Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
File:                     0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json)
Hash identifier:          ZGudOZw9pB91vNsunMceB7au3vdOfdnYRJv5VbXofiM=
Subject key identifier:   6A:F0:EC:0A:7F:63:6C:F9:81:3A:72:88:81:5D:13:F5:D2:8D:9F:7C
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Certificate issuer:       /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial:       019A89894B4A7250816769CBD6028F754D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
Manifest number:          124E
Signing time:             Sat 15 Nov 2025 22:01:07 +0000
Manifest this update:     Sat 15 Nov 2025 22:01:07 +0000
Manifest next update:     Sun 16 Nov 2025 22:01:07 +0000
Files and hashes:         1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: xKzDg8B5Q1uzWw+RsqhIslBKb3XCh1Lf10U5h1y2bJU=)
                          2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=)
                          3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=)
                          4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=)
                          5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=)
                          6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=)
                          7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=)
                          8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=)
                          9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=)
                          10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=)
                          11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Nov 2025 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:89:89:4b:4a:72:50:81:67:69:cb:d6:02:8f:75:4d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
        Validity
            Not Before: Nov 15 22:01:07 2025 GMT
            Not After : Nov 16 22:01:07 2025 GMT
        Subject: CN=6af0ec0a7f636cf9813a7288815d13f5d28d9f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:48:9a:1b:aa:5a:d7:98:31:62:56:02:6f:
                    37:28:6e:39:f5:21:ec:be:a0:e8:09:ef:8b:6b:67:
                    9a:f3:af:52:3c:5c:12:82:9d:9d:35:63:15:10:47:
                    71:26:40:94:eb:aa:55:c3:7b:85:63:c0:76:0a:61:
                    2c:f1:97:f0:cb:1d:00:f7:79:e6:0a:5e:4e:87:04:
                    2b:ba:54:c1:5e:72:8a:92:d3:61:18:eb:97:2a:3d:
                    05:77:73:2b:66:d7:53:2f:c0:d0:19:1b:42:bb:c8:
                    84:dd:c3:6b:00:b8:c9:b9:30:08:4a:a3:c0:22:8d:
                    d2:45:66:7d:b7:97:0f:58:4f:e7:e8:23:4e:0c:4a:
                    13:5a:3d:02:6b:61:b7:18:3a:a3:b1:6b:35:c8:84:
                    6b:8f:57:13:44:bf:8a:ce:ac:89:bb:c3:07:1d:fe:
                    4a:bd:c9:3a:91:b1:f8:b2:27:16:d2:47:9a:fd:03:
                    e4:92:cd:c3:b7:34:a2:73:cb:1b:41:ff:6c:d9:1c:
                    33:78:03:8c:be:83:36:80:75:b1:a3:a7:aa:67:c4:
                    47:dd:b0:a9:de:80:73:de:cf:36:c7:b5:7c:42:c6:
                    4a:8d:2e:c6:ab:f9:40:02:36:43:76:b5:c2:b0:e8:
                    6a:45:ef:16:48:37:cb:3a:67:0c:bb:b9:20:46:33:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:EC:0A:7F:63:6C:F9:81:3A:72:88:81:5D:13:F5:D2:8D:9F:7C
            X509v3 Authority Key Identifier:
                keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6b:08:21:75:aa:ea:5e:19:e3:9a:6b:e6:e3:4d:ab:59:f7:
         92:84:f0:07:6d:29:02:d3:c5:65:63:2c:ae:2a:a0:62:e0:d6:
         f1:59:c3:c6:d9:bd:66:34:dd:21:18:8b:1b:ae:de:37:0f:d5:
         f1:72:13:4f:e6:a9:e4:cd:bf:c8:25:f0:f2:e6:75:34:2d:f0:
         85:fe:97:c4:0a:71:6b:ab:94:1e:43:fd:5e:2f:a0:1b:2b:54:
         15:c4:34:6b:94:88:c6:78:1f:c9:54:82:c8:82:7b:65:f9:85:
         54:00:a7:05:2a:03:82:06:af:55:c7:9b:8b:59:c7:08:de:8a:
         d8:ae:bc:00:af:3d:06:38:39:3e:56:8d:25:d4:97:4c:8a:46:
         4c:a2:1e:9c:03:97:ab:c5:eb:4e:c4:88:44:3d:1b:77:81:49:
         e7:b1:99:87:e4:c9:bc:f3:33:ea:ae:31:67:1e:16:61:e2:9c:
         61:42:47:b8:58:44:99:35:8a:8b:a5:12:91:fe:43:6f:7f:7a:
         7a:af:42:3b:56:ec:84:30:b8:09:55:55:2f:8f:b4:c0:3e:fa:
         5a:87:38:e4:00:f5:6f:90:fa:e6:b7:87:ea:89:5b:ab:e2:7f:
         04:ee:fc:7b:6f:67:78:44:74:30:64:b9:76:43:d9:4e:82:ed:
         4e:d9:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 07:13:12 2025 by rpki-client