Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File:                     0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier:          pXDn/VbAtvP+nrkpJVa61PD/CdeHLaPbyJG+cGVbSJk=
Subject key identifier:   04:96:57:BB:6A:4A:99:16:7F:37:8E:12:A4:9E:63:01:FE:B9:7B:EF
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer:       /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial:       0199FFC8BA797398FC289AC1F68E12F8BBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number:          1675
Signing time:             Mon 20 Oct 2025 04:02:48 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:48 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:48 +0000
Files and hashes:         1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: Z/eiiW5XXaYCEU0xToXx/4KjIgG3yEtgAYmhxrQAQec=)
                          2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:ba:79:73:98:fc:28:9a:c1:f6:8e:12:f8:bb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
        Validity
            Not Before: Oct 20 04:02:48 2025 GMT
            Not After : Oct 21 04:02:48 2025 GMT
        Subject: CN=049657bb6a4a99167f378e12a49e6301feb97bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:21:fc:e4:68:21:00:b4:ab:58:61:ab:90:
                    2c:7e:48:a3:72:ec:18:d1:25:18:7b:4e:94:ba:80:
                    34:55:ba:df:ba:5b:d7:a5:1d:86:5b:0b:a0:32:d9:
                    35:c3:b6:8b:cb:e8:25:c8:da:58:0d:2a:20:46:3f:
                    39:cb:80:08:5c:8a:6e:74:cb:fb:a3:12:43:78:f8:
                    a3:4e:3d:85:09:f6:97:7b:6c:56:85:ba:f3:9b:59:
                    d8:cf:53:4f:a1:e9:a9:80:58:79:d1:eb:a5:03:68:
                    9c:af:0a:36:e0:6b:c2:56:60:19:dd:71:4f:00:a4:
                    2e:ab:84:9a:e2:c9:f6:b5:af:22:af:03:d0:08:49:
                    36:52:0c:3b:27:76:2d:c6:87:15:ac:8e:7c:09:30:
                    80:23:5f:8e:a9:56:47:ba:e4:e0:66:bd:e0:b4:f2:
                    e2:de:38:c0:62:87:e5:72:09:75:6b:f8:59:c3:27:
                    6c:e5:d0:dd:78:6f:b1:fc:1a:27:7c:ad:f8:29:69:
                    74:7c:fe:e2:00:9a:1d:01:3f:11:dc:f1:c0:4a:bc:
                    c8:d7:fa:5f:c3:7a:4f:2d:14:a2:d4:51:c6:c6:51:
                    3b:b4:bb:d3:bd:c2:49:43:c4:05:8f:d6:7c:80:a9:
                    ae:66:e7:94:87:23:61:61:b8:3a:bf:3f:91:73:24:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:57:BB:6A:4A:99:16:7F:37:8E:12:A4:9E:63:01:FE:B9:7B:EF
            X509v3 Authority Key Identifier:
                keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8b:33:cc:52:13:b0:87:54:d5:fb:6c:73:ec:e3:4d:ed:d4:
         46:fd:ba:0a:66:3d:d5:3c:20:b4:d4:0a:01:b1:10:cd:b8:c5:
         90:46:ac:cc:66:13:14:7e:ab:e1:c5:95:5d:d4:59:7c:4c:1a:
         b8:45:4a:e3:c7:ac:4f:07:0c:32:23:8d:06:6a:4d:20:83:5e:
         84:6f:03:aa:03:05:d0:62:21:9d:8c:ed:7f:2f:22:df:a5:06:
         19:7e:cb:2c:36:c1:06:13:fd:3f:cf:e8:16:91:6d:f2:94:a4:
         4c:bf:fc:4f:43:62:8b:0f:b4:2d:c7:01:2b:5b:e7:8a:38:2f:
         4e:81:74:a4:ed:1b:54:02:b4:58:aa:f4:c0:21:a7:e7:e1:3b:
         ca:24:ee:a8:26:0a:aa:32:e3:c8:46:3f:40:97:9b:3b:6f:db:
         bf:a2:08:04:0e:0d:cc:82:0d:ef:d3:d7:06:aa:60:cd:57:8f:
         70:7f:d2:29:be:78:20:31:90:ed:64:2c:2f:a4:e7:dc:4e:d1:
         c8:e0:60:52:f2:6f:56:59:ec:97:14:92:f0:c5:7e:38:4e:5c:
         4d:a5:43:bc:89:17:bb:7d:d6:15:af:e3:50:01:c3:ab:26:45:
         f9:0c:b9:93:48:40:34:13:45:a7:98:cf:ec:87:9f:2c:10:52:
         5b:7d:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:45 2025 by rpki-client