:0a:53:0b:
                    76:d2:79:05:7a:7c:50:6f:74:e6:f5:d0:42:a3:53:
                    b4:e4:9a:c1:9f:b6:7e:80:79:85:77:8a:27:cf:1d:
                    cc:6b:2a:9c:f8:d8:db:0f:1d:9d:a6:e0:88:88:8d:
                    e6:16:c5:98:a4:27:48:a0:e0:6e:44:71:dd:71:a4:
                    f0:cd:7f:f1:1e:66:1f:ba:fb:ec:d9:51:31:14:09:
                    db:78:47:e9:38:98:4b:32:80:1d:e6:71:36:fa:6e:
                    7d:ce:53:62:2c:1b:77:08:52:24:a9:8f:b1:85:dd:
                    7c:46:05:38:06:ba:f5:42:4b:c9:35:70:71:a0:b7:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:03:42:41:58:48:52:DD:08:A5:62:6C:9D:FD:19:C7:C1:BD:20
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:dc:ae:2f:4a:8f:97:8a:cb:1a:c0:a2:a7:7b:d0:c2:c7:
         63:59:8a:29:25:b2:13:c6:5f:18:e6:52:e0:fd:13:2c:41:f2:
         02:f8:11:3e:75:ec:f9:0f:df:a1:e4:43:94:53:94:b5:d7:d9:
         d2:d6:82:d0:65:f7:c8:b2:d4:3c:0e:f1:2a:82:2a:e0:e2:17:
         90:e7:24:2d:58:ea:b6:34:02:92:12:c8:e8:f9:01:f8:99:32:
         ea:a4:8b:0b:7d:07:3a:11:56:c2:e3:f2:70:2f:f2:fd:74:c4:
         5f:91:d8:07:90:f5:d6:0b:39:d8:03:88:40:fd:d0:64:9c:98:
         3f:55:ac:a2:66:cd:e7:d5:34:f8:12:9c:cb:d6:05:14:0c:46:
         35:5f:61:af:f2:e7:9d:86:d8:53:ec:fb:84:94:7f:74:f3:9e:
         db:8e:3a:dd:4c:78:9c:0b:29:cd:ca:36:7b:b8:8f:90:02:c4:
         52:f7:e8:49:3b:83:24:67:eb:13:52:33:6a:f3:9f:e7:ad:64:
         82:b0:86:23:b6:4b:ce:6d:3a:11:c5:3f:7b:c5:6c:3e:7f:ba:
         4c:a1:d1:35:5c:7e:af:03:27:95:22:57:d4:f2:d8:65:e3:cd:
         a1:55:9b:56:8c:55:1e:6e:12:bf:8b:e2:d5:1f:cb:3b:04:09:
         13:f8:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:32 2025 by rpki-client