Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          NyHfeVcNqPlrp9yvRrMqzhNpBk6GRRbAqcPBAv9xjmk=
Subject key identifier:   E3:95:14:FB:F2:4E:1F:D9:4D:31:43:76:C0:12:38:B6:D7:BC:E7:50
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       0199FB7C9BA81920723FC59E06C558F9B4A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0F8A
Signing time:             Sun 19 Oct 2025 08:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:11 +0000
Files and hashes:         1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: j1GKcPknQdj1OdHaQVop+cfQAj+nx/Z9SmlQ9pf0z3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9b:a8:19:20:72:3f:c5:9e:06:c5:58:f9:b4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: Oct 19 08:01:11 2025 GMT
            Not After : Oct 20 08:01:11 2025 GMT
        Subject: CN=e39514fbf24e1fd94d314376c01238b6d7bce750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:d8:91:64:5c:61:88:b3:d3:7d:09:cb:f0:
                    e2:9f:8f:68:8a:61:76:9a:0f:e7:47:90:59:49:c2:
                    b9:75:a6:76:58:f8:67:61:64:62:d0:90:97:d0:80:
                    79:d3:ee:68:ef:51:ba:df:f4:9b:c0:35:93:9d:8c:
                    96:f9:9b:82:01:f6:d4:d5:c6:a7:e9:8e:ed:5b:04:
                    08:d0:cb:1b:d9:92:1d:c0:7a:35:4f:df:b7:44:a1:
                    99:26:77:8f:2c:bb:71:4e:76:49:c3:d9:31:cd:4a:
                    e8:2b:4b:6f:fa:f3:9a:19:e0:38:98:db:fb:73:2c:
                    13:0c:77:b2:72:15:8d:78:bf:60:3f:34:1b:87:ad:
                    a6:86:d5:14:12:37:2a:28:7b:6a:f1:2a:78:aa:83:
                    e4:db:49:1c:8a:08:c2:19:59:e6:d2:4a:73:ac:91:
                    74:40:48:59:a4:0f:ff:13:2f:44:83:89:ae:46:1e:
                    8b:64:ac:47:b0:78:92:7a:c9:5d:41:73:04:8e:7a:
                    93:bf:18:c7:74:42:95:96:3d:2b:29:79:6b:0b:9e:
                    1e:e5:35:be:ab:fd:af:ce:8c:4e:c8:7d:4e:96:25:
                    61:26:47:c5:4c:4d:93:65:1f:6d:f8:0d:2b:24:2b:
                    2c:a6:e6:69:7c:19:ec:34:e4:10:38:ce:da:81:17:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:14:FB:F2:4E:1F:D9:4D:31:43:76:C0:12:38:B6:D7:BC:E7:50
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:af:35:c1:be:b0:9d:76:32:82:d7:ac:27:17:e1:92:9e:
         6b:28:b9:ef:da:38:f9:b1:51:fd:c5:67:e0:2c:84:a8:d8:18:
         25:70:ee:4e:94:93:ee:38:31:a5:b5:ec:d1:19:05:a1:71:ac:
         3c:6f:8f:80:49:46:d0:5f:14:76:25:2f:b0:4a:56:49:50:1e:
         ad:5d:70:bc:d7:d8:4a:a4:94:ae:5a:b2:ef:e9:29:fc:9d:19:
         58:5f:2d:7e:9b:c2:35:ca:44:38:d0:98:ea:ef:87:6e:20:ee:
         d4:23:00:f3:85:d0:6f:6e:d5:f4:9c:a4:c5:ca:d6:8b:e7:ec:
         c3:05:e3:fc:8a:32:1f:7b:5f:64:5f:b8:64:08:fd:2a:37:03:
         68:8e:86:4e:d5:a4:30:10:8b:29:81:a4:70:57:cd:f9:6b:83:
         bd:26:35:3d:aa:68:99:32:f3:4c:38:0c:c8:42:8e:dd:0c:82:
         5e:9b:ed:20:3b:73:d1:84:7f:09:10:b3:8d:01:8f:95:a6:88:
         1c:f4:1a:63:76:48:99:55:2a:1f:71:42:32:f2:86:92:7c:66:
         9f:bb:69:6c:86:31:79:4c:20:82:32:81:c8:ca:74:4b:56:4f:
         f0:32:52:08:4e:14:71:79:cb:88:14:79:28:39:34:49:42:5d:
         b6:ad:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:39 2025 by rpki-client