Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          FHBHVBHrwSAp43vUAYWRpH/g+Zhlrle30BfPwWpOhgE=
Subject key identifier:   64:09:49:80:28:57:FE:77:6D:28:87:06:AD:FF:82:DA:A1:E9:E6:19
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       019A19F47CAA7986726E272CE75CB4EAABC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          1448
Signing time:             Sat 25 Oct 2025 06:00:44 +0000
Manifest this update:     Sat 25 Oct 2025 06:00:44 +0000
Manifest next update:     Sun 26 Oct 2025 06:00:44 +0000
Files and hashes:         1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=)
                          2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=)
                          3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=)
                          4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: 4+fDMsNez3fgbsn5Whv6yFfwK7ngE3cG4m4Eq+Nu4kI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:f4:7c:aa:79:86:72:6e:27:2c:e7:5c:b4:ea:ab:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Oct 25 06:00:44 2025 GMT
            Not After : Oct 26 06:00:44 2025 GMT
        Subject: CN=640949802857fe776d288706adff82daa1e9e619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:25:6f:2b:69:13:1d:2d:8e:33:5a:a2:07:
                    92:bb:d8:6d:00:ee:ea:5e:d6:0b:78:de:d3:5e:d8:
                    5a:a6:3c:eb:37:8d:4d:9a:be:9d:15:c0:84:35:13:
                    99:00:26:d3:bc:96:f9:91:78:fb:2c:75:47:08:97:
                    37:a1:12:7d:2a:53:b5:95:65:e3:ac:b1:88:fa:5a:
                    d9:04:0f:c1:32:95:6c:42:97:17:a9:6d:f8:f5:d7:
                    ff:69:53:7a:68:2e:e3:f9:2b:3d:ba:d6:28:c9:06:
                    52:fa:31:da:eb:f4:b5:2f:07:19:76:68:48:55:c9:
                    c7:6e:98:93:16:1a:55:e4:46:18:52:f3:98:53:fd:
                    e9:4b:42:db:c3:d3:e5:df:69:7e:de:f9:16:3d:e0:
                    f7:ec:f0:25:35:6b:80:c9:20:b0:3b:96:64:90:60:
                    c8:f9:70:20:c2:12:2a:f9:56:76:bc:ee:2c:34:11:
                    09:31:6b:78:8e:d4:45:ce:a3:58:27:d1:d8:96:46:
                    d7:f3:40:ed:fb:f9:ca:71:9f:2a:36:cf:4b:1f:1c:
                    d7:20:02:45:29:fe:10:63:47:f3:ea:98:1f:ff:bd:
                    a3:8f:23:35:7e:f8:7e:90:b2:41:0b:d6:9f:ca:d6:
                    62:d9:de:c2:49:05:48:95:0f:3d:0b:14:9b:b1:06:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:49:80:28:57:FE:77:6D:28:87:06:AD:FF:82:DA:A1:E9:E6:19
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ab:2c:4a:6b:e0:7d:68:93:47:f3:80:c4:68:d7:20:b6:8b:
         2e:23:8e:e9:e8:f7:41:fb:88:bd:5c:61:26:25:cb:9f:be:f8:
         98:8c:36:3f:e7:5a:fe:10:25:19:38:fd:54:f3:00:45:19:e6:
         43:92:58:1a:ee:6e:5c:2b:f4:4d:b6:a3:cc:53:3a:af:0c:1b:
         52:4d:49:39:24:15:de:a2:49:8e:5e:c6:9c:fc:f4:29:2a:2a:
         8a:91:b0:42:86:bc:83:77:f2:53:fa:64:13:b9:c4:95:76:95:
         b7:27:37:ad:3a:2e:f1:da:bc:03:8d:a8:ba:0e:ac:54:4f:aa:
         0e:38:69:65:57:e3:15:35:9a:a7:c1:ea:96:88:a3:5c:84:0e:
         f9:92:06:b4:0d:45:85:d1:62:2e:b7:a9:39:87:a7:6f:15:22:
         3b:c9:5e:4a:6a:6f:ef:ff:10:b2:a0:91:62:a4:09:d0:ec:f3:
         37:a1:24:0c:b8:c5:37:57:b8:a3:99:d0:b0:e0:64:08:c5:7c:
         68:70:52:2a:e5:b0:a6:d0:55:86:27:8f:c7:e3:1b:1a:2e:0a:
         3a:d2:0c:5f:22:8f:7d:43:c2:cc:da:e6:d6:38:a2:8f:61:f4:
         b1:b4:a7:d0:fe:b1:8f:50:a2:15:98:ce:c9:2d:70:48:2c:c8:
         16:26:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:59:13 2025 by rpki-client