Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          0nxyN/BzZkf+6g81A+arUN2mp65IbQNppcmWVEahzYQ=
Subject key identifier:   58:F0:04:1B:0E:B2:F4:43:FA:82:93:3A:19:D6:3F:9E:40:05:CB:14
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       019A24AEA428C61489AD67CC71915D449097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          105D
Signing time:             Mon 27 Oct 2025 08:00:16 +0000
Manifest this update:     Mon 27 Oct 2025 08:00:16 +0000
Manifest next update:     Tue 28 Oct 2025 08:00:16 +0000
Files and hashes:         1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
                          2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: Z6Yet37rk4zGm+W2M8JlXtptAUbfIypzxmZdo1Hsvn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:ae:a4:28:c6:14:89:ad:67:cc:71:91:5d:44:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: Oct 27 08:00:16 2025 GMT
            Not After : Oct 28 08:00:16 2025 GMT
        Subject: CN=58f0041b0eb2f443fa82933a19d63f9e4005cb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:02:03:84:c9:6d:01:88:a6:68:cf:03:c5:
                    38:87:ef:06:6f:6b:cd:21:f8:ce:75:a0:06:ae:04:
                    3f:76:31:fa:35:e4:ed:7d:fd:67:75:23:33:f8:63:
                    e8:20:9f:4a:7b:00:25:43:8c:ca:98:12:5b:ba:05:
                    53:ca:c3:38:55:67:81:f5:be:cc:8c:2d:0e:20:29:
                    e2:c0:d7:a3:98:5a:32:df:a2:ad:92:cc:63:cf:a2:
                    08:05:1d:7a:ea:d6:9c:99:8e:7e:db:d1:49:f4:d8:
                    5b:8a:e3:28:fe:93:11:7f:2d:f9:27:c5:cc:5b:6d:
                    06:83:17:5f:d4:21:5d:a2:31:40:39:4c:3b:41:5e:
                    e6:11:73:05:62:1a:0f:21:26:03:7d:a5:3e:d5:22:
                    e9:23:1d:35:a1:e6:65:16:9b:78:76:97:e1:5a:af:
                    ab:e5:14:51:36:56:4a:09:c9:00:c3:91:fa:64:97:
                    30:26:a6:5d:b2:9d:80:0f:43:cf:dd:60:21:65:b3:
                    de:11:c1:35:df:69:91:7b:53:92:0b:08:63:a9:94:
                    d7:3c:16:86:7b:17:32:c5:80:bd:c9:34:06:36:8e:
                    26:e0:15:0e:1d:69:0d:ca:6c:34:5f:27:a1:50:7c:
                    50:f5:1f:30:0d:06:99:d1:2f:25:54:23:d9:f8:e7:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:04:1B:0E:B2:F4:43:FA:82:93:3A:19:D6:3F:9E:40:05:CB:14
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:62:3a:5b:fb:2e:de:a8:0a:d5:27:e8:30:3b:8d:a7:5d:83:
         4e:cc:da:82:0a:01:b8:41:7d:9b:73:13:cb:88:49:9f:3a:9d:
         f3:1c:6d:62:7d:9b:2e:61:74:67:bf:a6:15:c2:9d:8a:5d:0e:
         fe:b3:79:be:b2:c9:83:2b:e3:12:31:87:69:6c:5a:30:ad:ca:
         cd:df:4a:ab:6d:53:b5:a2:8b:28:1b:b9:63:e5:f3:3d:d9:79:
         c0:2e:17:88:34:f2:bd:0e:4b:a3:31:e3:7d:9b:33:75:f9:d9:
         87:fe:dd:f7:08:9f:ad:fc:18:58:0c:cb:71:6c:43:8e:cd:78:
         f3:e4:1e:51:28:0f:f2:fe:32:8b:72:1a:ff:ba:6e:c8:b6:d5:
         a6:dd:49:a0:91:93:cf:8c:0b:1e:63:90:88:4b:36:ea:84:da:
         a7:37:07:7c:cd:60:db:14:c0:9b:3b:d0:56:d6:ba:78:11:1c:
         14:79:0a:49:48:f8:07:e2:c6:4b:0a:f1:85:31:b1:47:63:0a:
         29:ba:6a:b9:9f:62:e0:27:2b:47:54:e2:ba:48:9d:59:0e:58:
         88:80:05:ae:57:51:1c:8d:1d:c3:5b:15:48:c9:a8:18:80:a7:
         d2:0c:b6:02:86:75:27:0c:7b:00:d0:25:66:6e:dc:76:2b:e9:
         b0:12:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:43:04 2025 by rpki-client