Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          qFvg08ds9Cf5iRm+ciicGKHTarh6007ofqfE48FuFqA=
Subject key identifier:   85:18:FD:AD:E6:02:9D:39:1C:7C:8B:2C:B5:C2:41:DC:91:01:E2:EC
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       019A05925747315667FD086A1BFB63C20F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          0176
Signing time:             Tue 21 Oct 2025 07:01:07 +0000
Manifest this update:     Tue 21 Oct 2025 07:01:07 +0000
Manifest next update:     Wed 22 Oct 2025 07:01:07 +0000
Files and hashes:         1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: L39CIglgICxCd6ZPRUBwYzcGUdRsTVvE6dR8nzulb9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:92:57:47:31:56:67:fd:08:6a:1b:fb:63:c2:0f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Oct 21 07:01:07 2025 GMT
            Not After : Oct 22 07:01:07 2025 GMT
        Subject: CN=8518fdade6029d391c7c8b2cb5c241dc9101e2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:e1:6b:da:39:fd:e9:22:4d:20:ea:d0:a6:
                    6d:4e:ec:d0:24:be:09:66:af:05:ad:f3:49:37:f2:
                    33:7a:48:89:7a:0b:bf:b3:a3:38:6e:56:98:93:ad:
                    c1:42:a9:15:f1:ed:73:cc:e3:19:e8:24:99:a6:61:
                    8e:f3:c3:6d:a9:29:79:fd:4e:cd:81:43:6b:f4:95:
                    a0:bf:82:1a:13:89:12:cc:68:c9:46:df:4f:f8:3c:
                    b5:03:9c:84:76:cf:d5:04:47:b3:d8:a1:59:82:8a:
                    08:de:90:e1:a5:c4:73:2c:6d:7f:8b:e5:8a:89:c8:
                    09:55:45:26:db:6a:07:33:d5:c6:2f:44:a0:af:5d:
                    84:42:2f:61:e5:6c:b8:ac:cd:39:9d:13:a7:8a:99:
                    ac:62:e2:52:d0:88:c7:6f:3f:53:e4:80:fb:91:9e:
                    d0:be:62:5b:a6:f8:ee:6d:a3:f6:0d:0b:b5:10:d1:
                    d8:34:58:9f:af:e4:ee:76:4a:b6:89:ea:f3:1e:f6:
                    eb:37:ba:5a:ea:ca:53:40:16:07:7a:80:d3:d6:f8:
                    15:f5:a3:62:e7:e8:f0:51:f1:50:d0:6a:3d:0b:da:
                    5d:31:d8:90:49:46:5a:ea:d4:5c:ef:14:2b:cb:55:
                    69:20:c1:16:25:4d:9c:c6:96:8c:f5:7f:b9:b7:3a:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:18:FD:AD:E6:02:9D:39:1C:7C:8B:2C:B5:C2:41:DC:91:01:E2:EC
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:be:b2:6c:e6:d7:5a:5b:f6:ca:4f:4f:40:74:3c:24:c0:
         16:06:18:9e:af:4b:d8:9c:fe:ab:7e:7e:bf:bb:6f:dd:ee:df:
         5e:d0:bc:8a:ba:f6:d6:99:4a:b1:97:42:10:0b:da:8b:4d:a9:
         97:f1:8c:39:f2:05:84:19:c9:4b:af:bd:89:36:0d:d1:d4:74:
         22:63:9a:fc:0d:9e:87:a1:ff:0f:ba:1c:13:4c:0a:c4:75:bd:
         ad:9e:67:04:7e:25:34:00:fd:12:c3:ff:0a:ca:12:7c:58:38:
         58:fc:a2:b2:8b:41:ad:b8:76:f9:cb:60:04:c1:f8:7a:3d:61:
         73:93:ff:84:ef:83:4b:79:aa:69:d7:7b:ec:b2:ec:9b:c5:a4:
         d0:cd:5a:1d:08:22:9b:36:fa:a2:c7:7a:72:78:b7:60:a3:a4:
         cc:64:62:f4:cf:97:72:72:c4:64:08:d6:51:d8:1b:40:e7:5d:
         46:73:1f:46:42:4f:4f:49:87:45:3f:f7:ab:6a:17:68:59:34:
         bc:56:9b:f0:3d:30:75:f8:17:2e:c7:e9:16:41:5d:80:fa:29:
         c0:95:87:62:8a:1a:72:64:03:40:8e:8c:c4:f7:8e:63:72:05:
         09:bd:d5:95:67:b9:ed:de:3c:cb:98:93:97:0d:4f:4b:3c:d7:
         bc:8d:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:10:36 2025 by rpki-client