Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File:                     pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier:          rKD6DSd9w2HVtjvt7n0F1NJyT4a+fhZITUGuIBVegG0=
Subject key identifier:   E6:D4:4F:35:7B:A8:54:8B:54:16:8C:6C:D6:BF:BE:E8:46:43:3E:45
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer:       /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial:       0199FF59B91B7ADE06513A6A41533803A332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number:          120D
Signing time:             Mon 20 Oct 2025 02:01:34 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:34 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:34 +0000
Files and hashes:         1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: mJYr/YyjGeYzgUvcqajL3pXvdyDWQohOaKr+S93PotA=)
                          2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:b9:1b:7a:de:06:51:3a:6a:41:53:38:03:a3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
        Validity
            Not Before: Oct 20 02:01:34 2025 GMT
            Not After : Oct 21 02:01:34 2025 GMT
        Subject: CN=e6d44f357ba8548b54168c6cd6bfbee846433e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:cd:b2:18:dd:f1:1c:3a:b9:f3:0e:3a:af:
                    58:0f:d7:79:3a:b3:f0:3a:14:1e:ee:d7:35:0e:d7:
                    58:a4:97:ca:b4:72:59:d1:62:91:a5:34:2b:5f:57:
                    c1:64:1a:eb:0c:a2:c0:59:d4:60:cf:68:fb:50:3c:
                    53:c3:e3:9c:15:79:ce:85:aa:85:29:2d:a6:24:af:
                    7b:f3:2b:ad:4f:b8:f9:3e:c8:d7:fa:e3:59:77:5d:
                    8d:5f:be:ab:af:a5:12:ae:08:21:f9:3f:ce:a9:b8:
                    15:3b:e3:0a:61:1e:29:75:25:cd:84:82:95:6f:b1:
                    f2:b7:79:10:08:57:29:50:ec:b9:d8:bb:30:c5:a2:
                    8f:2e:a6:ab:dc:40:fe:b6:e2:52:0a:67:cc:18:c9:
                    94:d0:17:9c:12:38:e6:1c:d0:48:aa:69:36:c9:2a:
                    a7:09:16:a1:13:71:51:cb:c5:a1:08:79:4e:0c:01:
                    a7:85:1e:e6:f8:59:99:3c:f0:29:fe:a9:72:05:f8:
                    25:d3:26:0a:5a:4a:ac:1f:63:f3:09:44:de:0c:1e:
                    63:92:9c:cf:b7:2b:84:7b:4c:18:2a:1d:96:94:25:
                    90:fc:c8:e4:fe:52:62:bd:02:6f:76:67:a6:75:e1:
                    15:fb:04:6d:7c:13:3b:61:87:ec:e6:83:0e:56:d7:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:4F:35:7B:A8:54:8B:54:16:8C:6C:D6:BF:BE:E8:46:43:3E:45
            X509v3 Authority Key Identifier:
                keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e2:c0:9e:9d:d6:28:92:b7:01:32:b4:a9:6a:cd:69:7f:fc:
         c7:7c:41:94:c9:f9:1f:c0:9d:c6:48:43:90:9f:6a:82:66:f7:
         67:73:61:cc:c1:86:98:7b:83:d3:99:2a:24:13:71:19:2e:ec:
         32:48:b1:3a:f2:b7:31:bf:59:4a:4f:15:45:83:18:51:c5:f2:
         67:1e:7c:12:1a:7c:7e:ec:c9:4d:56:c4:a6:c5:39:d2:73:f4:
         32:f8:5d:51:cc:4b:06:68:c8:80:35:db:1a:b2:48:0f:74:97:
         0b:1b:58:95:9a:de:90:b4:92:9e:c7:ed:8e:97:84:b4:61:33:
         ff:0d:75:48:cb:13:84:b3:ae:7c:45:cb:86:97:80:8f:21:1a:
         91:d8:8d:9b:36:32:40:8c:24:bb:29:dd:33:57:47:0f:18:96:
         97:0c:e9:91:80:8a:b4:87:1e:62:28:a2:b1:6a:0c:d5:a2:8b:
         43:10:79:d7:86:eb:90:9f:6f:55:1f:22:27:bb:72:c3:fe:71:
         a5:96:89:1f:bd:82:35:1c:fe:c8:f2:40:39:6f:7d:c4:98:9b:
         5e:61:fe:d9:e8:83:b9:0e:79:f1:b2:70:0e:40:c1:71:5e:fe:
         52:d1:f3:62:69:fe:fa:4f:e2:7f:98:5a:01:88:b8:9c:7f:31:
         23:56:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:08 2025 by rpki-client