Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          9bxwQAIsg+kmZK+OZ9YVChOPzPfQIk+dhQ0llxv3Ym8=
Subject key identifier:   8F:33:89:3C:4A:A4:F5:D1:50:2A:F1:72:23:E2:66:02:64:C1:76:CA
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019A221B4EE1A848A9D51B9A6FE94316C51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          16F6
Signing time:             Sun 26 Oct 2025 20:00:05 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:05 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:05 +0000
Files and hashes:         1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
                          2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
                          3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: MfQXXlIll+gYKnq0Nm9xMRYYIcGxEN4HMgrH0EBX7QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:4e:e1:a8:48:a9:d5:1b:9a:6f:e9:43:16:c5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Oct 26 20:00:05 2025 GMT
            Not After : Oct 27 20:00:05 2025 GMT
        Subject: CN=8f33893c4aa4f5d1502af17223e2660264c176ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:aa:44:40:4f:5c:2b:66:70:24:b0:e2:1d:
                    55:da:ff:bb:9b:a4:29:b1:49:1a:c7:06:15:eb:0d:
                    07:c1:91:c2:17:5d:ca:9c:e2:51:69:fe:bc:50:db:
                    c6:e8:25:7a:c5:67:77:22:cd:17:05:cc:85:3d:e2:
                    a5:29:4d:8f:3d:0f:39:af:16:03:d3:66:6f:58:5d:
                    32:b1:84:95:d2:73:7c:5e:33:da:c1:e5:07:d3:a2:
                    84:f9:84:aa:d1:43:c3:7e:47:9a:ba:9e:10:df:c3:
                    36:e5:42:f6:44:a9:2c:ca:c1:a7:cd:49:e1:e3:36:
                    15:3f:b8:38:2f:ad:4f:d0:2d:07:81:e2:2e:f0:e5:
                    8b:e9:e1:68:b3:88:8e:15:aa:66:8d:cf:06:9f:d6:
                    54:cb:52:85:32:b3:1c:6b:46:4a:75:21:ed:24:36:
                    95:0d:b0:24:c4:9d:95:b5:0b:dc:6e:b1:97:54:32:
                    4d:23:cb:ba:55:1a:2e:0c:77:02:22:80:da:9e:f1:
                    4d:53:ac:7f:db:4e:f4:6a:47:5c:29:bb:03:e4:de:
                    a6:82:4c:ac:39:9a:ca:4a:a9:99:92:88:de:e0:e0:
                    ee:10:bc:4e:6e:a1:cc:9b:2f:96:dc:71:49:eb:4b:
                    0c:73:07:47:fd:71:58:6d:d6:4d:cd:a8:0a:dd:a1:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:89:3C:4A:A4:F5:D1:50:2A:F1:72:23:E2:66:02:64:C1:76:CA
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:83:00:ed:dc:b0:ec:96:30:f0:d4:d0:6f:e5:85:ff:d1:
         02:34:14:5a:09:3c:2d:b7:29:54:5a:ac:e6:80:34:7f:18:62:
         87:2f:6e:33:cf:b0:6d:36:91:ef:ba:c3:a9:3c:c9:08:fb:a0:
         b3:35:a5:ce:44:57:bd:da:84:ab:4c:e0:8f:49:fc:7b:f0:d9:
         f5:51:b1:c4:08:8c:ac:5f:f2:26:d9:33:71:50:05:29:23:30:
         56:b9:13:92:75:78:78:35:53:f3:f5:f7:35:98:22:c4:39:04:
         56:68:c1:10:d1:29:c1:39:f5:2a:0e:5d:29:cc:c3:29:df:f2:
         35:e1:62:47:48:1b:d1:b5:54:dc:e4:c9:96:3a:ad:16:53:d0:
         73:5c:0f:40:3d:e2:db:90:16:09:ac:45:40:c9:68:aa:bf:b1:
         28:87:4a:49:01:1e:cc:de:7a:fd:6f:e3:5b:f5:c2:54:d5:c2:
         4f:f3:c8:44:6c:83:af:4b:af:8c:8e:e9:5b:ac:a4:4c:2b:a1:
         03:6e:96:c2:34:e0:36:5c:84:b8:09:01:87:77:db:73:f9:71:
         30:30:45:59:02:44:11:05:f2:10:40:b6:f2:f3:22:b9:4a:0b:
         9c:38:c2:0e:0e:31:27:48:bf:cd:81:cc:dc:07:9d:9a:94:26:
         c0:d0:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:03 2025 by rpki-client