Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File:                     8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier:          Q7DJHXiHgjIG6UxvpEbKwJnRM/FFELoWhc+242ObjjI=
Subject key identifier:   0D:B1:5F:65:68:12:B5:85:26:9A:23:EC:71:84:37:B9:28:7B:47:F4
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer:       /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial:       019A22C0AE077ED15FA7D835ACA1031F1A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number:          2E
Signing time:             Sun 26 Oct 2025 23:00:44 +0000
Manifest this update:     Sun 26 Oct 2025 23:00:44 +0000
Manifest next update:     Mon 27 Oct 2025 23:00:44 +0000
Files and hashes:         1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=)
                          2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: g8y8l2u4vGqXt240f4ysWk37ZsgHfTfX7xC+eXg/Zfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:c0:ae:07:7e:d1:5f:a7:d8:35:ac:a1:03:1f:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
        Validity
            Not Before: Oct 26 23:00:44 2025 GMT
            Not After : Oct 27 23:00:44 2025 GMT
        Subject: CN=0db15f656812b585269a23ec718437b9287b47f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:b0:72:17:50:0f:42:a8:9d:83:aa:b9:a7:
                    8d:ce:38:88:59:75:d0:f9:6c:86:bd:99:62:aa:3e:
                    1e:ae:1a:09:7e:64:34:d6:6a:7d:36:12:9c:7f:04:
                    bd:50:02:1a:44:f2:42:8d:77:13:fd:cb:71:18:87:
                    e3:cd:83:aa:a5:7d:75:7a:38:ab:15:75:bd:ba:01:
                    0b:13:f9:e9:1b:b2:2b:39:89:35:aa:e4:23:3e:34:
                    92:da:4d:8a:ee:a0:b0:22:bb:12:a2:83:9e:39:74:
                    b0:32:1e:67:96:ea:22:b2:ab:a1:76:39:60:4a:87:
                    87:19:c3:d5:f2:c1:4b:3b:3d:71:3c:67:6a:9b:e6:
                    98:be:5e:b1:86:f6:f6:ed:79:fc:99:6a:52:56:c8:
                    bf:3d:71:66:36:79:7c:1b:71:2a:90:c4:a0:44:fb:
                    42:17:21:c6:e5:43:be:39:96:27:58:7c:51:45:a1:
                    ac:9f:0d:90:fe:98:23:23:b5:50:2e:51:18:08:15:
                    94:77:65:ac:51:e5:f8:fd:f6:da:1c:0b:29:78:33:
                    c2:1e:64:db:c0:34:e1:96:f5:1a:af:c3:ee:f4:b0:
                    d7:f2:e0:d4:46:34:c6:ae:a3:1f:e4:ce:86:d6:17:
                    35:c5:b7:75:12:6f:b0:74:fe:6e:b8:18:0b:3d:e7:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:5F:65:68:12:B5:85:26:9A:23:EC:71:84:37:B9:28:7B:47:F4
            X509v3 Authority Key Identifier:
                keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:32:ba:a1:ee:74:0a:d0:49:24:13:66:f2:de:62:e4:fd:
         d8:cc:41:8a:ab:87:37:3a:eb:87:0f:95:68:ec:15:a0:43:94:
         48:7f:51:b9:b3:b9:a8:05:5e:1d:87:9c:37:e1:f4:37:ab:5d:
         5f:34:dd:b4:b3:12:bc:0e:0f:c7:b6:f6:5b:c2:64:34:82:56:
         3e:82:c8:be:9c:50:b1:9f:23:6f:e6:71:d6:1b:1c:fe:e0:14:
         3f:ff:10:31:29:63:29:ff:00:66:19:86:86:66:fe:20:cf:7e:
         57:5c:72:d9:2b:71:2b:22:08:a4:fd:7c:3a:ae:d9:ce:a3:3a:
         f5:9a:02:bc:48:0d:b0:8d:ab:7f:66:1c:a0:4c:8a:80:20:d2:
         4c:31:df:8d:84:07:b0:62:72:ec:fb:54:35:a1:23:2b:f1:da:
         6c:85:12:ad:cc:21:28:06:29:3f:9d:4b:f8:b6:09:93:34:38:
         1c:c7:91:57:3e:10:05:04:3c:26:2d:7b:e8:af:af:4f:e6:b8:
         02:19:a6:d2:a2:b7:1d:e6:fb:f8:91:24:51:81:f1:39:6b:c2:
         f9:e9:4c:b3:1c:ab:f6:2f:ce:83:38:34:a4:11:34:9b:d5:34:
         02:72:ef:36:52:ea:c2:ab:83:b5:42:76:e6:49:35:44:3e:00:
         41:50:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:27:47 2025 by rpki-client