Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          a2BUZZc4Zmw3GE64AqpVjeFAxe3fv6zb6YTIdbcIU8k=
Subject key identifier:   B3:75:EC:0E:CE:A2:B8:1C:1B:F3:8F:8E:7F:FB:B2:CA:E5:88:BE:F1
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       0199FB0F2F8276DF84D48FA1EADB8DCC98C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          01F5
Signing time:             Sun 19 Oct 2025 06:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:40 +0000
Files and hashes:         1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: ffV7kXSF18zQxNbGt0sPAcfpUVXFj75IMmsk8pqkymM=)
                          2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
                          3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
                          4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:2f:82:76:df:84:d4:8f:a1:ea:db:8d:cc:98:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Oct 19 06:01:40 2025 GMT
            Not After : Oct 20 06:01:40 2025 GMT
        Subject: CN=b375ec0ecea2b81c1bf38f8e7ffbb2cae588bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:ad:af:0f:45:fd:36:62:02:02:db:e3:b8:
                    97:d4:1e:55:40:b3:1a:0b:fb:46:95:01:81:88:e7:
                    44:80:e7:00:e1:64:97:86:de:22:ae:a3:8f:2b:a7:
                    b4:22:17:0a:c8:4e:04:76:36:75:24:e1:51:66:1c:
                    fd:7a:ef:ad:6d:fe:79:11:ec:95:b0:cb:d1:6e:fc:
                    27:f7:ee:1b:25:13:28:1d:d8:fd:73:8a:1b:7a:90:
                    27:de:9a:aa:68:25:04:30:7a:78:b1:f2:d1:69:ba:
                    e3:c0:79:4c:fb:83:79:5f:03:5a:30:0f:44:5c:2a:
                    1b:f6:0a:a8:fa:cf:5b:7c:ce:65:1f:25:74:f8:52:
                    64:30:89:c6:ca:72:5c:7a:ab:75:77:a2:0d:88:87:
                    64:df:61:10:bf:b1:83:80:ed:b9:e0:17:27:b3:0d:
                    36:ca:a1:68:1c:86:3c:98:50:07:fa:61:66:2d:77:
                    22:5f:fe:a9:b2:eb:f8:8a:e5:8c:54:40:29:d2:26:
                    48:d1:2d:e8:d4:d7:fd:21:a1:27:af:04:ca:28:b4:
                    f4:ac:6a:e7:cd:d4:db:ee:eb:cd:e6:9c:05:b1:60:
                    61:3c:dc:d8:b7:c1:50:08:d9:cb:d4:8f:7e:49:ba:
                    14:08:f5:51:e0:28:ee:aa:25:86:a9:74:db:56:a8:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:EC:0E:CE:A2:B8:1C:1B:F3:8F:8E:7F:FB:B2:CA:E5:88:BE:F1
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:02:a7:32:17:42:9b:55:86:19:ea:bb:8b:d3:e5:cf:ee:
         95:05:40:e5:aa:1c:2d:8f:68:94:c7:c4:0e:27:cf:33:35:7a:
         4f:cd:ec:f7:09:6c:00:52:41:8c:af:16:4c:1a:a4:50:d9:ef:
         35:1a:31:c6:41:d6:74:55:5d:4c:e7:14:cd:80:cb:71:8b:0e:
         5d:38:2f:dc:ee:c2:94:2b:0f:61:ae:55:b2:b9:98:ff:be:59:
         42:3c:36:1a:3b:7b:9c:b2:b2:39:23:6c:8b:4c:95:2e:22:26:
         f1:e8:7e:cc:aa:9c:e4:ec:57:8a:d0:8f:c1:c2:b7:fa:94:ff:
         36:03:aa:0c:4e:74:e2:59:6f:0b:0c:fa:aa:49:3e:8c:72:55:
         18:1d:e0:bc:d6:b0:dd:33:be:8e:d9:8f:20:4c:69:b6:ce:54:
         f0:8b:04:df:6a:6b:e6:f0:fa:11:8a:09:9a:9a:5f:6b:aa:1d:
         db:1e:75:1f:6f:62:a8:3f:1f:07:bd:a9:2d:12:e7:1a:3c:e9:
         c7:35:1a:ed:35:07:9e:0c:2a:28:e5:a3:8a:5a:3a:6c:84:c9:
         a1:ab:9d:1c:26:37:1a:d7:ec:45:15:ac:19:3a:96:ce:89:52:
         2c:65:46:29:32:46:11:1f:88:40:75:c1:a4:27:d7:c1:80:6d:
         cd:90:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client