Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          XNwXYyabEpl2b/KF8gUzVJk7AedxJRstAmmpvRWzfbE=
Subject key identifier:   C3:8E:3E:2C:B6:23:2B:14:A8:71:96:6C:23:42:01:55:F7:39:2F:7C
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       019A1797FDEB266191BF917CBD11E1C0A324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          09BF
Signing time:             Fri 24 Oct 2025 19:00:28 +0000
Manifest this update:     Fri 24 Oct 2025 19:00:28 +0000
Manifest next update:     Sat 25 Oct 2025 19:00:28 +0000
Files and hashes:         1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: fTM9llK3GOAlNYTjPFVHXBXUynp3lvwCV6TeeOAWXQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 15:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:17:97:fd:eb:26:61:91:bf:91:7c:bd:11:e1:c0:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Oct 24 19:00:28 2025 GMT
            Not After : Oct 25 19:00:28 2025 GMT
        Subject: CN=c38e3e2cb6232b14a871966c23420155f7392f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:a1:1d:6f:52:38:a0:08:99:70:99:c4:55:
                    5c:e4:5a:98:32:26:89:67:94:11:01:d2:76:7b:a9:
                    5a:7c:e2:cd:89:03:d1:5d:2f:de:af:75:d7:98:cb:
                    c8:94:2c:09:1d:da:7f:7a:1c:04:75:bc:6c:fc:f0:
                    c0:45:2e:53:6e:76:b5:c4:9c:52:2c:bb:18:b5:51:
                    c5:f6:82:fa:7c:23:19:ff:b6:75:aa:bc:16:aa:d8:
                    ca:c4:93:f4:d0:e1:a2:64:80:e4:81:ee:e7:ce:67:
                    3e:ab:6d:a7:cd:32:50:72:a3:a9:a5:7f:3f:be:a9:
                    85:cd:5d:0f:d0:d5:dd:3a:77:7f:37:17:85:94:b1:
                    76:c3:b6:ae:65:d5:2a:e2:b5:96:38:c6:e7:98:97:
                    a2:a1:1f:67:ae:7d:30:34:5e:8c:3e:9b:c2:e0:43:
                    06:81:42:94:1b:24:57:13:c8:65:85:44:de:28:30:
                    cc:fc:7f:d1:e9:70:ab:01:9c:9f:01:0f:67:e5:66:
                    af:84:35:4d:40:2f:0e:62:b2:41:14:17:f4:28:71:
                    bc:95:25:05:80:9d:a1:87:65:59:e8:29:07:66:25:
                    45:23:66:78:f4:d3:7b:c3:d4:8f:28:3a:58:82:29:
                    b1:d5:50:4d:ea:5a:26:60:d7:a4:fb:4e:08:4e:11:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:3E:2C:B6:23:2B:14:A8:71:96:6C:23:42:01:55:F7:39:2F:7C
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:87:d6:76:c9:78:52:ab:43:99:10:0a:1a:75:85:d0:a9:
         91:98:18:b1:4b:b6:73:6b:ee:c5:b1:2f:37:27:fe:c8:e1:7a:
         06:f6:d9:fd:32:75:8e:0f:81:db:ef:da:2e:97:04:de:8c:d4:
         21:ed:ab:25:60:92:c1:cd:db:f0:88:59:dc:97:4c:3d:ce:29:
         7a:f6:78:8e:d4:98:4a:c8:6e:aa:bb:cc:8f:4d:db:e8:cf:4e:
         52:f0:14:9f:c0:b0:80:80:32:2a:13:e4:97:1e:59:05:71:a4:
         72:d8:75:fa:b7:99:eb:fa:eb:6a:dd:e5:3c:39:0d:63:ff:e2:
         73:5a:76:75:ab:e0:25:df:2d:db:bb:15:00:45:19:e7:fc:a9:
         27:b2:ef:d2:c7:87:76:07:48:4b:ed:fe:5e:56:78:df:ef:70:
         b9:b7:a4:91:53:2c:b7:14:ef:7b:7b:30:ae:4f:0f:fb:d0:81:
         3d:8c:af:05:ba:7f:c6:74:32:a2:08:d5:a4:91:95:de:f1:f2:
         50:73:87:ab:05:65:94:7b:35:ec:df:ab:55:b6:26:c4:c9:ca:
         3f:83:8c:31:26:08:05:4b:7a:92:db:d1:1a:1a:e8:f2:91:c8:
         7e:d1:75:31:af:52:ca:d2:b2:a2:6d:8e:76:46:9a:19:21:c2:
         61:93:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:20:30 2025 by rpki-client