Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          ss5CFo47e7CrP0NaQG5OkLdPyJiTArliACvT2c6VvZw=
Subject key identifier:   F5:40:48:36:82:78:45:4A:1B:F7:23:24:0C:1D:DA:99:77:DC:D1:75
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       0199EA1B6158094ABD1998FD3C0560E6CCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0623
Signing time:             Wed 15 Oct 2025 23:01:26 +0000
Manifest this update:     Wed 15 Oct 2025 23:01:26 +0000
Manifest next update:     Thu 16 Oct 2025 23:01:26 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: 2nhVQxggzrLnsdwqKi+1F5qlZUVN3M9OCjx5dxGe2no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Oct 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ea:1b:61:58:09:4a:bd:19:98:fd:3c:05:60:e6:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Oct 15 23:01:26 2025 GMT
            Not After : Oct 16 23:01:26 2025 GMT
        Subject: CN=f54048368278454a1bf723240c1dda9977dcd175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:81:5d:87:bb:a1:3a:cf:61:da:6b:f6:80:
                    2d:cd:63:d2:d7:48:b7:11:9c:3a:8d:48:e0:a1:28:
                    76:1a:2c:4e:33:c4:ab:3d:bd:b1:d8:be:f6:62:73:
                    e4:b3:51:92:41:f1:9b:ff:1b:f4:e1:da:e7:79:6f:
                    fb:ac:71:52:c0:67:db:fd:b9:1b:29:24:1c:9d:67:
                    04:13:ec:65:0e:5b:d1:00:41:9d:b0:7a:e6:48:a3:
                    96:0f:22:2f:66:56:8a:57:4d:1f:1a:2e:2d:33:14:
                    d8:c3:f7:3a:62:fc:8c:57:b0:30:de:01:7e:8e:bf:
                    a2:92:c5:49:34:20:fe:5d:d2:d9:be:ff:3a:9f:aa:
                    fc:ae:c6:68:db:88:10:ba:3c:d2:d0:2d:17:52:f8:
                    4f:78:f2:70:1c:20:23:0e:64:76:af:b9:7a:1b:3e:
                    a3:55:e4:43:b9:6c:6b:d1:2f:79:33:b5:6d:71:77:
                    ea:7f:40:f6:f6:b4:7b:00:3b:8b:16:c9:a9:70:ab:
                    2a:5b:83:aa:08:62:35:01:d0:93:ac:8c:10:6c:d7:
                    6f:eb:23:2d:b0:a1:52:c5:c6:31:1a:a5:f6:df:9a:
                    fb:5d:1d:0c:46:04:87:5b:dd:10:b3:0f:28:27:06:
                    34:af:c9:52:e8:15:f1:6b:20:a2:41:1a:0c:ec:5b:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:40:48:36:82:78:45:4A:1B:F7:23:24:0C:1D:DA:99:77:DC:D1:75
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:80:d5:29:db:20:1c:74:88:00:66:dd:bb:4e:d2:b3:b7:6f:
         7f:5b:01:c3:c8:85:24:9b:02:a3:00:b1:2d:4c:18:8c:18:6b:
         19:bf:29:97:79:87:d6:2c:19:ee:d5:35:ed:94:44:3c:ed:25:
         06:75:ba:11:10:36:c2:0c:f0:14:e5:23:22:31:54:e2:0a:b7:
         a5:4c:b2:23:c4:43:8f:2d:58:cc:fd:04:fe:2b:b3:10:55:c1:
         79:24:e5:56:86:5c:9d:cd:03:da:89:c8:07:e1:56:ac:78:be:
         58:48:7f:f0:4b:6d:30:cf:d1:fa:bd:fc:33:7b:ba:2d:da:c4:
         f8:10:28:d1:d8:99:5e:7f:a0:ab:03:6d:dc:99:ad:ca:81:c0:
         ad:80:a1:c3:c0:7c:68:21:35:86:2c:98:8f:83:a9:be:27:f2:
         2c:c1:bf:ac:76:f0:b4:0e:b0:f1:9c:f9:7e:10:88:69:c5:6d:
         c8:97:75:53:5c:19:81:c1:8d:52:d1:cd:3f:d9:f7:4c:eb:af:
         22:e7:30:78:6f:ff:3a:fd:e1:b0:db:63:10:5b:07:d7:5a:59:
         f1:a8:cf:06:a3:d8:a9:8a:2a:52:00:3f:02:18:6f:48:34:6a:
         81:d7:3c:76:82:e5:ac:8c:63:e5:9c:e1:d3:6e:a7:9f:7d:37:
         92:3b:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 07:28:26 2025 by rpki-client