Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File:                     VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier:          MJUM1hdDeyW6gq63e3V2Kd1ba/FOqgKy28qjvDJMunk=
Subject key identifier:   21:DE:16:39:2C:7D:4C:F4:A5:EC:15:34:35:EB:CD:BB:5D:AD:9B:5D
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       019A1CBEBDC56FC92FD824A7AE09CC51F6DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number:          0F04
Signing time:             Sat 25 Oct 2025 19:00:53 +0000
Manifest this update:     Sat 25 Oct 2025 19:00:53 +0000
Manifest next update:     Sun 26 Oct 2025 19:00:53 +0000
Files and hashes:         1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: Bs/Ur8rGDrRX24VgodU8+BGN9rqaLlqcPg3Mbv7CEak=)
                          2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
                          3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:be:bd:c5:6f:c9:2f:d8:24:a7:ae:09:cc:51:f6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Oct 25 19:00:53 2025 GMT
            Not After : Oct 26 19:00:53 2025 GMT
        Subject: CN=21de16392c7d4cf4a5ec153435ebcdbb5dad9b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:62:d4:1f:d2:c8:3f:e7:d1:d8:9b:30:20:
                    5b:c0:c3:07:8a:ee:48:d2:53:15:2d:95:43:6b:b7:
                    8a:b1:57:45:ef:88:ea:d2:c7:4e:7a:b7:f9:0d:33:
                    ba:ea:dd:9c:bc:a1:47:0d:a5:34:1b:3d:ca:ec:1f:
                    1c:27:4b:d5:aa:f7:05:9a:e0:c6:21:ac:1e:5c:c3:
                    2f:d2:a6:9b:5d:30:a2:25:3e:60:5f:81:7f:d5:cb:
                    98:b7:5f:13:46:d7:1b:e6:d6:76:f9:1a:da:cd:57:
                    b2:3c:61:b5:e5:5d:ce:20:55:0d:e1:49:a0:37:20:
                    fd:5d:28:a7:25:3f:cd:c5:8b:48:8d:ac:69:37:0f:
                    e2:3b:fe:0e:2b:ca:54:19:34:2b:40:c4:8b:f5:dd:
                    91:20:f1:21:68:57:1a:8a:ff:d9:5e:76:87:5c:77:
                    0b:f3:11:7c:4c:fa:1e:a6:3d:02:54:4b:fe:2c:82:
                    f1:cc:f1:e3:90:6c:30:5e:e8:b8:a9:09:c6:54:9a:
                    4b:12:92:93:82:ff:26:53:70:81:ca:ad:53:f0:c2:
                    b0:fb:89:65:c8:d4:4c:fe:af:fb:ca:8d:63:b1:eb:
                    25:12:c6:c2:1f:4b:c5:bd:1e:33:77:1c:44:30:4e:
                    57:53:44:05:9f:a9:3e:4a:e8:66:12:d1:37:70:e2:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:16:39:2C:7D:4C:F4:A5:EC:15:34:35:EB:CD:BB:5D:AD:9B:5D
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:43:ec:c1:c6:47:c2:da:f8:af:f3:99:de:3c:45:38:35:
         31:04:29:7c:e4:1e:91:3a:2b:22:e9:20:3f:2e:ea:3d:5c:44:
         ed:3a:db:5b:c9:0c:e4:f7:e2:71:64:7b:54:f1:6d:51:8e:59:
         ec:c9:f4:c9:ce:a9:69:bb:83:6b:0b:c0:32:51:a5:1b:81:a5:
         a5:43:09:03:6d:1a:5b:75:98:3a:b0:67:37:69:6b:c2:e1:bb:
         cd:83:25:a4:1a:b0:db:d0:97:72:53:90:9e:23:b4:01:e5:8b:
         fd:56:12:29:42:12:f2:6b:95:c9:f6:fa:39:7c:b1:d2:f2:6e:
         58:4d:99:c7:eb:0d:04:93:e9:6c:e2:3a:cd:60:89:7c:24:e5:
         1c:c7:f0:bc:a2:04:1c:65:6e:8a:66:50:d0:6a:83:92:10:22:
         1c:a5:de:ee:c0:5f:0a:b9:dc:aa:a6:f3:88:c5:84:85:9d:87:
         f9:48:50:bf:90:9e:ac:d8:ea:b4:2e:11:96:b2:e2:67:7c:bd:
         07:c2:29:1c:78:05:1a:3e:72:42:c0:ab:58:5f:bd:3d:7a:0c:
         9c:27:b4:bb:d6:4a:e6:19:40:96:b6:7d:f3:a1:e4:f8:af:e9:
         31:a3:5b:76:ed:e0:45:e1:45:a2:76:d4:14:2a:e5:09:74:2e:
         35:a3:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:22:38 2025 by rpki-client