Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          RPZSeaFkinE6jRRIeSQP+AKSNyOvvmTMj7K6rgCnwKI=
Subject key identifier:   E8:CE:BA:A5:C0:BB:30:60:EE:69:F6:69:C4:A7:4F:0B:72:62:D5:6E
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       019A22F7EB1FC4285B0057ABB474D24979FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          1107
Signing time:             Mon 27 Oct 2025 00:01:04 +0000
Manifest this update:     Mon 27 Oct 2025 00:01:04 +0000
Manifest next update:     Tue 28 Oct 2025 00:01:04 +0000
Files and hashes:         1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: 6OFEfLvfiSLKRjADIhqKTBWU6EUwuoCBq0GDnU/K5QI=)
                          2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:f7:eb:1f:c4:28:5b:00:57:ab:b4:74:d2:49:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Oct 27 00:01:04 2025 GMT
            Not After : Oct 28 00:01:04 2025 GMT
        Subject: CN=e8cebaa5c0bb3060ee69f669c4a74f0b7262d56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:5a:33:63:e1:5a:86:17:1e:f6:d7:02:67:
                    26:f8:eb:ae:7b:ec:6b:0c:0a:08:06:c9:b9:26:31:
                    b8:ce:83:9d:72:cb:ed:06:b3:1f:75:b2:8f:8d:4b:
                    1b:fb:66:d2:ad:96:1d:94:57:e2:71:2a:9f:7e:f2:
                    c3:87:17:68:15:1a:c6:0d:30:2e:98:74:c9:e6:35:
                    09:19:ae:af:b9:13:5c:85:e0:7b:ca:66:04:06:15:
                    d6:3f:98:6b:68:57:e7:2a:9f:2c:f6:6e:6a:6a:f6:
                    41:d3:ed:45:23:b8:58:64:b4:24:d4:87:5d:79:5f:
                    f1:29:ec:5d:e5:a8:1d:f3:44:1e:62:55:60:c5:b6:
                    f8:48:6f:42:51:d3:aa:1b:c1:f9:85:eb:59:59:78:
                    6d:62:e7:78:17:58:81:68:e4:4a:1f:22:97:5e:f6:
                    63:4c:e8:cd:ce:fe:72:5a:d3:ef:3f:ff:12:95:a2:
                    36:ce:53:68:55:74:64:1a:6f:94:dd:27:08:70:31:
                    54:9a:2b:10:7b:88:b1:de:c1:98:f9:28:e6:fa:bc:
                    be:6b:48:e5:17:dd:97:53:4b:a9:98:4a:68:3c:05:
                    e7:7d:8d:0a:bd:bd:b9:68:fe:54:85:ef:b7:dd:d8:
                    10:bf:57:91:18:09:31:b1:52:19:e4:e7:1d:15:29:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:BA:A5:C0:BB:30:60:EE:69:F6:69:C4:A7:4F:0B:72:62:D5:6E
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:a5:8a:bd:80:62:66:21:25:25:7c:96:5d:f0:c9:9f:0f:
         2d:04:56:17:54:fa:aa:ab:1d:ab:2e:b7:a8:84:5d:bb:b4:21:
         28:3c:0d:5d:c2:e7:ca:2b:e8:9f:d0:da:11:b6:ba:af:6f:8a:
         e8:97:77:66:00:44:54:43:e0:f2:32:38:16:0b:e5:5e:60:3f:
         57:47:3b:3f:19:6c:a5:7f:15:ca:5e:65:70:25:6b:dd:2d:d4:
         35:3e:d2:dd:ea:fb:94:10:61:b3:c5:d2:18:3a:9a:4c:18:a9:
         93:c9:d7:26:ef:c0:49:10:f7:67:c3:06:bc:47:f7:ec:28:2a:
         79:8d:6b:52:29:ef:ab:26:3f:c1:ee:42:ea:01:09:89:36:23:
         8e:9d:52:ff:71:5f:64:f8:1d:0d:ba:0b:b8:8e:47:67:09:9d:
         29:3d:1b:f8:f9:e5:cc:69:08:ce:2b:d6:1a:ea:32:e6:d1:6f:
         1a:c1:c0:da:42:4b:1d:8b:76:6e:55:e5:39:75:6c:a7:b5:34:
         3b:b6:bb:e0:36:9a:be:91:32:bd:23:3c:ad:b5:d8:79:85:c0:
         18:32:65:fa:e4:1c:2b:5d:08:14:e7:fa:77:29:b7:c6:32:82:
         a0:59:2a:dc:46:e9:54:fe:73:94:ca:bc:95:a2:32:67:15:d8:
         88:24:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:58 2025 by rpki-client