Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
File:                     1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json)
Hash identifier:          zOpAZ6OjX7EAjOlsHtt777GnvHxD1zcKfD+Rj4ulU9s=
Subject key identifier:   ED:4F:C0:53:F5:B8:7E:D4:23:C5:8D:EC:42:D9:1F:7A:B6:13:7E:07
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Certificate issuer:       /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial:       019A29674FE71F56206D7225E636D8116CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
Manifest number:          1077
Signing time:             Tue 28 Oct 2025 06:00:27 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:27 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:27 +0000
Files and hashes:         1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: d02+GgUEv5Q9v+w2uuGdU1SV+CHudwxL9EZG/hnJUgo=)
                          2: xmpcwINBwhfOQ2qyibBKWtgFhyc.roa (hash: RM0GiW910PS4/kJDIOZ/RJgcd9jsdiuKg4ZQlvkwZTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:4f:e7:1f:56:20:6d:72:25:e6:36:d8:11:6c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
        Validity
            Not Before: Oct 28 06:00:27 2025 GMT
            Not After : Oct 29 06:00:27 2025 GMT
        Subject: CN=ed4fc053f5b87ed423c58dec42d91f7ab6137e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:ac:10:b5:18:9a:ff:ed:1f:00:da:07:eb:
                    b1:cc:74:87:56:71:a2:db:62:65:7b:52:de:22:6d:
                    ed:f3:ca:a1:1f:f6:a2:71:bb:c1:9a:1d:c1:48:c1:
                    f0:a7:27:86:a9:d7:c3:8d:7b:84:c8:d5:68:72:40:
                    8b:28:2d:01:f9:a1:a1:16:95:b8:36:be:17:bf:3d:
                    e0:19:a0:cf:b0:f4:97:25:5a:d4:65:88:e7:9f:23:
                    7a:50:a5:c5:1d:70:3f:7d:3c:9a:b7:41:c1:a8:9a:
                    de:13:d7:ed:f3:5b:eb:8e:32:ca:fc:f2:24:db:a6:
                    86:24:26:f9:dc:93:52:dc:0e:50:56:e6:73:d2:a7:
                    b3:6c:6e:83:85:af:3d:cd:bd:d4:69:68:90:12:a0:
                    be:de:1d:3e:5f:11:b0:08:e4:66:b6:3c:66:52:8d:
                    cd:b4:01:56:ad:b2:e9:27:83:ab:fb:44:4c:bb:9a:
                    02:25:30:dc:2e:34:0a:08:48:ac:4f:4d:82:5c:94:
                    90:25:73:c8:94:f5:e7:e1:33:3f:a8:bb:b3:a7:6a:
                    47:73:92:67:56:62:a6:d1:96:8f:1a:37:91:83:4f:
                    05:19:65:e6:6f:51:48:1c:7d:71:c7:b3:ef:d7:34:
                    61:f3:d3:98:40:d6:8e:43:53:15:18:9b:c3:7d:6a:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:C0:53:F5:B8:7E:D4:23:C5:8D:EC:42:D9:1F:7A:B6:13:7E:07
            X509v3 Authority Key Identifier:
                keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:50:c8:94:a9:60:fb:c4:d9:88:62:4f:d4:a2:1c:6f:e2:
         9e:e0:85:98:03:0a:d2:8a:31:c0:2c:6e:b0:96:41:9a:3d:ea:
         0e:3d:6d:c8:5d:3d:c5:27:a9:09:0b:47:18:e2:27:3b:98:c5:
         5d:02:c0:bc:ee:3e:de:0f:4e:52:cd:28:f4:12:c9:03:ae:f5:
         ea:d4:c5:e9:7a:10:88:4f:c1:21:da:6a:34:ec:49:c0:ae:4d:
         f8:cc:2c:ed:9c:df:fa:c5:df:1d:33:b9:ce:d7:3d:6e:ae:2e:
         be:a1:e8:ac:b1:e4:4e:8d:0b:d8:91:29:71:38:7b:a0:6b:ba:
         6f:b0:85:ed:37:1f:7b:1f:07:b1:3e:dc:27:ca:cb:64:d4:5d:
         5b:ae:a9:d2:a9:de:4f:04:37:b4:ae:7d:e8:26:89:8c:f6:3e:
         b1:a1:17:6b:40:10:6f:6e:5c:17:da:7f:fa:e9:43:c5:03:b5:
         77:44:b1:14:a6:fb:78:70:66:8a:11:0d:22:1d:60:bf:73:ba:
         a9:db:53:8b:4d:5f:ba:79:85:7e:2d:4b:6d:4b:68:83:14:4f:
         de:2d:49:a4:bf:85:95:b2:56:70:e0:22:29:09:8a:e3:1f:1c:
         7d:bb:14:f5:a1:81:fd:cb:62:b5:dc:d0:da:23:01:b4:cc:7b:
         90:c3:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:11:14 2025 by rpki-client