Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          w2YvZDV2Z/nE7nL/85bNg1FHMjSI7uR1mmBZyh0IXrg=
Subject key identifier:   5B:E8:A2:30:46:E7:A8:EF:29:20:51:91:C3:59:74:A0:D9:5B:4A:FC
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019A2289BD8A15BF1C51C6442D8F399A31EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          13F5
Signing time:             Sun 26 Oct 2025 22:00:43 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:43 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:43 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: AdY6RU8JEIGKmsJnDgzHbMF8IEcBVv6SepKnEObgRLQ=)
                          2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:bd:8a:15:bf:1c:51:c6:44:2d:8f:39:9a:31:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Oct 26 22:00:43 2025 GMT
            Not After : Oct 27 22:00:43 2025 GMT
        Subject: CN=5be8a23046e7a8ef29205191c35974a0d95b4afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:da:4f:6c:63:d7:ea:81:a0:5c:6a:44:7b:
                    33:ac:bd:c6:cc:ee:e5:e4:01:cb:f4:3a:34:37:ba:
                    d9:15:15:3e:a6:e1:c9:08:20:07:1f:d4:cd:76:24:
                    45:bb:eb:a6:aa:ac:f8:1e:23:33:90:0e:d8:57:55:
                    6b:73:55:a3:c8:6d:8d:14:62:a3:a0:d3:9f:8b:1f:
                    71:3d:bb:8d:86:bc:57:8a:77:70:51:6d:01:36:1b:
                    fb:5d:37:bd:7b:98:47:70:75:4b:48:17:92:c0:e7:
                    e6:75:da:ef:f2:58:ab:fc:dd:c4:97:e6:48:2b:32:
                    36:a7:14:5a:31:25:19:1b:b2:f5:17:3e:d7:7e:97:
                    cb:ac:b0:6c:d4:15:7f:ad:9e:9e:5b:5c:ee:da:8b:
                    3f:d2:07:16:31:84:9b:e1:16:a4:8b:ea:f1:57:d6:
                    5d:6e:5a:2b:77:29:3e:a5:8d:78:97:98:7a:e4:7d:
                    ce:70:73:74:3a:02:1f:98:18:07:b4:ab:6c:d5:80:
                    81:9b:ce:b4:0d:fa:b8:05:44:1e:ea:d5:86:78:ef:
                    6e:63:c7:e7:7d:eb:9e:89:57:2f:a4:9a:f8:d3:e5:
                    58:fb:c5:1d:74:d9:7e:ba:7d:db:ba:cf:52:19:14:
                    2a:ad:65:1b:1f:2b:f5:67:44:6b:3a:f5:82:a7:10:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:A2:30:46:E7:A8:EF:29:20:51:91:C3:59:74:A0:D9:5B:4A:FC
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:16:08:9f:99:a4:40:33:5b:e1:1e:b6:e0:76:aa:77:71:21:
         c5:dc:71:bb:49:44:bc:09:bc:a1:af:be:90:3c:23:7e:7f:f5:
         e4:32:df:96:48:1f:4b:c1:40:76:ac:bf:ed:83:be:f3:88:b5:
         46:ec:cf:be:55:22:50:fc:73:8d:8e:73:10:81:a0:2e:bb:8f:
         87:ed:f6:ec:67:61:b0:7e:dd:41:ae:e5:b9:79:07:01:23:af:
         a0:22:ee:48:b4:37:a4:04:c2:ef:92:82:d4:7c:db:4c:76:0d:
         6e:cd:a3:00:55:83:a7:0d:ba:5b:22:8a:08:17:b2:49:79:8a:
         e0:18:94:db:8e:42:0e:15:f0:56:2e:75:8f:1f:6d:d5:72:9c:
         0f:8a:ec:60:e3:19:44:a7:96:eb:6c:f5:01:1e:89:33:8f:60:
         82:7f:93:35:3d:28:55:a0:cb:36:d6:62:a0:6c:2a:85:81:4a:
         b9:5a:b9:ce:01:16:a5:a6:ce:d0:08:35:77:09:e3:7c:32:97:
         1c:77:05:0a:32:92:06:64:c7:50:bf:48:31:6d:e5:f6:94:5b:
         74:d1:ec:68:62:f7:fe:12:00:c2:01:86:ea:25:25:63:3b:c6:
         34:53:65:1f:ef:20:8a:7e:00:ac:9b:08:5d:35:40:91:95:25:
         e9:89:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:43 2025 by rpki-client