Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          PwzyVlq2K8ucNZi/ki8XquwULgVEuoSqdvOKVStxutw=
Subject key identifier:   9D:B6:5F:32:E5:96:0E:B2:CB:3D:77:97:44:D6:C5:26:A3:63:19:CD
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       0199FDD9AB2AA4B3DB998558EB8E62547C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          05AE
Signing time:             Sun 19 Oct 2025 19:02:04 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:04 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:04 +0000
Files and hashes:         1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: Ey0GMtjRzc0LsvLiMP39cqerVcqzp4KgCj10QNRGhz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:ab:2a:a4:b3:db:99:85:58:eb:8e:62:54:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Oct 19 19:02:04 2025 GMT
            Not After : Oct 20 19:02:04 2025 GMT
        Subject: CN=9db65f32e5960eb2cb3d779744d6c526a36319cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:58:df:13:42:71:e2:1e:3d:f7:aa:92:1f:
                    74:18:dc:5b:aa:b9:bd:d8:27:f7:86:e4:58:3d:c9:
                    80:17:45:b6:74:71:e3:3b:ec:c2:6d:6f:e4:56:79:
                    0d:d6:95:df:71:e4:ab:e4:7e:7b:79:66:ac:00:15:
                    af:9b:1f:21:fc:bf:bf:55:5b:a8:c9:90:b3:2f:a0:
                    1a:a6:35:eb:48:54:30:ca:07:58:89:67:aa:ed:f5:
                    d6:a6:8a:74:64:ce:7a:7e:ab:2e:7a:92:61:32:2f:
                    0d:0f:c9:e6:dd:69:2b:79:e4:d5:9d:63:17:a7:b5:
                    68:95:50:62:eb:b3:10:ae:59:24:a6:28:84:98:29:
                    72:dd:88:d1:5f:d0:cd:77:f6:f8:ca:f0:44:66:f8:
                    92:2a:a8:e6:07:24:de:54:5c:8c:bc:f8:1d:39:7e:
                    2a:82:26:70:e9:49:2f:84:8c:8a:6f:0e:b2:aa:4e:
                    73:ab:4e:1c:c7:48:bb:2e:db:6b:ce:cb:d2:30:ae:
                    a2:a1:66:82:10:45:41:9d:04:76:fd:4a:8c:5a:10:
                    fe:f0:9b:3c:13:71:79:b6:3f:ab:1f:de:75:8d:f7:
                    c7:dd:1a:1e:51:0c:b8:02:80:1a:76:22:aa:ac:54:
                    66:06:1d:c2:0f:ab:c3:0a:22:89:21:8e:e7:32:03:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B6:5F:32:E5:96:0E:B2:CB:3D:77:97:44:D6:C5:26:A3:63:19:CD
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:88:4f:50:ad:03:19:4a:45:43:2d:37:0c:97:e3:c8:2f:
         88:a3:4a:4a:15:47:dd:57:78:c9:6b:86:26:61:96:8b:00:3a:
         cf:aa:eb:7c:60:15:64:3e:b3:40:4d:6e:77:3d:0e:fd:09:cf:
         35:49:c9:0b:1d:a9:76:33:73:d4:03:ec:c4:16:61:1f:6e:5a:
         62:25:ac:9f:57:e2:19:2e:db:00:a3:5f:8a:6b:77:87:68:b8:
         51:c2:14:17:27:2f:ed:39:db:9b:4e:3a:44:0c:a8:1f:7e:c6:
         1e:1f:9a:ab:13:e9:0f:8d:5f:43:60:d5:26:cb:20:21:a8:d2:
         4a:6d:5d:20:92:69:4d:05:5b:2a:fa:39:9c:ea:ea:03:4f:a2:
         77:e0:6d:7e:48:db:de:d2:3d:48:d7:60:a2:f8:ba:f2:1f:ee:
         59:13:5d:92:8f:9e:c4:f3:19:69:4d:86:da:6b:c6:7f:25:35:
         93:7b:17:e8:87:32:2a:f2:d4:0b:57:59:34:8c:6a:7e:32:a5:
         71:10:d0:f9:e5:d4:ac:6a:69:27:08:df:23:9b:2b:aa:3c:79:
         9e:4e:a1:9e:07:a1:d9:1a:ca:49:48:c1:6e:75:a0:55:04:c1:
         0c:2b:48:39:b5:51:4b:55:15:73:ad:03:a3:46:78:46:ea:87:
         60:3a:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:25 2025 by rpki-client