Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          h84rR2O/M8vKV33JFTCqc6sXN0ChFpqJePOt0HryO3U=
Subject key identifier:   4F:2D:91:9A:C4:BC:DA:B9:32:42:85:C9:A7:6D:64:3B:78:EC:04:BF
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019A22F78E720D0A09BA51DE6B1826BD0848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          164A
Signing time:             Mon 27 Oct 2025 00:00:40 +0000
Manifest this update:     Mon 27 Oct 2025 00:00:40 +0000
Manifest next update:     Tue 28 Oct 2025 00:00:40 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: WLdiNMKrjdCpq76YgY5HZv+mdztGgdyBZ8dRPmpA5ho=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:f7:8e:72:0d:0a:09:ba:51:de:6b:18:26:bd:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Oct 27 00:00:40 2025 GMT
            Not After : Oct 28 00:00:40 2025 GMT
        Subject: CN=4f2d919ac4bcdab9324285c9a76d643b78ec04bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:c9:73:9a:8f:68:94:0b:b6:54:f4:5a:1c:
                    b3:f9:ea:2c:43:ff:4e:2f:c6:4d:2a:1c:b1:07:b6:
                    e6:9e:75:fd:dc:81:c3:44:2f:ec:87:e9:24:bc:ae:
                    6a:9d:af:21:49:05:6b:b5:5a:b5:6a:00:3f:e9:42:
                    3a:4e:2b:19:7e:64:bc:b6:a9:97:30:7c:6e:ed:dd:
                    d7:ed:60:79:09:92:7f:b9:b6:f6:97:9b:1e:ab:da:
                    cd:7b:af:84:bd:da:7a:14:34:a3:3e:37:3f:29:6c:
                    be:d5:93:16:be:e9:9d:96:8d:46:b0:b4:46:00:19:
                    1f:22:f5:7a:e0:14:5c:6a:66:ef:20:8c:a9:34:0a:
                    8f:d0:e2:13:27:ff:fa:ad:0c:36:20:fe:d5:d0:14:
                    8b:ec:ab:89:a6:81:da:fd:b5:51:c5:dd:94:53:47:
                    17:83:91:e2:19:b0:26:7c:18:d6:07:3b:67:03:b6:
                    ee:59:0b:ce:03:f8:5e:0a:a9:35:39:5a:f4:8a:15:
                    9e:29:99:91:81:02:e7:29:84:fd:0f:88:3a:bd:95:
                    64:14:91:87:33:dd:bc:20:da:95:53:2f:44:cc:f9:
                    83:c3:bd:64:43:91:88:bc:b0:52:35:4d:d4:55:a3:
                    a5:0d:0a:4a:be:2f:ca:ff:49:c5:21:d2:4d:68:71:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2D:91:9A:C4:BC:DA:B9:32:42:85:C9:A7:6D:64:3B:78:EC:04:BF
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:51:ca:33:8b:1d:60:6b:d0:a0:d2:2f:00:09:57:f3:24:
         5b:b1:c5:1c:64:d5:f7:d9:9a:06:2e:8b:14:78:01:31:b9:35:
         7a:2d:b4:36:86:75:86:93:76:97:71:27:07:51:ca:26:31:e2:
         e1:82:b2:b7:16:2e:93:2e:1e:0e:ea:f2:dd:88:81:ec:c9:ca:
         76:79:2c:b7:71:17:d7:8c:ff:14:d1:c5:b6:c0:f4:80:7e:ed:
         81:b5:d4:97:bb:8c:7e:4f:f5:34:bc:5a:c3:bf:27:b8:a9:c9:
         37:14:69:e8:17:57:aa:de:4b:18:81:2d:b4:d5:90:82:e1:af:
         40:86:91:0f:61:51:bd:2c:d4:11:0b:05:05:90:94:32:ba:7c:
         b5:0e:c0:48:40:b2:f4:27:04:57:15:20:97:42:94:de:71:55:
         f1:5d:ed:a1:52:62:21:6b:14:f6:06:3c:79:84:37:61:17:0b:
         1c:1d:ed:16:a7:e0:9f:8b:4c:eb:0a:6d:b4:dd:0c:c6:0c:c3:
         67:2e:87:e5:a4:f2:6a:31:7b:a1:97:6f:20:ea:4e:38:d4:d9:
         b8:35:46:0e:e3:d2:87:5f:43:2f:5e:46:f9:dc:3a:c2:62:aa:
         a5:63:3b:27:01:6f:98:f5:75:0f:b1:1e:d1:10:b6:c7:5d:fd:
         a8:07:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:38 2025 by rpki-client