Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          tS5vEWRRxSS97ncuOB9B9KU3RXKZ9XRlwsfSQyZBB6g=
Subject key identifier:   F9:5A:7F:29:39:7F:1F:50:77:0E:26:37:E5:2D:C5:D7:C7:11:38:2D
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019A138458B36C7BFD9513771F49850DE4AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          170E
Signing time:             Fri 24 Oct 2025 00:00:31 +0000
Manifest this update:     Fri 24 Oct 2025 00:00:31 +0000
Manifest next update:     Sat 25 Oct 2025 00:00:31 +0000
Files and hashes:         1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=)
                          2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          5: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (hash: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=)
                          6: pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (hash: nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: O2E0NXuNjvBlE/KkrAJVZwIpTGXd7GJKuMH/Ws6brdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:13:84:58:b3:6c:7b:fd:95:13:77:1f:49:85:0d:e4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Oct 24 00:00:31 2025 GMT
            Not After : Oct 25 00:00:31 2025 GMT
        Subject: CN=f95a7f29397f1f50770e2637e52dc5d7c711382d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:23:7e:27:c6:ba:bf:0e:fb:93:a9:9c:91:
                    a6:67:6a:2b:d4:23:39:d2:81:19:a2:5c:a8:65:99:
                    ad:b0:b7:c0:50:78:f3:46:fe:75:71:47:45:91:d7:
                    0b:7b:fe:e3:c0:de:93:2c:de:6f:ab:51:41:34:59:
                    e2:de:1e:81:a2:70:8a:21:f3:7b:06:63:c9:b3:e3:
                    50:c2:6b:1c:83:c9:e7:c6:e6:e0:b3:34:40:cc:a4:
                    d5:18:74:f5:bc:71:f3:db:dc:18:88:e8:0e:5f:1e:
                    13:e1:7a:1e:84:fa:75:b3:9a:2c:a5:e4:5a:8e:2f:
                    52:2a:c0:71:ca:90:5b:db:4f:ee:b5:92:46:85:0e:
                    06:5a:e4:de:91:c2:70:b4:8a:e9:4f:03:9d:59:f8:
                    58:08:37:fd:f4:7a:9d:6f:4f:84:ad:51:7c:4d:2e:
                    77:b2:73:70:bf:9e:23:9d:d7:12:13:8e:53:9e:e3:
                    c1:01:91:6b:9c:65:e7:51:a9:c2:8f:60:f3:9e:41:
                    42:57:f5:37:4b:96:48:3c:7f:4d:20:d2:33:a5:e6:
                    34:a5:5f:f5:95:83:01:0f:78:1b:7e:b4:d6:8c:94:
                    44:b4:1f:c3:b4:5a:75:5d:a3:26:d9:c5:ca:e0:0c:
                    4a:31:b6:50:9f:3c:33:6e:68:d9:cf:b7:80:a8:c6:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:7F:29:39:7F:1F:50:77:0E:26:37:E5:2D:C5:D7:C7:11:38:2D
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:db:ca:22:c2:c8:e5:da:c6:93:1c:5b:1c:a0:71:c4:e8:a9:
         28:ff:11:92:8f:6a:17:5c:84:f5:f6:db:74:aa:92:9b:b3:85:
         9e:61:48:d6:e6:34:f1:83:87:c5:39:39:65:44:3a:d1:c8:2d:
         6f:b8:11:2b:61:cb:50:a9:7a:9c:41:c5:fa:42:b0:a5:59:f0:
         6a:af:e5:18:77:75:12:54:dd:d8:4f:91:af:96:b4:ef:28:54:
         5a:9b:f1:64:0b:5a:d6:c4:54:25:3f:92:42:67:78:ea:15:51:
         b3:95:5c:87:c0:55:9e:8b:2b:70:81:ec:96:d0:6f:58:bf:c1:
         ed:c2:72:60:41:7e:26:ad:c5:29:33:68:b5:31:97:5e:a0:a1:
         51:44:73:f1:f6:ac:ff:98:71:47:63:b6:de:a9:4d:e3:3f:a9:
         f7:30:53:aa:25:f9:ba:1e:1d:dc:f0:45:45:94:86:c0:a8:51:
         8b:cb:d0:1b:32:92:aa:f9:34:11:88:9d:89:af:ac:88:d3:84:
         0c:59:d3:fb:64:af:f5:46:70:66:4a:9f:d2:44:26:bd:73:58:
         2c:dc:dc:f6:9a:c0:5d:5f:d2:dc:d1:52:59:25:9f:49:f4:fd:
         5b:f9:04:16:fd:69:c0:c7:69:23:7c:6f:6c:4e:1a:f9:0f:92:
         0c:13:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:30:18 2025 by rpki-client