Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File:                     Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier:          UF6YBXakT1rslb9YwedTF+2LMmF71eRGt+I//pas7fA=
Subject key identifier:   FE:AC:1A:45:26:15:D2:A0:76:3B:06:4C:38:4A:4F:5F:E9:B1:B5:C7
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer:       /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial:       0199FB45E512E68754A0A08F5991307090D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number:          0E01
Signing time:             Sun 19 Oct 2025 07:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:25 +0000
Files and hashes:         1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: 6Gksqa7ByBtrViZWxMpJSKQmYedPmVL4WoxRNUDkfUI=)
                          2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e5:12:e6:87:54:a0:a0:8f:59:91:30:70:90:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
        Validity
            Not Before: Oct 19 07:01:25 2025 GMT
            Not After : Oct 20 07:01:25 2025 GMT
        Subject: CN=feac1a452615d2a0763b064c384a4f5fe9b1b5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:e3:41:23:3c:21:fa:dd:a2:5c:28:d2:d8:
                    f5:ea:bb:53:1b:8a:b0:6b:8e:6e:b2:ce:73:c2:6a:
                    db:e5:d8:5f:b4:18:dc:d8:14:12:ee:0c:29:cd:45:
                    c3:68:11:38:a1:37:bd:43:95:fa:d5:5f:b2:48:6f:
                    ed:14:d7:59:da:40:b7:70:da:42:6f:65:db:b6:f9:
                    86:70:2d:e0:8f:4b:d4:a4:f2:04:d9:7f:9b:91:14:
                    5b:45:e9:e9:a4:5b:b5:12:c4:a6:0b:87:98:59:1a:
                    8b:51:0a:2d:14:af:28:14:5d:5c:fc:de:78:04:c2:
                    dd:bf:00:c9:c6:0a:e9:a8:64:3e:c4:56:5f:3d:b9:
                    3e:5c:c9:06:c0:d8:25:e2:16:85:e9:1d:18:71:4d:
                    d7:3a:4a:a7:33:55:4e:58:45:be:97:bc:49:6d:42:
                    17:2c:8a:7e:58:b2:d3:e6:22:77:ea:6c:d5:79:8b:
                    53:63:67:a8:71:00:97:c9:85:30:35:65:31:01:dd:
                    7f:74:e2:6f:1e:64:e4:3f:d6:75:f8:46:0e:7d:ff:
                    79:5c:7f:47:d9:fa:09:f0:a5:f0:dd:09:15:bd:fa:
                    6d:f6:c9:11:d2:df:0c:fc:97:58:73:72:de:99:96:
                    e8:e5:88:54:0e:33:d9:9b:d2:8d:f4:8b:e8:76:45:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AC:1A:45:26:15:D2:A0:76:3B:06:4C:38:4A:4F:5F:E9:B1:B5:C7
            X509v3 Authority Key Identifier:
                keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:3c:54:4f:30:b9:91:92:8f:b6:f4:cd:85:48:69:ad:e6:
         44:4e:20:9c:ef:e2:84:9f:8e:f9:10:c0:fb:3c:75:5c:f8:42:
         31:ad:a9:6d:e5:73:05:f1:c8:ea:ca:52:bd:4d:42:60:32:36:
         4e:8f:88:77:b2:d9:9e:4d:f8:bf:5a:05:73:24:d2:4a:ff:2d:
         54:70:f8:8d:61:62:6c:50:c2:0c:59:6a:08:93:6e:a0:64:07:
         c7:d5:b3:d6:c8:76:26:0f:e7:b8:78:04:2b:91:c9:09:a5:0b:
         af:ea:ad:3d:25:c2:b5:5e:09:87:1a:8e:29:74:ae:40:6e:b0:
         3f:09:52:ce:36:72:fc:dc:6a:17:5f:43:a0:6f:b0:db:27:9d:
         52:85:9b:78:32:01:a8:9a:c5:1a:c9:4c:6c:cc:33:84:21:6e:
         5c:cb:07:fa:ac:f8:7c:a4:c7:b0:17:b7:8d:e4:92:1b:fe:39:
         44:bd:0f:09:28:60:57:b9:ea:b5:a1:ad:fe:f4:e5:91:34:a4:
         6b:9a:15:6e:f5:80:99:1d:80:24:b8:2a:8f:a8:62:6a:1a:93:
         d3:3a:c9:d1:4e:4a:ee:52:25:82:76:c7:26:f3:40:de:64:9b:
         46:b9:9d:1d:e7:21:c8:ba:39:9f:0b:21:79:94:5a:48:a8:0a:
         b3:ec:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:06 2025 by rpki-client