Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          XTCQCVqPtaDmQEwuUpN13o4guo/VDvoRadPujRfZTrE=
Subject key identifier:   5F:82:7E:7A:CD:43:21:3E:E0:97:86:66:0A:45:63:3D:A7:2D:4F:46
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       019A0411825F5FEE6A8A3EB9DF08CFF2A63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0960
Signing time:             Tue 21 Oct 2025 00:00:47 +0000
Manifest this update:     Tue 21 Oct 2025 00:00:47 +0000
Manifest next update:     Wed 22 Oct 2025 00:00:47 +0000
Files and hashes:         1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=)
                          2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: Kf04fQJgYQ/ty4s/ohbjG/gtDuevjqL+TY2iMTopzpc=)
                          3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=)
                          4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:11:82:5f:5f:ee:6a:8a:3e:b9:df:08:cf:f2:a6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Oct 21 00:00:47 2025 GMT
            Not After : Oct 22 00:00:47 2025 GMT
        Subject: CN=5f827e7acd43213ee09786660a45633da72d4f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:64:d7:1d:8f:a4:2f:61:54:be:32:af:3a:
                    82:ed:8d:c2:fd:a8:81:83:e4:1c:00:39:ee:57:e1:
                    a3:1f:c2:6f:43:28:c7:bb:76:e7:8d:25:89:97:28:
                    15:f8:89:30:77:e0:52:73:0c:40:b3:76:f2:80:6d:
                    6c:c5:4d:66:50:4f:a6:6a:63:47:f1:3d:9e:e9:7d:
                    ba:0c:50:37:ac:07:34:73:c4:df:e0:0d:b0:d8:f7:
                    32:e2:77:c8:f9:d8:fe:db:d1:0b:96:2a:10:e1:16:
                    6f:41:18:57:d2:b3:75:30:72:ab:a5:db:5a:81:2d:
                    2c:ae:a6:75:f8:f3:81:3b:de:61:a0:0e:c7:39:87:
                    0a:7e:a6:0b:a6:d0:19:08:6d:2e:90:d8:9f:56:d6:
                    f0:9d:5c:aa:85:df:2b:fa:1c:52:1d:44:72:96:75:
                    c4:52:da:d7:b2:11:90:4f:c8:fc:dd:d8:13:4c:5f:
                    e4:34:86:34:ed:fe:03:96:56:83:28:b8:fa:5b:9b:
                    04:82:23:e9:61:0a:dc:f1:75:36:ac:c9:93:5a:bd:
                    96:3c:00:a2:51:d0:bd:37:c4:da:ab:55:14:e9:43:
                    13:00:03:d6:ce:30:8d:93:3e:3f:05:e1:10:0c:31:
                    14:83:73:f4:d5:ad:ac:a3:07:8b:a1:3d:93:13:2f:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:82:7E:7A:CD:43:21:3E:E0:97:86:66:0A:45:63:3D:A7:2D:4F:46
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:8e:07:17:08:22:cf:2a:7a:60:c2:47:11:7c:18:67:f8:
         c5:43:bb:94:a7:05:eb:fc:e8:33:62:a8:13:2d:fb:1f:34:88:
         ba:c0:06:ff:b5:63:9c:91:18:8e:7d:8a:55:93:22:51:8b:ee:
         ad:60:5b:0b:dd:1e:24:46:51:17:96:e1:e0:0e:57:7d:a4:70:
         98:91:f9:db:1a:53:8b:11:98:fc:e3:0a:66:b5:73:b8:8a:8a:
         31:ac:10:f6:08:89:e5:40:7d:3c:72:2b:73:51:2e:3c:a7:b2:
         3d:76:d0:6b:58:3d:d7:2a:18:c7:51:be:a6:4a:80:2c:7c:03:
         cd:8b:c1:f0:54:5b:ae:a5:2e:c1:49:24:14:59:5b:71:9b:78:
         94:24:1b:4d:14:9d:fc:d0:6b:d2:c8:2a:75:51:ba:84:a6:c4:
         b0:7c:3b:7a:9e:3a:89:a5:36:8e:c9:5b:02:18:e9:8e:48:69:
         0c:5b:22:fd:29:40:07:33:0a:b8:c3:25:8c:41:1c:79:e0:62:
         d3:f8:51:ce:04:7f:52:2b:09:20:3c:d6:d6:ad:83:7e:35:72:
         20:b3:be:7f:fb:fc:19:60:aa:30:30:04:bc:f7:bd:23:0d:a5:
         5b:30:4e:d7:cb:e5:aa:70:f8:92:03:80:f5:54:e8:c1:b4:32:
         18:9b:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:51 2025 by rpki-client