Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          lyGgjHjPHIzBNUMV6V9efyQQPoniNGJU5p6B0MQINxw=
Subject key identifier:   F6:2B:97:98:56:D7:E6:6A:D9:89:77:62:0F:60:3A:EE:7D:3D:4B:42
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019A1A98AC3550E3C9F3D6F610433B737F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0E43
Signing time:             Sat 25 Oct 2025 09:00:04 +0000
Manifest this update:     Sat 25 Oct 2025 09:00:04 +0000
Manifest next update:     Sun 26 Oct 2025 09:00:04 +0000
Files and hashes:         1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: W+ujdDG+jp5TAhr3zPiXtJeEV8Z+JWM6WgFbaoR09lk=)
                          3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 09:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:98:ac:35:50:e3:c9:f3:d6:f6:10:43:3b:73:7f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Oct 25 09:00:04 2025 GMT
            Not After : Oct 26 09:00:04 2025 GMT
        Subject: CN=f62b979856d7e66ad98977620f603aee7d3d4b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:76:61:ca:75:da:5b:e7:b1:f7:d9:54:68:
                    fe:ff:b1:14:16:bb:a6:27:c0:dd:40:a6:08:af:3e:
                    48:84:cb:9e:3c:ba:df:67:4a:75:d5:8c:20:c2:1f:
                    8d:ae:e9:8b:3a:f3:4d:69:6c:ad:6f:20:3a:30:e9:
                    1b:3a:b6:91:d3:65:8d:82:f3:25:ec:9d:b7:b4:8a:
                    f2:59:1a:b7:57:b9:fc:a9:27:79:29:6f:e1:06:10:
                    08:c7:ca:ca:09:55:32:7e:be:27:69:cc:89:43:08:
                    d0:12:9e:31:7e:15:90:62:b2:98:18:02:f8:5a:1c:
                    8e:f4:3b:a0:a5:1f:60:c3:48:87:ae:86:87:0a:a8:
                    42:bd:92:9b:8f:7f:1f:7f:3e:d8:50:5b:f6:c2:b2:
                    54:f1:58:f1:78:97:2a:64:9d:48:ef:a9:68:a7:e4:
                    35:fd:df:6c:61:c9:d5:a9:a0:02:b5:11:73:fa:10:
                    ca:4b:cb:90:07:26:ec:8a:97:47:33:96:ff:78:84:
                    a4:3a:5e:b7:0d:4e:77:b1:f7:3a:b0:8d:cc:55:66:
                    b8:a9:66:96:a2:73:67:80:d9:9b:5a:f8:58:25:e0:
                    3e:b7:04:54:fd:63:4e:bc:55:a1:06:33:a0:63:66:
                    9a:44:95:90:45:c4:bf:e2:ea:a8:0c:e7:6c:05:b4:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2B:97:98:56:D7:E6:6A:D9:89:77:62:0F:60:3A:EE:7D:3D:4B:42
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7d:13:b6:12:a5:0e:6d:ab:15:01:3b:70:ce:d2:f5:fb:0d:
         c6:e3:be:53:c2:60:a9:b3:39:e3:b7:69:e9:f4:91:43:93:70:
         21:66:58:53:aa:84:50:55:de:fa:42:fd:72:d0:34:b8:01:0b:
         de:a9:a4:99:ae:4e:48:85:81:c6:3f:7d:30:bc:22:34:d5:9d:
         74:d0:1b:a3:2a:a4:35:57:ef:8e:53:7a:3f:03:db:96:68:6a:
         62:28:ab:35:e7:05:1d:94:a1:dd:78:9a:ca:a8:fe:65:82:23:
         20:97:77:68:21:d3:91:90:a9:41:6c:d7:36:ea:a6:61:7c:ac:
         cb:ad:5e:93:f2:32:c3:47:3d:23:f8:3f:b6:2b:75:31:57:5b:
         b9:d9:5c:7f:a8:cf:3b:6a:15:a8:08:d5:e2:34:c5:3d:d8:c5:
         59:dc:39:ed:d7:44:b4:89:cd:49:d4:10:69:c7:d4:d6:a4:0b:
         6a:a7:39:79:5a:98:25:e1:bf:80:77:0c:58:bb:20:55:5a:39:
         b2:8a:87:94:28:d2:3b:de:a1:2e:1e:8a:4f:3a:9f:2a:dc:8b:
         70:fe:d2:e7:cc:ca:ce:a4:bc:7d:6e:c0:01:0d:57:bc:06:49:
         1f:92:d3:5b:58:9d:88:40:32:b0:11:9f:4d:a2:84:a4:da:4c:
         11:b7:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:30:50 2025 by rpki-client