Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          jg8ZURx6Ca6p69aAYalTINhZLoAAYBozipRYYhizf2o=
Subject key identifier:   E2:0D:FA:15:D1:6B:11:8C:C0:F6:AE:27:6D:54:99:26:B8:7B:9F:58
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       019A0034EC55E11EF051F2A444F0B0340E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          1202
Signing time:             Mon 20 Oct 2025 06:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 06:00:59 +0000
Manifest next update:     Tue 21 Oct 2025 06:00:59 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: Zbl4wfPpNd4vhJ5bBCKyEgYEzmUz7u4ABSkWw4RSUzc=)
                          2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=)
                          3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=)
                          4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=)
                          5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:34:ec:55:e1:1e:f0:51:f2:a4:44:f0:b0:34:0e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Oct 20 06:00:59 2025 GMT
            Not After : Oct 21 06:00:59 2025 GMT
        Subject: CN=e20dfa15d16b118cc0f6ae276d549926b87b9f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fd:8d:2b:dd:47:d8:ad:9e:a8:41:89:2a:3b:
                    bb:30:b4:68:05:55:84:9e:70:f4:b4:df:9d:2c:e1:
                    d0:2e:19:3c:9f:7a:af:c3:72:f2:14:25:39:7f:c7:
                    be:5a:b7:8f:ea:c8:80:31:66:87:a0:03:81:ae:25:
                    35:68:75:6f:28:0c:e0:30:9d:64:81:4b:6f:20:51:
                    fa:72:19:86:e2:1e:09:36:e2:eb:7c:ac:ae:b4:b2:
                    fa:42:7d:82:c3:d3:9c:f8:3d:66:84:15:45:78:88:
                    57:0d:24:01:6d:4f:4c:4d:00:0a:60:9b:f2:2d:c4:
                    f2:dd:d1:5d:94:51:b4:13:a6:69:02:7e:92:e4:79:
                    cf:c0:15:4b:a3:32:97:3a:2e:9a:9c:2b:f9:d2:95:
                    83:88:5d:12:17:fb:b6:f5:3b:dd:30:39:91:4a:f2:
                    78:b5:46:72:99:31:f6:94:32:38:9d:c7:2c:81:6f:
                    bd:a9:a6:8b:d2:d4:ce:a7:c7:86:9e:e7:c4:79:66:
                    1d:ab:09:a9:41:9e:00:31:a3:af:7b:88:e9:49:71:
                    39:26:62:90:99:85:0c:de:cf:62:bb:48:cf:3d:8e:
                    99:b1:2e:1e:cc:40:36:71:8a:dc:c2:15:4a:fc:bf:
                    96:e6:0e:c4:7d:e6:da:ea:8f:e7:54:70:82:e9:0a:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:FA:15:D1:6B:11:8C:C0:F6:AE:27:6D:54:99:26:B8:7B:9F:58
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:0a:aa:af:6a:0d:38:ab:a1:f9:a2:c0:56:d6:92:78:2b:
         6f:08:9b:58:d6:f6:af:80:46:ab:bd:bf:48:c5:38:93:ee:08:
         57:a3:b7:ab:a4:96:22:bb:24:d4:c9:10:b4:d9:a8:7d:d5:8f:
         b1:91:64:3b:fc:ae:bd:18:f1:2c:59:57:84:11:0e:68:4b:ef:
         d9:7c:32:31:2b:86:90:9c:ea:f0:4c:05:ce:54:ee:fb:23:94:
         bf:c8:bd:e2:c7:63:ad:8b:14:21:0d:91:a2:a9:24:c3:3e:67:
         70:c0:00:41:78:1a:be:d5:f7:67:4d:12:3e:16:83:de:54:81:
         35:46:7d:ec:17:a1:a8:b5:0b:29:41:79:6b:59:64:e0:ef:56:
         3c:da:16:db:04:35:3e:2b:06:ff:ab:bf:f2:13:55:36:77:fb:
         19:e9:91:43:d8:ef:9c:7f:10:81:ec:09:a3:ca:c8:b1:6f:e9:
         ba:95:ed:5e:a6:fc:e9:ed:34:f6:14:ee:ab:f1:29:1f:5a:24:
         9b:a2:bf:e9:a2:5e:07:0d:18:73:14:ad:84:a0:98:48:28:c3:
         4a:6b:f4:36:7c:e6:6d:48:2d:62:d7:2c:ee:bf:7b:17:9e:32:
         22:ff:0d:bd:0a:8c:de:92:bd:63:39:32:a6:75:4d:0f:fc:c9:
         bb:fb:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:42 2025 by rpki-client