Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File:                     AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier:          uO6M9blyet/2elF7kV64c1+HqLDuLBmphDZQxuE+D4M=
Subject key identifier:   E6:98:7B:F8:87:DE:84:55:4A:99:A1:FA:48:11:16:3A:A1:ED:A3:59
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer:       /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial:       0199FB7C791739C9D7FDD985462950816D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 08:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:02 +0000
Files and hashes:         1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: QqefGYmGWpaK5owk0ZpRe3x8llP2cPdJy85u7/21Beo=)
                          2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:79:17:39:c9:d7:fd:d9:85:46:29:50:81:6d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
        Validity
            Not Before: Oct 19 08:01:02 2025 GMT
            Not After : Oct 20 08:01:02 2025 GMT
        Subject: CN=e6987bf887de84554a99a1fa4811163aa1eda359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:cb:ce:e8:99:0d:64:e1:34:f7:dd:65:ea:
                    3f:2f:36:4a:43:26:a9:2e:76:bd:2c:3e:4f:54:dc:
                    3b:52:2e:14:48:79:12:95:83:62:6e:8e:04:ba:23:
                    7a:86:e3:0a:dd:b0:42:7c:60:3e:ab:ad:0e:a3:5e:
                    f7:39:e1:66:d1:4d:6e:f2:20:e5:23:5d:ea:b0:02:
                    43:9e:de:01:31:cf:d5:34:98:72:7e:29:38:b0:6f:
                    57:0d:22:b9:0b:f3:0e:56:67:c4:ab:a8:e6:ae:a2:
                    e4:8b:5a:ff:c4:82:dd:89:1c:76:5d:49:39:62:9e:
                    ad:a0:37:cf:eb:74:27:c9:1f:a6:da:eb:99:20:22:
                    99:1a:08:73:ac:c0:49:31:a5:61:c5:08:80:da:93:
                    35:64:94:cb:18:3f:f9:84:b4:b3:c2:55:75:1c:c3:
                    9e:5b:a5:56:05:6f:7a:57:cf:bb:8c:fb:e5:55:a9:
                    40:ef:56:99:f9:15:76:bb:a9:cb:97:e1:32:f6:e2:
                    b8:ca:82:07:a3:07:29:56:b9:cc:34:98:5b:e7:87:
                    bb:4e:d9:ad:77:02:23:c7:25:46:70:f3:02:1d:56:
                    b2:15:06:a1:77:51:ad:8f:c3:c4:1e:86:e2:a4:03:
                    81:79:a4:0f:13:ed:b6:fc:49:6b:72:b8:2a:ec:ed:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:7B:F8:87:DE:84:55:4A:99:A1:FA:48:11:16:3A:A1:ED:A3:59
            X509v3 Authority Key Identifier:
                keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:66:41:08:cf:54:16:98:e8:d3:61:2b:b0:1e:0b:6e:71:3f:
         99:d9:d3:a0:86:c7:2a:13:8f:17:1c:d1:b5:67:30:ab:a8:8f:
         4a:24:d9:1e:b0:28:b7:f6:a5:6f:90:a1:3c:13:72:37:7e:a5:
         fb:a6:a4:30:af:2f:3e:39:34:65:dd:5a:60:97:9a:e5:b0:e0:
         41:c3:f8:a2:57:ad:d4:cf:86:07:94:29:a0:fa:39:da:f2:f0:
         99:ab:45:fe:e6:87:30:b6:22:0c:77:24:e4:cd:9d:67:f6:b3:
         46:05:ec:8b:6b:b0:95:c2:0e:21:e9:05:83:ba:15:25:e8:ed:
         09:c6:ff:b7:e0:af:29:aa:b6:af:02:ad:01:95:c6:2e:7e:8e:
         58:5f:b4:1d:ec:b9:34:ae:3a:ec:df:b1:0b:f5:5c:cc:38:55:
         5d:d0:ed:02:de:bb:b1:9d:fb:ea:5e:82:e3:e0:6d:d2:c6:c8:
         06:e8:e3:0a:69:95:73:0f:67:10:94:94:c2:b3:1f:c5:07:e8:
         28:e0:94:3e:c1:8c:46:52:ef:58:72:06:1d:47:a1:22:3c:cd:
         8a:1c:da:c4:84:3a:fd:25:4e:f1:ea:29:50:d4:0d:5f:10:48:
         bd:c9:84:7e:24:65:8d:1a:e6:09:7f:e6:04:e0:36:3c:2b:b4:
         06:10:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:17 2025 by rpki-client