Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          HIrAJWviMIK3ZYGYZw/qjcOKu2XYWNdk8vVz6SDlRRY=
Subject key identifier:   E0:97:D9:8E:8B:81:6E:48:A0:DD:9F:4D:5B:49:F4:EC:4B:EB:B0:21
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       019A71EEABCBE5AAF5D962BF90B3E52680C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          0913
Signing time:             Tue 11 Nov 2025 08:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:58 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: D63RhhfOChuEKzoLPezbfnK8rli6U2tmurtazdThyoU=)
                          2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:ab:cb:e5:aa:f5:d9:62:bf:90:b3:e5:26:80:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Nov 11 08:00:58 2025 GMT
            Not After : Nov 12 08:00:58 2025 GMT
        Subject: CN=e097d98e8b816e48a0dd9f4d5b49f4ec4bebb021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:fa:3a:0a:e0:68:86:f8:f6:e0:23:c4:75:
                    f0:9b:fd:47:f2:45:f0:b2:bc:74:a4:5d:b4:a9:1c:
                    70:13:ca:1f:84:4d:78:c6:bc:55:a2:0b:e9:15:c5:
                    82:0b:c9:a4:0b:75:b7:1f:71:e1:f0:ea:19:66:3e:
                    06:a8:7f:15:13:4f:54:a7:aa:a9:25:80:18:0d:fc:
                    53:f9:1e:e1:12:bd:15:26:3e:1b:d8:4e:1b:b1:c7:
                    07:89:f3:12:f4:7f:fa:5b:e2:e6:b5:2b:bc:78:5f:
                    e9:84:6d:3e:e4:08:c6:a5:fc:2d:48:71:1e:1c:f3:
                    01:95:31:2b:4b:46:5b:cb:00:e4:0a:c6:af:fd:31:
                    ae:eb:8f:91:78:06:c3:eb:e3:32:63:a5:74:b3:ed:
                    3e:30:44:61:22:80:87:a4:5c:ad:88:ed:a3:f7:61:
                    44:03:6f:f1:20:fa:17:73:cd:56:77:88:39:ca:7b:
                    3e:8c:52:38:16:1d:0a:a2:d3:58:20:e2:da:30:07:
                    c6:25:27:52:8f:4b:96:7e:48:79:88:f2:74:68:37:
                    c4:85:2f:27:b4:be:da:75:70:32:32:fa:06:c7:0c:
                    11:59:bf:fe:98:4c:08:d9:47:1d:ee:47:56:89:d9:
                    7e:e6:bf:90:9d:f8:9e:db:28:30:9f:48:b5:36:55:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:D9:8E:8B:81:6E:48:A0:DD:9F:4D:5B:49:F4:EC:4B:EB:B0:21
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:b5:e3:d1:3b:f3:f9:a9:89:6c:47:0a:a3:94:d6:42:72:
         af:95:a4:16:49:ad:b3:0a:07:d1:5e:57:05:a0:bc:cf:d1:91:
         62:23:a8:a0:34:15:89:92:b4:ef:6f:a0:58:0e:8a:1c:bb:99:
         50:da:7b:ac:1e:26:83:1c:c9:9b:ed:4b:94:d8:ed:67:e6:05:
         c2:31:33:7f:4f:27:2d:19:84:0f:b3:08:d2:04:44:c3:a1:7b:
         bc:85:6c:20:39:3a:bb:d2:f8:fd:fa:05:d9:7c:de:b9:97:b7:
         68:f7:58:9d:51:4c:2d:86:5a:18:03:3e:a2:5a:6d:7a:63:a1:
         1a:0f:49:c4:f0:eb:48:58:56:cf:48:a8:2e:55:49:18:1f:9e:
         b4:3b:b5:42:94:98:80:9d:c0:76:82:23:6c:0f:cb:4c:ea:3d:
         f5:84:54:ea:ed:64:b2:0a:b6:a6:b2:04:12:76:33:f9:17:4a:
         4a:50:bf:07:68:ad:1b:75:92:be:44:32:ca:79:17:fe:3d:15:
         8c:37:93:2e:11:d4:51:a4:c4:d5:b7:c5:7d:2e:e3:b1:77:65:
         df:6c:af:d0:b1:72:dd:4b:92:06:64:97:c2:ba:99:d9:f0:29:
         b9:4a:68:a6:4e:84:a5:44:3a:c6:61:20:dd:6c:a3:92:57:36:
         d1:f3:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:42 2025 by rpki-client