Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          6QVbyhLOr/Vhj3xAaSfiHCSsD5wNLgE69kSE+tnQgG0=
Subject key identifier:   65:B7:19:70:F6:3C:37:F5:5D:21:99:2A:C5:BA:3A:0E:1D:65:67:94
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       019A209B2AB8FC7A557A70DB64CDE7938DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0B2D
Signing time:             Sun 26 Oct 2025 13:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 13:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 13:00:31 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: N1Pi1QGSAdMaVn9NWtAsjdtcXhwXaKToyjErdlVkAso=)
                          2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:9b:2a:b8:fc:7a:55:7a:70:db:64:cd:e7:93:8d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Oct 26 13:00:31 2025 GMT
            Not After : Oct 27 13:00:31 2025 GMT
        Subject: CN=65b71970f63c37f55d21992ac5ba3a0e1d656794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:92:b0:8e:47:ad:d0:90:a8:48:da:58:28:
                    8c:2e:1c:98:86:80:42:25:d5:e8:bb:bc:f2:f8:be:
                    87:11:01:b0:21:96:fc:aa:d0:73:0f:34:f3:08:f3:
                    89:22:ba:8a:bf:0d:63:4a:ee:94:73:6f:43:af:e7:
                    93:2f:83:14:1a:d6:af:79:53:ee:72:2d:ce:0f:f0:
                    61:eb:1e:2f:d7:66:85:2c:5e:79:0b:91:d8:8a:34:
                    da:75:c9:4a:c9:f1:77:ba:b7:54:fc:b8:fb:a6:44:
                    e7:67:e0:00:4f:2c:f5:8a:d8:3f:84:c2:4b:d1:25:
                    13:3f:cb:a6:f1:0d:5a:88:f4:52:f3:71:88:e9:81:
                    ac:88:7e:b6:65:c5:ea:18:83:04:e3:23:e6:17:6c:
                    ae:12:6b:be:d1:85:b5:ac:c4:14:dc:ae:27:95:4c:
                    48:74:4f:64:1e:60:05:fc:ed:fd:53:60:0a:7f:a3:
                    24:8c:ff:6c:e5:dd:90:91:93:c0:6f:65:5b:aa:70:
                    4b:2f:0b:88:f2:c6:c6:fd:a0:7a:06:58:f3:4e:c9:
                    44:90:80:c7:7d:00:66:1d:25:53:6b:85:3c:c5:2d:
                    05:98:0a:b1:88:72:e0:50:1d:36:50:9e:8b:db:45:
                    26:fd:4c:c9:a2:04:e1:ba:4a:70:12:80:9d:61:06:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:19:70:F6:3C:37:F5:5D:21:99:2A:C5:BA:3A:0E:1D:65:67:94
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:43:3d:3e:be:4a:12:13:35:0c:e3:b5:b8:88:98:04:25:a0:
         7a:eb:db:8f:f0:8d:40:da:37:e2:e0:89:77:91:e6:d5:6e:f4:
         2c:c5:a6:00:a3:08:8a:09:7e:fb:04:8b:74:e2:38:57:8a:97:
         8a:4c:d3:af:a0:62:5c:90:82:f4:b4:8e:21:31:a1:79:1f:7b:
         d4:be:ea:72:23:9b:80:4f:28:ce:f5:fd:31:33:32:a4:d5:cb:
         37:c1:ce:7c:98:a2:f5:4c:69:6c:c8:c4:ee:7e:8b:ad:2a:1e:
         6f:a8:bb:2e:39:61:cb:18:da:f6:f4:3f:3d:99:f1:d6:15:6a:
         27:38:ee:03:11:dd:95:49:7a:2d:9c:58:5e:9a:f8:2c:1a:aa:
         49:31:d7:66:4a:52:0b:a5:fe:98:03:50:54:60:4d:6c:8a:7f:
         78:83:52:df:9b:0b:8e:ca:ff:66:be:6e:77:d4:60:dc:46:ce:
         74:dd:07:e1:98:c3:e7:6a:14:b3:9e:50:1f:71:b2:01:8e:53:
         20:f0:1e:ef:d3:7b:dd:4b:29:30:7e:00:18:dc:81:28:9e:0e:
         bb:cc:66:02:87:74:28:c1:c1:5d:d8:26:d7:bc:05:db:4c:b0:
         2a:06:9a:b2:a7:63:23:0d:c2:6d:50:01:c9:0e:d8:3e:20:fe:
         3f:5a:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:43 2025 by rpki-client