Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          Uy+6efn0vlgLdDLKsYjYSgwifVRHDgZCCX214mOOm0k=
Subject key identifier:   BE:A7:B3:62:10:59:90:13:CA:51:D9:DB:17:5B:2D:EE:6F:9D:4F:32
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019A00DA04BB3FD16062D1A17530A45A310A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          0679
Signing time:             Mon 20 Oct 2025 09:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:19 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: S9vGS13AJ3NSMnjSgNSOP55HcLinEemxyzB3tYtCAN4=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:04:bb:3f:d1:60:62:d1:a1:75:30:a4:5a:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Oct 20 09:01:19 2025 GMT
            Not After : Oct 21 09:01:19 2025 GMT
        Subject: CN=bea7b36210599013ca51d9db175b2dee6f9d4f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:44:0b:d7:3f:49:13:72:3b:85:4c:17:43:
                    49:9c:8e:fa:50:22:ea:a0:a6:9c:9e:7c:82:aa:21:
                    b2:2c:b5:b9:10:d5:14:8c:0e:f0:8c:81:3f:e5:0f:
                    82:b4:d8:76:e8:8c:14:b1:68:d9:bb:0e:2c:cc:32:
                    62:87:ee:b0:c6:c4:68:2d:c1:a2:4c:cf:ca:1e:32:
                    8b:5e:b2:ef:55:f7:3b:a3:aa:09:23:5a:fb:23:c5:
                    fd:32:29:0b:89:b8:4d:5b:dd:6d:5a:f3:d2:f9:bc:
                    70:c9:3f:c9:fc:25:ce:9b:89:0a:85:17:d0:71:5e:
                    8a:5e:6b:aa:1c:3c:db:d9:26:3e:43:ad:3f:30:5d:
                    3e:52:a7:37:16:4e:9b:a5:b1:66:88:04:d8:16:98:
                    f8:b1:e0:45:22:59:6e:25:34:95:f3:ce:47:84:77:
                    f0:d4:88:55:1f:9d:44:84:c7:21:90:50:72:47:0d:
                    38:1a:27:9d:72:02:3a:00:d7:1e:9b:e8:55:aa:a6:
                    c6:7b:61:48:5b:10:ef:1c:0e:83:8d:20:e3:78:57:
                    7d:89:cf:2d:aa:f9:fc:7e:dc:f2:e5:95:34:76:0a:
                    1f:eb:11:5d:9a:d3:b3:fc:a8:7b:d8:c8:64:50:88:
                    c0:12:ab:48:f1:08:8e:9f:c7:a9:6f:95:14:52:18:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:B3:62:10:59:90:13:CA:51:D9:DB:17:5B:2D:EE:6F:9D:4F:32
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:6c:1f:a3:9d:e4:44:83:4c:47:0f:6a:ec:14:51:08:58:
         5c:f5:21:a3:74:18:df:3b:26:5f:67:e1:74:41:4a:24:b1:51:
         3e:3a:a5:36:92:69:4b:35:de:20:ce:2d:ad:66:9c:97:61:b6:
         bf:0a:14:eb:0c:10:0f:46:e4:16:94:a9:f1:81:9e:55:2c:de:
         ab:e4:16:f1:7e:d0:42:6c:cf:de:ba:01:00:3e:7c:e1:99:fd:
         80:a1:8e:a4:c8:a7:cb:48:5b:b1:bb:85:66:45:ac:68:01:ad:
         a0:cc:5d:c9:fe:5f:03:65:bf:7e:d1:1c:52:86:ea:91:13:7a:
         a9:ac:68:5c:50:b3:fa:78:d9:90:cf:e2:ed:af:9b:11:fc:5b:
         3b:ef:1a:55:1c:66:42:e6:5a:01:70:3c:17:de:b1:08:cb:d4:
         93:90:5e:dc:62:4e:46:c0:7c:c7:a4:80:1d:86:7c:d9:26:d6:
         10:fa:3c:de:83:bd:4f:d1:00:25:a0:2d:34:42:87:89:6f:e4:
         ee:9e:d8:2e:ea:be:79:1d:14:e0:7c:30:2a:23:45:4f:db:0a:
         6a:fb:e1:27:de:cf:4b:3d:a6:5a:54:83:34:18:21:f8:9f:34:
         a3:4c:eb:aa:d2:82:c1:13:2c:6f:d1:2b:40:5b:fb:25:32:f1:
         8f:d0:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:37 2025 by rpki-client