Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          sF2c8rDKrA30pbvot3OhK0H7ZQX+ygxdtx22jdztVNM=
Subject key identifier:   5F:83:7B:11:4F:3F:26:B2:CE:55:50:60:0F:59:CD:95:56:94:C2:5C
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       019A15055B17AC63496132E2B60714249F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          01E7
Signing time:             Fri 24 Oct 2025 07:01:03 +0000
Manifest this update:     Fri 24 Oct 2025 07:01:03 +0000
Manifest next update:     Sat 25 Oct 2025 07:01:03 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: WCNQqHyHKmT0L6EDx0SqpYBnFxLZ/q3fLmuHcNVVSdY=)
                          2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:15:05:5b:17:ac:63:49:61:32:e2:b6:07:14:24:9f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Oct 24 07:01:03 2025 GMT
            Not After : Oct 25 07:01:03 2025 GMT
        Subject: CN=5f837b114f3f26b2ce5550600f59cd955694c25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:05:bf:5b:86:ab:6a:20:b5:02:99:2f:5a:
                    fe:23:7d:ef:82:e3:5a:36:41:f2:07:97:c8:03:9e:
                    aa:c1:e4:6c:bd:31:6d:98:d7:7d:f0:b2:0e:d6:80:
                    68:09:83:30:72:c5:63:5b:1d:22:83:85:1b:24:3c:
                    62:fc:7e:80:f5:5c:64:1f:a2:50:1f:2c:ce:a6:d2:
                    72:b3:8f:7f:52:2d:9f:62:c4:f8:aa:f9:b7:44:3e:
                    b6:43:bb:e7:fb:54:7b:3a:b5:0f:76:60:05:c3:42:
                    33:33:a9:c6:fd:65:34:67:df:1f:26:ac:78:02:8c:
                    19:17:90:45:e3:97:84:ef:4b:29:83:c9:1a:2d:91:
                    a5:86:cb:1b:28:6a:85:ab:f5:80:95:ea:b7:31:97:
                    f7:1f:38:c2:09:9a:cd:4b:e3:3f:2e:99:c0:77:2c:
                    57:0f:66:3e:b8:09:17:23:3f:17:8a:04:2f:27:46:
                    ba:26:6a:6c:f6:13:82:97:f4:8a:a7:16:7c:de:e5:
                    f5:fc:d3:a9:72:e7:38:dd:22:63:44:3f:11:77:11:
                    08:68:cb:7a:79:3d:3c:4c:e2:2c:72:71:65:17:0c:
                    ea:cc:1b:f0:60:69:e7:e5:64:5f:59:c7:68:92:9f:
                    14:c9:c4:6d:5b:53:ed:0f:a4:ca:ef:b0:7c:3c:2e:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:83:7B:11:4F:3F:26:B2:CE:55:50:60:0F:59:CD:95:56:94:C2:5C
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:da:82:9e:7a:c4:58:32:6b:41:7d:27:0d:ea:d7:42:e7:
         98:c9:cc:9a:fa:a0:54:c4:e2:f6:3e:a0:41:b3:9e:28:64:e0:
         72:37:0e:0a:cd:b7:12:03:ed:31:d8:52:8e:01:43:0f:92:d9:
         26:e3:cc:99:7f:09:df:bb:f7:f4:08:fb:82:dd:80:69:39:34:
         75:18:35:c7:e7:30:ca:69:17:6f:ff:c1:c6:42:fc:01:20:ff:
         6e:51:58:44:b6:7a:5e:c9:a4:5a:a5:91:bf:ae:2f:78:2f:d2:
         f0:12:83:1a:b1:52:eb:78:1d:8c:de:99:9e:7d:9a:3e:a3:0b:
         81:d3:a8:91:c2:e8:ec:12:7b:16:a0:69:c6:f0:27:9e:94:4e:
         5c:42:75:4f:9a:31:96:c4:ad:6e:32:08:5a:41:81:28:2b:8e:
         df:56:c6:a3:5b:d3:94:cc:47:ea:1f:ae:c1:6a:a5:74:c4:87:
         9d:1d:19:81:d2:05:fd:e9:1c:df:13:59:12:2d:a7:52:4d:2d:
         d5:6d:62:fb:3e:2e:3d:8b:76:09:16:ce:74:eb:32:81:8c:06:
         73:9e:d9:a9:e8:29:68:3a:e2:ca:ac:0a:21:67:85:4f:1a:31:
         27:3c:1a:72:5e:32:39:d4:b8:d9:79:a8:15:81:43:86:87:8c:
         67:78:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:53:53 2025 by rpki-client