Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          lWE8uo3S9CIHHuVf74hNUvWEJXQmFCl3KaOijwDH+x8=
Subject key identifier:   07:67:93:42:2C:8E:7E:96:70:F6:F3:3B:0C:B7:19:A0:A8:C3:AC:D5
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       019A21E4B72E8CA7CC55680C0D6D3290B782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          0CFD
Signing time:             Sun 26 Oct 2025 19:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:28 +0000
Files and hashes:         1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
                          2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
                          3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
                          4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: 6Z2X1TyFT2narbvWhTheT1kgLB/DqXvSQUST0Y8JxLg=)
                          5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
                          6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:b7:2e:8c:a7:cc:55:68:0c:0d:6d:32:90:b7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Oct 26 19:00:28 2025 GMT
            Not After : Oct 27 19:00:28 2025 GMT
        Subject: CN=076793422c8e7e9670f6f33b0cb719a0a8c3acd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:fe:db:b1:62:98:3e:21:bf:be:e1:78:1f:
                    f1:c6:b8:b4:fa:4f:6a:0e:2c:0a:4c:57:e1:ff:9e:
                    24:97:44:69:d7:0a:12:ee:f9:76:b8:34:b4:34:8f:
                    b5:ec:75:54:2f:88:5d:71:0a:59:9d:d7:6b:a4:12:
                    28:a6:e6:88:ef:9e:7a:42:2b:95:6d:46:f4:3b:1b:
                    2e:20:01:d3:8a:73:87:ab:1d:af:ee:09:1f:50:8c:
                    89:82:70:31:43:3b:9b:26:10:0d:ef:f9:93:70:f2:
                    14:b5:89:8a:ca:1a:0c:f1:fa:85:bc:9e:90:21:ff:
                    8b:0d:3c:72:73:93:4d:ad:b0:08:0a:57:7f:2c:5f:
                    d7:bd:8c:c0:26:4f:5d:76:af:a4:67:a5:02:b7:8d:
                    a1:bf:d4:a0:e1:2d:85:9a:06:9c:23:67:9a:cc:78:
                    74:3f:11:2c:57:4f:9d:43:dc:59:76:a7:d7:46:8f:
                    a7:4c:47:37:16:7e:8d:a4:30:8a:a3:47:92:8e:58:
                    cc:1c:82:a7:32:0a:93:27:a8:5f:0c:68:ac:12:7c:
                    0c:41:15:c3:09:7a:b2:1c:eb:14:5b:60:11:00:bd:
                    68:25:c1:71:f0:a0:2e:df:a9:f0:21:65:98:40:18:
                    31:34:4a:c6:b2:49:17:8d:0b:7b:93:e3:3d:df:69:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:93:42:2C:8E:7E:96:70:F6:F3:3B:0C:B7:19:A0:A8:C3:AC:D5
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:06:ea:03:77:5b:9f:a1:5b:b4:da:a9:35:1b:c1:c6:0f:58:
         4a:ad:f0:eb:42:0c:ac:2e:3f:01:30:b1:c5:c8:a6:45:a5:e1:
         9f:f2:2a:21:11:3d:ec:5b:52:81:f2:5b:fc:35:af:6b:d1:1a:
         68:47:3a:a0:53:48:0d:f9:82:05:d4:1b:7c:52:42:ac:34:6e:
         d3:01:4f:8c:cf:6e:ef:0e:87:e3:d2:7b:0e:ca:ce:2f:76:29:
         5d:08:9c:ee:10:d3:e5:34:a7:68:ff:da:8e:c7:a5:5c:78:53:
         ff:de:4f:58:2e:32:43:f7:fc:8c:b2:92:c5:a8:a7:71:37:02:
         6e:95:77:7d:e8:35:9d:30:bb:cd:9e:93:44:13:4e:d0:e6:78:
         25:28:60:26:55:ae:5e:88:76:2a:7b:10:35:51:cb:cf:0e:59:
         74:4f:85:66:84:f1:2a:24:47:0e:1f:c7:2e:ef:eb:c9:d7:b9:
         b0:04:e3:cb:3e:04:c6:42:fa:fd:f8:3a:92:b7:44:08:61:76:
         74:4f:eb:31:96:64:5b:81:19:88:60:f9:6a:b5:4f:ad:55:5a:
         2d:29:6f:f4:40:23:7e:96:fd:c0:59:d9:54:f8:6c:ac:81:af:
         57:fb:26:f8:44:cc:37:bb:dc:ad:8e:4d:35:7b:97:6a:42:5c:
         48:7e:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:16 2025 by rpki-client