Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          zSQ7vbaFWy7AOAQnkzwqyGT4+szg/AHiS473S06jq1Q=
Subject key identifier:   8E:44:9A:17:9E:33:B6:C7:13:A7:0A:68:99:7F:D1:A8:48:B4:7D:0E
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019A7112FEDCF187263E5954475D7B976C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          15D1
Signing time:             Tue 11 Nov 2025 04:01:01 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:01 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:01 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: gRPYqNELCWaWNbavbbUhNuNMcAMf76X+yIMmwvN/mEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:12:fe:dc:f1:87:26:3e:59:54:47:5d:7b:97:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Nov 11 04:01:01 2025 GMT
            Not After : Nov 12 04:01:01 2025 GMT
        Subject: CN=8e449a179e33b6c713a70a68997fd1a848b47d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:2b:a6:73:68:a0:43:9a:38:4e:14:d8:8c:
                    04:bd:95:fa:47:bd:69:59:f2:5b:0b:7d:00:a4:25:
                    11:00:fa:5a:20:52:8c:f5:e9:ea:b6:76:40:07:b1:
                    c4:03:f7:e0:3b:23:12:0e:45:13:1f:e0:b6:49:96:
                    82:6d:25:82:ee:90:29:17:3f:4f:a1:04:aa:ca:2c:
                    5c:c2:86:e7:ac:3f:5a:09:88:40:d8:70:22:82:2d:
                    51:28:b0:4f:90:61:e9:29:af:08:39:40:55:3a:54:
                    20:e2:f4:f7:3a:3e:2b:12:c2:63:59:02:4e:04:3d:
                    1a:d8:13:c2:d0:c2:f7:cf:d4:00:18:07:71:de:89:
                    a7:4e:51:31:47:c9:58:0a:50:93:44:2d:a8:51:15:
                    64:2c:fc:de:94:d8:8c:01:8f:79:c6:06:de:b2:b1:
                    99:38:84:d9:18:9a:9e:2e:02:cb:39:c3:41:17:5b:
                    ad:15:85:54:d7:d5:a4:c3:28:c6:01:45:32:a9:cd:
                    88:4d:0c:65:15:5f:80:77:e8:2d:97:38:66:d5:65:
                    7e:6d:86:d6:70:06:bf:02:20:77:61:3a:e4:ed:37:
                    ba:81:f1:6a:27:9b:a6:6d:80:20:54:05:39:4d:5c:
                    75:23:22:de:cd:c4:8b:8c:47:07:85:09:22:f6:41:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:9A:17:9E:33:B6:C7:13:A7:0A:68:99:7F:D1:A8:48:B4:7D:0E
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:ee:53:98:53:9e:3c:0b:90:a8:99:bb:03:d4:d8:13:45:
         6c:f0:0d:c8:2d:45:29:3f:05:97:8b:d7:48:28:bf:aa:a3:6e:
         9f:40:85:e5:ed:15:99:c1:b6:85:1d:c8:1d:e6:fd:7b:42:16:
         c9:a5:67:1d:b8:02:dd:63:e0:39:b9:0a:40:1f:7b:05:cf:0b:
         d9:c8:45:af:14:75:cd:de:f7:81:ad:43:66:77:e5:29:a7:13:
         d6:f4:f0:2e:5f:a0:1d:60:f4:6f:84:27:3c:f6:44:0d:d0:d7:
         bf:e4:32:84:ff:6b:2c:56:2c:aa:ef:15:7f:6a:a8:7a:44:4c:
         77:dc:9c:6c:5f:8d:4d:16:db:78:b0:92:34:10:fb:97:3d:c8:
         83:d2:12:20:bf:b2:c3:0e:b3:69:a2:5d:d6:65:0b:32:d1:41:
         15:d0:12:35:04:06:d4:85:b5:11:89:24:6c:c0:03:52:7e:18:
         2b:ab:b7:08:c3:9e:46:ec:cc:c0:68:1c:a8:c1:0b:69:20:88:
         66:19:49:39:de:83:09:f4:90:1e:fb:6b:3f:78:18:f2:99:43:
         d1:c6:20:6a:f1:70:61:26:f9:f6:87:37:8c:a1:a2:3c:a8:df:
         02:b6:a8:d8:a3:3d:fe:0c:6e:5b:b8:07:01:a8:94:fc:6d:4c:
         f7:8e:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:17 2025 by rpki-client