Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          xbwdpZrQWSkEcg5s8R4zXIC9883d2eYhtJD4/IbxySo=
Subject key identifier:   0D:B8:D0:9B:DE:81:6F:4F:55:4C:1D:A8:52:7E:FA:04:1A:F9:72:64
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019A2B1EB92A6253875D2B84910C881FC090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          10EF
Signing time:             Tue 28 Oct 2025 14:00:24 +0000
Manifest this update:     Tue 28 Oct 2025 14:00:24 +0000
Manifest next update:     Wed 29 Oct 2025 14:00:24 +0000
Files and hashes:         1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: 0ak4U8W6tJbKFKQmxE6Y3g4dWPOrfQlQtAp0n7zOhaA=)
                          2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2b:1e:b9:2a:62:53:87:5d:2b:84:91:0c:88:1f:c0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Oct 28 14:00:24 2025 GMT
            Not After : Oct 29 14:00:24 2025 GMT
        Subject: CN=0db8d09bde816f4f554c1da8527efa041af97264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:5b:68:45:82:d4:9a:e0:44:94:c7:eb:99:
                    2b:5b:b2:87:55:ef:02:9a:2f:58:91:f4:c9:a0:d1:
                    fb:64:1f:82:b8:69:e7:d8:d6:57:6b:db:7b:ea:e3:
                    b3:1d:f8:44:05:86:7e:49:f5:37:65:31:0e:b4:49:
                    87:f4:03:64:8d:df:5d:16:c0:92:aa:44:4c:3a:38:
                    d0:73:85:0a:13:0b:65:fd:a8:7c:3f:19:00:d6:26:
                    7e:a6:58:2b:5c:75:5c:e5:69:20:3e:65:35:9f:62:
                    ca:51:23:4f:8d:63:db:8f:0b:f0:23:9d:28:8b:4f:
                    0a:3c:3b:fb:c0:af:78:44:98:33:63:eb:58:f1:04:
                    6a:10:45:12:a0:49:76:47:92:dc:dd:6d:3a:f5:27:
                    60:3f:30:16:e8:d7:f7:2c:16:49:54:b6:65:a1:b0:
                    b9:20:5c:46:5a:d9:66:f5:c6:83:f6:be:59:ba:fd:
                    7a:05:9a:fb:13:b4:3a:fc:f7:5d:df:da:af:89:53:
                    f1:29:54:a7:34:c9:8f:59:e2:14:f8:2c:bc:71:f7:
                    ee:ca:2a:50:95:c4:9b:05:09:27:60:7e:25:d0:42:
                    22:be:52:a6:3d:73:af:83:cd:f5:ed:37:37:66:57:
                    15:61:64:cf:01:33:a6:4a:79:20:e1:1f:d9:9c:19:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:D0:9B:DE:81:6F:4F:55:4C:1D:A8:52:7E:FA:04:1A:F9:72:64
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:b5:61:f2:e8:9b:29:b6:96:bb:e0:6f:9f:28:fa:9e:21:
         4f:6f:6d:07:15:40:c1:c3:34:ed:0e:48:d9:fe:01:2d:c1:a1:
         18:5b:40:2e:9d:7e:79:75:cc:16:cb:fb:7a:a8:22:c4:c6:bd:
         1d:74:08:ab:58:71:e4:d1:91:9d:92:71:96:06:e5:ea:ef:af:
         05:98:5b:1a:c2:a7:ea:7c:ec:ee:37:86:c6:9f:00:fc:d5:71:
         ba:50:28:60:3d:43:63:56:d6:3b:64:08:2e:11:3b:16:d9:ef:
         67:ef:65:01:5e:96:dd:1b:c3:7f:6b:ac:92:c5:be:55:37:fc:
         5b:84:a2:91:c2:26:03:e0:ad:be:bf:73:a6:48:d7:2f:08:20:
         4d:dd:3c:25:c1:ed:d8:a9:92:12:07:fd:ab:76:74:df:7f:07:
         8a:c8:d3:e2:ee:af:12:4c:ed:e2:b2:d1:4c:a5:60:bd:67:8f:
         a7:35:38:58:4b:37:21:ea:d2:df:ec:1d:df:da:2d:43:ab:07:
         13:0b:e8:d5:0b:ed:01:67:e5:9e:5c:08:11:97:35:58:89:5c:
         ec:56:a9:11:f8:85:93:cd:c8:2f:f9:5e:8d:34:dd:20:b5:70:
         ea:4b:72:1e:64:4b:19:85:05:b9:2d:12:e4:08:b8:b7:e3:5d:
         f9:ac:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:18:36 2025 by rpki-client