Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          VW8pWobWLS2FQFd8y1NjCZ+cQGpY7MOZCbaKsihU/t0=
Subject key identifier:   47:6B:63:AF:E9:43:69:02:A5:3B:09:E9:D0:61:7D:B4:6E:7E:AD:6D
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019A1DD0BCEEFB8B0AEC29B8E880FD1729A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          1707
Signing time:             Sun 26 Oct 2025 00:00:10 +0000
Manifest this update:     Sun 26 Oct 2025 00:00:10 +0000
Manifest next update:     Mon 27 Oct 2025 00:00:10 +0000
Files and hashes:         1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
                          2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: 6Py+Gdudr/cmD4Fnrg+loPnmwDMM8Gmf6xaVf4266us=)
                          3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
                          4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
                          5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
                          6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
                          7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:d0:bc:ee:fb:8b:0a:ec:29:b8:e8:80:fd:17:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Oct 26 00:00:10 2025 GMT
            Not After : Oct 27 00:00:10 2025 GMT
        Subject: CN=476b63afe9436902a53b09e9d0617db46e7ead6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:6f:d1:1f:80:a2:fb:96:00:2f:83:00:c6:
                    9f:38:a4:e3:7e:54:18:0d:2f:0f:ba:e9:36:88:65:
                    96:43:d5:c3:8c:c8:e2:ff:9b:31:d6:da:cf:2e:dc:
                    76:cf:ab:dd:cd:ad:61:5d:fb:5a:77:4d:e9:17:97:
                    a5:fb:43:ad:4c:06:89:a9:bf:71:5b:e2:34:3d:66:
                    e9:f4:1a:20:6a:be:29:2d:fd:48:ac:ba:17:19:4b:
                    79:02:ed:31:b9:ea:42:f6:53:95:43:84:60:52:d6:
                    de:e4:9a:e6:2f:1a:43:79:8e:e1:97:59:08:ac:5b:
                    c1:90:3c:ec:68:f6:c5:61:5d:71:09:57:fb:4d:5e:
                    61:21:85:0c:a9:d7:6f:69:ed:10:42:60:fa:a7:49:
                    b8:71:e9:e1:29:a1:02:27:0c:05:5a:7c:87:bb:b5:
                    ca:e9:76:21:1b:28:fb:81:3d:03:67:f5:2c:a8:bc:
                    d1:bb:08:6e:c3:68:c5:7c:ca:38:15:39:79:a7:c1:
                    ab:09:a0:f7:7d:52:bd:9c:ce:5f:5e:9f:f7:67:60:
                    a6:8f:84:0d:dc:e8:ff:a2:b8:3a:aa:60:8c:76:66:
                    d3:33:aa:77:b3:1e:60:35:87:f3:03:a0:43:b7:1a:
                    12:19:cd:f2:a4:37:50:35:e7:42:1d:68:bf:bd:1b:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6B:63:AF:E9:43:69:02:A5:3B:09:E9:D0:61:7D:B4:6E:7E:AD:6D
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:a7:27:e8:1c:bd:59:06:9f:13:76:95:7c:88:4f:50:0d:
         41:db:3d:67:fa:e0:c1:14:d1:fd:b0:11:71:aa:a6:b4:e7:24:
         8d:33:9f:2e:32:7e:c4:a4:33:47:64:d0:e9:e5:3d:d5:2a:2a:
         35:87:0f:d7:f1:1f:73:3f:37:96:0a:3e:16:c7:64:96:8f:ea:
         f7:02:cb:2c:26:aa:d6:d4:83:c1:0b:e5:c3:21:8d:b8:af:08:
         e0:45:35:66:53:8a:08:9b:4a:40:a2:06:10:e1:1f:34:b5:21:
         ed:3a:44:13:27:47:b8:d7:4d:1d:c1:4e:13:c4:ea:60:44:0c:
         0c:82:4d:13:63:83:a4:84:2c:32:ac:10:68:37:35:22:ad:86:
         82:cd:a6:d3:82:95:9e:53:51:dd:a2:33:d3:d2:84:2b:d0:32:
         98:44:d9:4a:5b:d9:7a:06:fe:d4:7d:5a:0a:8c:a1:ad:b8:f3:
         36:c0:7e:fe:a4:b8:91:89:37:de:68:66:57:64:68:a6:3e:12:
         48:aa:14:f9:56:f4:84:dd:e2:98:e8:f1:3a:2a:e1:45:6c:f0:
         ca:5c:aa:5f:b1:99:ed:70:79:76:d2:46:18:73:fc:f4:8b:3e:
         48:91:d9:c0:a8:0b:05:6b:7d:99:7b:44:ea:80:5a:22:6e:36:
         d1:26:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:17:33 2025 by rpki-client