Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          c8Y8shq6bT0lqIQGeOvHUseZ9QVd8C4bbSXcruu/Ivs=
Subject key identifier:   5B:F7:F5:23:F6:DD:4D:B9:FB:DC:71:10:24:74:3F:13:94:88:38:98
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019A1CF53A546D67009EFB1C01AA476358EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          1452
Signing time:             Sat 25 Oct 2025 20:00:24 +0000
Manifest this update:     Sat 25 Oct 2025 20:00:24 +0000
Manifest next update:     Sun 26 Oct 2025 20:00:24 +0000
Files and hashes:         1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=)
                          2: JcHfeJjlV--266gVunBono2FBL8.roa (hash: 2aTzeGR10hHIdC8F6ToLHNpA36FVSTfHDmf74LWIj/E=)
                          3: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=)
                          4: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=)
                          5: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: LME60NxIOmQ8R8p2I11uoQhBU6DxaqkdbOM9iWrN+LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:f5:3a:54:6d:67:00:9e:fb:1c:01:aa:47:63:58:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Oct 25 20:00:24 2025 GMT
            Not After : Oct 26 20:00:24 2025 GMT
        Subject: CN=5bf7f523f6dd4db9fbdc711024743f1394883898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:9f:a3:f5:07:8d:bb:54:4d:16:f1:ed:33:
                    c9:87:38:6c:fe:23:75:e8:e7:04:2f:1f:f2:79:41:
                    41:1c:8d:7c:57:86:f4:d4:cc:f2:14:60:b3:46:2e:
                    10:cd:15:92:52:2a:6f:4a:38:84:19:bb:5c:f0:dd:
                    12:fa:fc:fa:7c:45:3f:24:0a:ad:83:d8:d2:2b:2c:
                    8a:31:86:63:06:a8:ac:1a:65:3b:7b:19:a3:b9:17:
                    48:fe:8f:b6:5e:9f:a6:d8:33:aa:54:8b:2e:21:50:
                    d0:b9:91:3a:7a:12:5b:57:92:0a:03:47:17:91:cd:
                    87:5e:4d:72:8e:55:3f:e0:db:5b:9d:6d:88:73:30:
                    ff:3a:f0:e4:7d:01:f4:43:24:27:d8:fc:8c:ef:75:
                    71:e4:a8:6a:d5:eb:8b:11:65:46:be:4d:ba:50:bf:
                    7c:b7:4a:90:5b:e8:cf:fd:a3:12:92:67:6a:d0:17:
                    5d:27:a9:01:fa:22:e8:e6:e9:32:39:a5:76:7b:e5:
                    ed:03:7c:ea:7f:66:cb:30:65:da:0c:09:bc:18:87:
                    24:e3:bd:67:08:eb:89:5b:23:1a:d1:f7:ab:2b:72:
                    07:40:4f:74:9a:7e:f9:78:d2:42:60:07:e4:88:58:
                    cd:02:55:d6:34:95:2d:77:5a:8d:19:8a:4a:13:db:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F7:F5:23:F6:DD:4D:B9:FB:DC:71:10:24:74:3F:13:94:88:38:98
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ff:17:18:31:21:33:15:13:05:8d:cd:3e:b1:9a:ad:ae:16:
         a1:59:fa:f0:2c:c9:71:7d:2f:3b:41:49:7b:82:46:26:31:fd:
         22:50:cf:7d:e6:c4:86:7b:53:3a:fa:13:48:b8:cf:6c:0b:b3:
         18:b2:62:64:45:2b:ed:26:91:25:f6:ef:10:20:de:1a:ac:ab:
         60:79:9f:6a:e0:3c:53:d2:d2:ee:c2:0d:76:09:f1:4c:cd:50:
         6f:88:1c:63:c9:c7:b2:0e:e2:0c:75:eb:e0:42:d3:20:75:83:
         1e:34:60:91:4f:7b:6e:b5:69:40:e8:59:cf:37:63:fb:84:93:
         22:02:7c:cd:9c:59:36:65:30:cd:3c:0e:cd:fb:d2:3a:6b:6c:
         26:dc:99:3d:ca:9b:c8:4c:f6:f7:80:b8:78:7d:1f:fa:16:94:
         8e:e3:e4:e6:64:98:f3:b1:26:5d:11:ba:7f:ba:27:83:ad:e1:
         35:b5:8d:f4:e1:6e:52:3e:c2:55:ce:af:67:53:b0:76:b7:c9:
         2f:77:0f:ab:3b:ec:c1:9c:5e:ca:8f:30:81:9d:92:82:b2:c3:
         71:3e:03:58:aa:2a:76:2e:f5:ff:77:96:63:c5:21:79:6b:13:
         66:eb:2e:33:0b:e1:f1:2d:bc:0e:cf:a0:99:1a:27:4e:47:47:
         07:3a:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:46 2025 by rpki-client