Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          RmXQoME50+cwjaQ8Kfxk0KhG4EQxB12YGp37fzx1/qI=
Subject key identifier:   66:42:DC:69:C4:79:59:C3:58:17:23:EE:C1:80:8E:2B:BC:BD:67:D6
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       019A21ADB3D2A99ED429F11B4DD5655D2A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          10F1
Signing time:             Sun 26 Oct 2025 18:00:22 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:22 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:22 +0000
Files and hashes:         1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: eGbsOEUerOlocTnXJVUBbXxUhXgJSTJc0LddwIl2d/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:b3:d2:a9:9e:d4:29:f1:1b:4d:d5:65:5d:2a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Oct 26 18:00:22 2025 GMT
            Not After : Oct 27 18:00:22 2025 GMT
        Subject: CN=6642dc69c47959c3581723eec1808e2bbcbd67d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:ad:d4:72:90:60:37:a7:05:3d:27:41:82:
                    12:a2:29:5a:81:68:80:cd:2b:7e:e3:9e:e1:1d:d6:
                    ef:e9:9c:aa:19:fd:33:cc:53:75:cd:d2:e7:5a:05:
                    58:4e:b7:c4:9c:0c:75:8c:3c:c1:bd:d2:f8:87:57:
                    1d:99:71:2a:09:06:9b:d1:d8:da:95:50:c2:15:5b:
                    f4:a0:12:a2:fe:91:2f:14:63:6b:92:5a:d3:9b:a3:
                    0a:00:5e:b1:d5:40:15:d6:c7:6d:98:0c:b9:53:47:
                    b7:96:7f:7c:79:ed:6b:1a:5f:b5:8e:2e:55:af:69:
                    fc:34:55:4a:cb:10:3e:6c:4d:3c:c6:a5:0a:15:8c:
                    93:d3:dc:9a:7d:4c:3c:bc:cf:a2:69:da:5f:59:de:
                    47:71:d6:59:d8:3d:82:34:ec:66:ba:2c:44:10:f7:
                    40:74:38:66:bf:ad:ae:a8:2d:ad:ea:39:21:88:54:
                    32:df:78:e4:48:9b:39:8b:34:40:80:63:b8:d4:a2:
                    f1:81:12:d5:16:99:63:4f:03:a9:e2:e2:2d:53:93:
                    b5:c2:fd:2e:1d:1d:0e:15:a3:c2:01:91:ef:d8:de:
                    ca:8a:e8:54:7c:9f:7c:a5:b3:cf:55:f5:c4:d0:b5:
                    6e:71:f3:cb:80:af:39:b6:8f:cd:2d:31:17:1d:7d:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:42:DC:69:C4:79:59:C3:58:17:23:EE:C1:80:8E:2B:BC:BD:67:D6
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:98:91:3b:7a:08:ee:5b:f5:8b:65:09:f2:e5:7f:22:b2:
         cd:42:11:d8:6f:66:91:4f:82:70:21:96:7c:cb:af:e4:8f:62:
         2f:74:99:f6:0c:f8:e1:c5:5a:ac:fb:10:cb:d1:c7:4e:45:d6:
         4e:a8:2c:d9:3d:5d:44:55:c8:46:df:7f:5d:da:54:ad:d5:86:
         f5:83:42:c4:5b:96:b4:c1:87:3e:fe:fe:1d:7e:e6:89:37:29:
         a1:d7:c7:2c:af:9c:c9:f4:2d:bb:18:31:c8:fe:2a:66:02:ec:
         12:b8:28:f9:1e:ad:72:0e:73:20:9c:c3:a5:90:eb:63:1b:35:
         56:0e:02:d9:bb:57:d9:08:f8:22:2d:3a:46:5b:a3:17:4f:29:
         57:d2:33:95:c0:6d:9b:6e:e8:53:73:59:84:6c:15:d7:d4:fb:
         51:03:10:4d:bf:c4:ba:e1:d6:32:12:b6:ab:30:28:84:0c:1c:
         6c:a6:cf:58:82:3b:32:fe:02:05:5c:b8:2d:ef:a3:18:c6:3d:
         bf:12:83:24:e2:27:fd:b0:db:a7:03:48:68:82:6f:7f:90:1d:
         58:9c:07:ac:ef:f9:54:5e:a9:ad:34:b8:c6:27:f8:b5:c2:d7:
         8e:c7:2d:1a:23:e8:bb:67:28:02:37:39:86:d8:0f:0c:83:0d:
         97:19:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:14 2025 by rpki-client