Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          KsaFO/6Du0v7R+lxuj9STu+dQggacWULgqQAKkKvZWM=
Subject key identifier:   F7:7B:FB:B6:3E:A4:48:EC:69:33:C6:EC:35:73:EC:3A:75:DE:79:2D
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       019A31FD152AB9956F22BE1967FF7C987BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          044E
Signing time:             Wed 29 Oct 2025 22:01:00 +0000
Manifest this update:     Wed 29 Oct 2025 22:01:00 +0000
Manifest next update:     Thu 30 Oct 2025 22:01:00 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: 2u86C7Ui4x+LBmbH/S0P9Fh4uEZtIrBDbXVqzxxajf8=)
                          2: GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa (hash: NOyHUSRyn/zm35BU84aYQfd0YAX7k067uz4v2RofCv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:31:fd:15:2a:b9:95:6f:22:be:19:67:ff:7c:98:7b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Oct 29 22:01:00 2025 GMT
            Not After : Oct 30 22:01:00 2025 GMT
        Subject: CN=f77bfbb63ea448ec6933c6ec3573ec3a75de792d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:80:06:a1:19:eb:73:c1:92:7a:10:ac:76:
                    7a:79:0a:af:e7:53:a3:49:dc:2e:ab:93:b7:5b:49:
                    6e:a5:6a:24:6d:0e:51:e9:57:b8:bb:62:e0:cf:af:
                    b1:4b:4c:3f:99:75:53:6d:7b:13:fe:dd:9f:ba:58:
                    5c:0e:22:20:1b:ab:8c:a5:01:41:b0:37:c2:ba:60:
                    41:2b:27:05:be:1a:0a:67:1d:4e:ac:d4:2f:8e:86:
                    59:29:a7:0c:fc:2a:8f:0a:ad:b9:ec:11:9c:32:76:
                    8e:7c:73:1a:ae:02:60:c7:2c:c8:50:66:65:00:46:
                    c3:3f:c3:2e:13:06:79:5a:39:e3:87:e4:6d:6c:c2:
                    cc:81:2f:c3:0b:4b:af:9d:a9:1e:92:e0:7d:7d:86:
                    c0:50:8f:45:09:cb:39:06:79:80:c4:cf:4a:e2:17:
                    b7:4f:7b:74:f0:f0:0f:d7:32:1f:55:75:46:29:21:
                    b1:fa:65:5f:4d:3d:16:6b:71:da:fc:49:b7:b0:75:
                    21:99:05:ab:a2:17:e3:d3:3c:75:0a:cb:86:8d:c3:
                    af:10:37:fa:1f:27:38:e9:35:9f:71:08:0d:17:69:
                    a1:50:b1:b9:65:91:f6:86:96:61:32:68:f5:fb:4f:
                    aa:3d:6a:27:77:ea:ba:82:8c:9a:99:15:cf:ee:d5:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:FB:B6:3E:A4:48:EC:69:33:C6:EC:35:73:EC:3A:75:DE:79:2D
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9a:62:d0:6a:1e:a9:4b:c1:b8:cd:09:36:db:2a:35:74:41:
         6b:02:56:27:e6:b2:99:aa:40:90:50:d1:00:94:22:c9:88:17:
         50:51:9f:c3:ae:fc:d3:af:04:97:6a:f8:98:6d:28:2c:38:c7:
         50:7e:01:db:ef:d1:98:93:8a:82:f4:27:8e:6a:c8:e0:9b:bc:
         54:15:e6:73:2f:67:54:e4:2f:b9:67:01:e7:3f:9a:2e:a1:dd:
         86:c5:c1:d6:44:11:46:7d:7f:56:4b:4a:21:8b:b8:ff:78:ca:
         c6:99:21:24:86:a3:11:98:47:aa:98:9d:de:66:e2:da:97:3f:
         4a:b9:9d:39:bc:f3:3e:78:ed:b7:58:1c:78:41:0d:d5:b0:93:
         b2:44:71:19:01:9b:f8:df:0c:df:27:38:ba:b9:69:f8:8d:9c:
         46:2f:1f:98:c1:19:07:99:61:7d:a4:cc:86:94:0b:73:e7:2d:
         03:c7:f0:dc:97:f6:5c:37:f1:8e:58:70:12:cb:d3:23:1a:98:
         4d:3e:34:cc:35:c9:ab:0f:77:16:29:99:89:4c:17:34:14:e5:
         7f:a9:81:1c:eb:6f:f7:ea:87:6f:a4:f6:64:11:84:e0:21:6e:
         99:04:18:0b:cb:2e:0b:f5:dc:6c:b9:1a:0e:2d:b9:d4:60:8b:
         86:0a:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:50:45 2025 by rpki-client