Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File:                     dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier:          FUYcGvoUZq/JSnrAMgJ9f67DK+yUcA/j0iRd+vWUjUQ=
Subject key identifier:   9C:DA:A2:58:FE:30:48:5F:96:76:5E:22:9E:AD:36:9F:20:D7:06:87
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer:       /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial:       0199FB45E774551DD9027A72B98C99C42DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number:          0DB6
Signing time:             Sun 19 Oct 2025 07:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:26 +0000
Files and hashes:         1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
                          2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: QKaIM8vW6fppXvOxYYUmPpAXXpe05pGiNBTECGdjGhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e7:74:55:1d:d9:02:7a:72:b9:8c:99:c4:2d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
        Validity
            Not Before: Oct 19 07:01:26 2025 GMT
            Not After : Oct 20 07:01:26 2025 GMT
        Subject: CN=9cdaa258fe30485f96765e229ead369f20d70687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:07:07:76:90:f9:6f:b1:e5:63:22:68:a2:
                    7f:a9:eb:b0:07:96:46:99:12:13:b6:fa:2c:53:b3:
                    fc:2f:3e:d0:a4:6b:37:89:11:55:8d:1a:96:a9:67:
                    d8:11:ca:58:88:c5:05:8b:24:aa:a3:c8:af:9b:4c:
                    be:f5:d9:3f:ba:fc:63:1d:39:0c:5c:5f:35:83:86:
                    38:b6:70:6a:93:7b:1b:ea:f5:a3:fd:c5:c8:0e:e8:
                    01:a7:e6:1a:51:c6:85:fc:66:92:8f:5f:e1:09:a7:
                    d0:70:5a:82:ac:66:cc:d3:14:22:f2:b6:ce:66:5d:
                    80:24:50:3b:9e:1d:80:f5:05:79:01:20:c2:e7:3f:
                    6d:3e:37:5c:c2:ca:28:5d:16:30:ff:ca:af:42:e2:
                    11:c4:03:e7:47:c3:83:58:d2:b9:53:6d:bd:f1:b0:
                    62:7a:1e:68:4c:7a:96:b6:ac:9c:95:1a:77:a3:7f:
                    1f:27:1e:0f:e7:df:04:9a:12:c2:8a:38:4b:d0:a9:
                    b3:7f:0a:fe:2e:40:10:22:72:b2:9f:b1:ef:7e:ca:
                    1a:a4:7a:d0:60:b1:6e:14:9d:5e:0f:be:30:88:8b:
                    6e:cf:87:22:9d:7b:5a:e7:e4:f4:32:67:2d:f2:f5:
                    16:72:eb:7b:6a:bc:ce:16:4d:b9:c7:1e:6e:50:27:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DA:A2:58:FE:30:48:5F:96:76:5E:22:9E:AD:36:9F:20:D7:06:87
            X509v3 Authority Key Identifier:
                keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:92:54:5e:5f:00:d5:8c:90:f6:3e:d2:cf:70:6a:49:a3:dd:
         6e:06:87:56:cd:a8:83:26:44:03:e7:b8:9d:fb:cd:43:52:0f:
         57:c6:84:71:91:c1:10:fb:03:6d:35:03:b4:7c:60:b5:24:a2:
         a5:aa:03:c1:bd:03:02:cb:db:24:7c:51:36:65:c1:ae:49:f9:
         61:0d:d7:9f:9e:69:fa:d3:57:45:96:99:d5:c3:03:8b:2e:0a:
         70:7f:6f:fa:d0:52:dc:7a:7d:16:35:20:f4:6b:24:89:30:cf:
         1b:cc:5e:20:a2:64:09:ff:1a:17:8b:a6:c6:5f:02:94:ea:2b:
         0d:89:38:ad:fd:ce:06:48:b7:8a:cf:ff:47:0e:8d:0c:cd:18:
         07:b3:c2:55:42:d3:8b:2e:b4:4b:c3:e6:ae:65:fd:4d:d4:38:
         08:b9:72:35:a7:02:28:e5:d6:a2:c9:58:ff:0c:49:ee:03:05:
         02:c7:4e:9e:ce:60:3d:ef:d4:96:31:b1:74:31:be:26:3a:a4:
         d7:a2:3f:e7:b7:08:d1:28:00:8e:3f:35:a4:00:29:c1:5f:50:
         fb:70:ea:7f:0a:ae:94:c0:36:a5:25:09:0d:96:66:e3:06:b3:
         06:0e:72:2c:c6:d1:a7:8a:2a:fc:5f:a3:fd:33:be:00:d2:f0:
         18:97:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:10 2025 by rpki-client