Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File:                     ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier:          VLOjfyMh0RkB0sw1ThNSkgA62oN3GaeV9sa1dphub4Q=
Subject key identifier:   36:35:A2:B0:10:BA:77:97:5F:66:86:49:EF:F6:60:06:26:80:BD:30
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       019A1CBED17D91325670C17E4BE9CF69B95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number:          1300
Signing time:             Sat 25 Oct 2025 19:00:58 +0000
Manifest this update:     Sat 25 Oct 2025 19:00:58 +0000
Manifest next update:     Sun 26 Oct 2025 19:00:58 +0000
Files and hashes:         1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=)
                          2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=)
                          3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: XFtPoF6DFqFa1CgqVarQGTy9mx/rUzmnFF/RhL4e2s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:be:d1:7d:91:32:56:70:c1:7e:4b:e9:cf:69:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Oct 25 19:00:58 2025 GMT
            Not After : Oct 26 19:00:58 2025 GMT
        Subject: CN=3635a2b010ba77975f668649eff660062680bd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:77:9c:e0:92:4a:e8:65:58:39:fc:2d:fe:
                    1a:40:e6:a6:51:41:43:06:2e:e4:a9:17:a8:82:e9:
                    e2:53:ac:4b:fe:48:81:da:c5:49:48:12:3a:45:d6:
                    d2:51:97:9f:fc:bd:39:0a:2b:52:49:32:8e:d2:15:
                    01:bf:34:c5:5a:00:5b:c0:e6:1b:11:ec:4d:52:69:
                    7b:4c:3e:c8:a8:47:c6:0d:f5:7a:75:90:f2:5f:1e:
                    cf:44:28:ef:1a:fa:fb:9c:92:c8:fd:e1:cc:01:2a:
                    e8:bb:bb:6f:44:03:a9:19:40:50:a9:4e:ac:fd:87:
                    6f:2c:69:1e:26:12:0a:4f:4a:09:ac:42:21:ed:6d:
                    18:0d:3c:a5:96:31:3b:0b:1d:81:8f:89:fc:8b:0f:
                    0c:59:99:e4:3b:7d:11:7e:c7:cf:db:22:e8:4b:99:
                    e6:bf:f0:7f:c1:79:92:86:6a:db:39:5c:2e:e3:3d:
                    78:b2:36:d5:dc:f7:f3:ba:b3:b9:fd:2d:44:ae:5c:
                    03:e3:b0:64:52:a0:19:fc:9c:fb:ce:8e:be:7a:c5:
                    ad:a7:32:21:bf:1e:01:f2:db:5f:0b:d8:de:d4:66:
                    4d:79:c0:68:97:12:8b:8b:72:3c:44:a3:bb:d4:a9:
                    5f:2c:24:08:e9:d4:dc:77:74:39:76:f6:3a:af:7e:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:A2:B0:10:BA:77:97:5F:66:86:49:EF:F6:60:06:26:80:BD:30
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f5:e4:a3:6c:71:9f:f5:cf:e8:fa:77:dc:cc:a9:77:29:0c:
         ab:14:67:a4:ef:c2:a3:ca:86:54:0b:10:67:57:22:18:e2:25:
         60:f2:c1:f3:00:08:c2:a8:f8:ac:57:33:34:84:51:f7:1d:56:
         50:d2:68:cb:c7:38:2b:9b:11:0e:d5:43:62:98:e4:ab:23:08:
         fb:9f:ee:80:50:b5:37:d9:3d:dd:66:0a:71:54:27:5f:4e:39:
         6a:f4:3e:cd:20:17:8d:b0:8a:6d:c9:f3:3c:46:98:3f:fa:04:
         bd:88:8e:a2:03:26:ac:40:15:23:0e:c6:35:5c:f1:27:3a:7d:
         85:26:c2:cd:83:c4:4a:fb:0c:11:21:1a:a7:4b:62:a7:69:da:
         14:19:34:20:ad:1f:ae:48:d0:b2:30:cb:db:fc:8f:3f:68:0e:
         c8:21:bb:a7:5d:30:5e:37:6d:f2:45:31:16:e2:f8:54:1c:2f:
         4a:ce:9a:07:8a:08:c2:57:b2:7b:c8:ff:c8:a5:e8:e9:66:6e:
         76:53:46:3f:3d:de:06:a1:4f:cb:c6:f9:8b:23:2b:4e:83:40:
         b2:e4:e1:13:66:a1:d7:b7:59:92:66:21:aa:e4:b6:54:41:a7:
         27:0b:e5:eb:d5:b6:cd:4b:11:6f:c6:e5:66:a5:6c:fc:13:f4:
         a6:07:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:41:30 2025 by rpki-client