Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          w+9kxRmvSkURHPpx3/exR54XbtbPLk2Q6LuP0W2qI28=
Subject key identifier:   97:50:88:1F:BB:B6:5B:50:1C:BA:B1:0E:7C:A5:D4:A5:79:00:CA:3B
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019A1F1AECA371B6B1347AD304CAF11421D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          13C7
Signing time:             Sun 26 Oct 2025 06:00:49 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:49 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:49 +0000
Files and hashes:         1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=)
                          2: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=)
                          3: mOMTOzklCOsSuB9v2boILVZdvLA.roa (hash: mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=)
                          4: pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa (hash: L3xcP7+zXuAEnHkbFJ8G7AgoW2gbRSxFSqISwohVgeo=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: ROVL+ywnC9yaT01MEhcIQvmNam1wPFD5ullNoKibky4=)
                          6: wserKdrEjvEaiB1L0as5xEScHOo.roa (hash: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:ec:a3:71:b6:b1:34:7a:d3:04:ca:f1:14:21:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Oct 26 06:00:49 2025 GMT
            Not After : Oct 27 06:00:49 2025 GMT
        Subject: CN=9750881fbbb65b501cbab10e7ca5d4a57900ca3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:ee:b6:a6:8a:78:e2:13:6f:23:df:0a:a2:
                    46:1b:cd:54:70:33:5e:d1:b5:e4:7b:f9:38:c2:58:
                    e8:78:83:04:00:98:d3:b3:2b:c3:3e:c1:05:4c:7e:
                    50:c3:ff:60:55:13:26:c1:c1:38:cb:de:06:e2:0c:
                    1e:22:e0:fd:3c:8a:b6:01:4c:82:3a:9f:19:39:2b:
                    8f:4f:c6:d7:91:0f:69:5a:5b:54:b9:23:ac:4e:08:
                    8a:f1:ee:60:80:73:51:b6:c4:4a:ae:99:79:12:b7:
                    c2:6d:1b:ef:1c:5e:7f:d4:b0:79:57:2c:f5:fa:fa:
                    fa:5e:1f:1d:5a:f2:4e:87:7b:a9:77:46:3e:bf:0f:
                    01:17:ae:cc:76:eb:15:2c:dc:5f:a4:9f:55:85:f5:
                    71:e7:cf:39:1b:3c:71:06:d9:77:bc:97:f5:ad:29:
                    1b:7f:bf:84:b1:2c:7a:8a:d6:cb:f2:44:b1:1a:4a:
                    78:3d:d0:14:ee:01:5e:d2:47:7b:14:6e:75:14:dc:
                    7b:cd:db:61:a0:d7:23:7e:25:be:c7:b4:79:76:d9:
                    b0:e8:86:a5:fc:1e:f7:c9:22:a7:66:e7:13:c9:90:
                    81:ff:02:42:58:a0:fb:4b:5b:a6:8f:52:67:08:c1:
                    f1:67:67:9d:92:a6:05:2e:dd:f8:8d:3e:7f:46:1c:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:88:1F:BB:B6:5B:50:1C:BA:B1:0E:7C:A5:D4:A5:79:00:CA:3B
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:05:86:2e:4e:b4:c7:2d:b2:15:c9:18:f5:37:aa:58:6d:a4:
         8e:f2:a0:f3:dc:bd:40:aa:80:30:b0:e7:59:30:31:3e:02:75:
         a4:bf:a6:ff:1f:07:a8:16:7e:e5:26:b8:82:de:b4:12:74:9d:
         55:60:eb:34:30:13:1d:c0:12:47:8e:1e:78:1e:33:d4:42:b2:
         0e:2b:7f:00:1f:09:45:f9:a9:0d:16:24:89:b7:90:91:ac:8c:
         10:8c:d9:cd:08:4b:e8:d7:85:ec:44:b3:23:a1:5c:4d:76:3c:
         4f:22:2c:04:64:ff:23:b1:70:62:e1:ef:93:ca:dc:49:70:bb:
         5a:0e:46:ff:d5:10:eb:f7:40:80:74:1e:3b:5b:41:c6:49:ba:
         b6:2c:2d:0a:ab:85:88:bb:2e:19:0c:23:b0:50:9c:f2:d4:1e:
         e8:8f:7d:4b:71:b6:69:dc:ba:b5:8f:43:57:04:c1:2e:b3:e0:
         ae:bf:fb:0c:13:bb:ff:ef:e4:d6:ee:a0:ae:9c:68:f8:03:eb:
         65:1d:4c:ca:bf:bc:cf:0a:f0:de:dc:6f:e3:8b:c2:d4:4d:bd:
         fb:52:e2:dc:5c:7a:83:f6:36:60:2d:59:41:f6:3f:63:39:95:
         9c:ed:96:fb:f2:34:fd:9c:de:68:cc:2e:db:fb:b3:50:2d:22:
         08:e2:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:02 2025 by rpki-client