Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File:                     SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier:          xf2q3m3pAfL55ex9LZMjX25yJ34sfDvqMxjtr2jFCjM=
Subject key identifier:   79:A3:69:03:C5:84:C8:10:1D:53:2E:49:B4:0E:64:98:D3:4E:27:A1
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer:       /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial:       019A24AF336AC953833B41BFFA6040377497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number:          11C1
Signing time:             Mon 27 Oct 2025 08:00:53 +0000
Manifest this update:     Mon 27 Oct 2025 08:00:53 +0000
Manifest next update:     Tue 28 Oct 2025 08:00:53 +0000
Files and hashes:         1: 0mjmbcUYcJdUwsZqfFXQurt0QGs.roa (hash: vj/D2huTe28PQZ9MOq6LRDgSeNcaiaat155ny9UZvt0=)
                          2: RVGHcxZqqdFTa9mgJIZ4F-usrMw.roa (hash: boTPZs0RRS/x6E00qU+d0VKsbRO9VZxFEtJFGTyTt+4=)
                          3: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: n3FZVpiXW33N4IfjVLEPfLs1uUWB6D6t3RKgAYTIA9w=)
                          4: T94PGq-eWjYniItYGztzb3OiEUY.roa (hash: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:af:33:6a:c9:53:83:3b:41:bf:fa:60:40:37:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
        Validity
            Not Before: Oct 27 08:00:53 2025 GMT
            Not After : Oct 28 08:00:53 2025 GMT
        Subject: CN=79a36903c584c8101d532e49b40e6498d34e27a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:90:45:d5:cb:33:ed:27:35:e8:df:80:4a:
                    fe:b3:1f:04:e2:e6:da:97:a8:c9:c5:26:be:09:52:
                    29:b9:9a:8c:20:5e:f7:80:15:c8:b7:48:0c:a0:fd:
                    0d:89:d1:9f:1e:c5:95:22:5e:d4:98:1c:02:31:f7:
                    f2:aa:69:c4:2e:5b:80:a5:37:70:44:55:24:45:d4:
                    a2:b7:08:d5:af:a6:f1:d4:0f:46:6f:52:4b:d2:a6:
                    a6:9a:9e:cc:16:7a:3a:05:d8:b9:62:9c:4c:d1:21:
                    8e:30:c5:c9:75:67:46:63:47:62:3b:7c:23:13:c5:
                    08:74:60:56:54:73:66:85:4a:d6:fa:be:1b:ef:d1:
                    61:98:2e:f1:7e:c9:5b:3a:aa:2a:ca:d9:e8:45:93:
                    21:c0:0a:d3:89:c4:a5:6c:13:37:e0:f5:99:4e:c9:
                    57:5f:3a:1d:91:00:c4:18:60:f3:ad:67:70:e6:0f:
                    aa:39:e1:7c:44:ab:d0:a6:23:79:e1:74:79:8b:ad:
                    fa:62:7e:29:a2:be:7b:28:b5:3c:ce:c5:c7:c5:d2:
                    4f:0b:5c:12:d3:00:5a:94:1e:af:d9:f6:d3:5f:07:
                    5d:89:10:8d:01:5c:0c:ef:f3:8e:69:38:4f:eb:bd:
                    b1:86:e0:59:b1:85:8d:c8:ab:f2:ea:59:f7:b8:6b:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:69:03:C5:84:C8:10:1D:53:2E:49:B4:0E:64:98:D3:4E:27:A1
            X509v3 Authority Key Identifier:
                keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2c:16:ee:7a:13:93:68:94:b6:4d:a6:a3:b1:8f:57:99:40:
         7b:05:f0:f2:7c:e2:b5:50:bd:83:29:0b:4c:6e:4e:10:28:a2:
         00:08:bf:ce:8a:a6:b0:38:39:56:91:73:4d:d3:f6:c8:44:46:
         64:80:21:2f:32:ed:e3:c5:5d:72:f3:bb:25:93:c2:40:20:28:
         51:b9:a1:11:70:a5:04:78:65:b3:11:1d:50:33:1a:a7:e8:a1:
         f0:4c:8f:04:f3:14:ed:45:d8:6a:8f:f6:a4:47:11:cb:b6:c0:
         11:5e:72:9b:a6:48:be:04:38:05:b3:82:1c:4d:53:82:a1:02:
         a4:5f:09:38:af:9a:a9:50:99:1e:ab:27:6e:02:8c:e7:a8:45:
         61:85:d3:9d:06:73:15:95:f8:17:9c:71:c0:7b:3c:09:2a:6b:
         91:ab:db:17:ef:f6:08:bb:0d:a1:66:4d:66:5b:ee:16:62:23:
         1c:4d:f1:59:35:45:25:60:d4:69:4c:d6:cf:f9:77:be:e9:09:
         dc:14:d8:1a:72:08:e5:a0:09:e3:43:98:a0:1b:56:64:60:df:
         3e:1b:15:ee:f9:89:7c:ac:20:60:51:1d:11:d2:52:3d:47:8f:
         0f:0e:96:0c:3c:3f:aa:0f:c2:45:48:20:ba:39:fb:51:6a:d7:
         b1:ec:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:24 2025 by rpki-client