Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          HfE4K4R2Xv0079dCfQqdZFIFv41OxPGEIOSr548EKmY=
Subject key identifier:   77:23:97:85:D0:26:80:E6:23:F1:47:D6:CB:E8:CC:62:6A:E2:FC:6F
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019A5150BC8B5AA01C7E46AF300F61E5BDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          1643
Signing time:             Wed 05 Nov 2025 00:00:36 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:36 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:36 +0000
Files and hashes:         1: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (hash: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=)
                          2: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (hash: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=)
                          3: SO2r7hsXMD0rXtOemxDNawKSwK8.roa (hash: 3SE/M/3jMxmStavB2oSEQ1ZOQCjp7NcclCdpHKXNutg=)
                          4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: Fhoc3XFGuYBTHrC7E+CQ/IkapopnRd+cK5/Dm6SsJmQ=)
                          5: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (hash: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:bc:8b:5a:a0:1c:7e:46:af:30:0f:61:e5:bd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Nov  5 00:00:36 2025 GMT
            Not After : Nov  6 00:00:36 2025 GMT
        Subject: CN=77239785d02680e623f147d6cbe8cc626ae2fc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:3c:f3:c4:ec:49:49:6b:b9:08:28:00:be:
                    11:5e:0f:39:31:2c:71:e0:16:1a:ab:1a:50:d3:dc:
                    64:c3:f9:aa:b7:a2:91:d1:71:90:2f:09:42:ca:c0:
                    c4:23:51:de:99:8a:f3:ce:ae:e7:e8:58:68:33:4b:
                    98:23:64:52:71:12:55:01:ca:6f:3d:db:f7:d1:a5:
                    31:92:74:91:c1:3c:15:79:ff:ea:0d:dd:8a:ca:43:
                    b1:db:b7:dc:e4:7f:41:f9:da:ff:12:6e:62:5a:0e:
                    26:40:c1:7f:8d:80:ea:7c:6d:3f:8e:47:02:03:f4:
                    2e:1e:de:a6:da:e5:5c:2a:10:0e:4b:9d:ed:59:2c:
                    eb:b5:dd:f3:ff:d0:bf:42:2b:a2:36:13:f6:df:8c:
                    30:d1:bb:a1:fa:9c:c0:a9:79:d3:4f:2a:9c:33:8a:
                    a3:c4:4e:76:16:f1:90:0f:1a:c7:bf:d7:06:7f:ae:
                    4f:2b:76:b6:52:d0:e3:9c:7d:8c:8a:9d:8e:bb:63:
                    8d:0f:e3:c5:e3:7f:5a:fc:f0:19:ca:10:98:d7:9b:
                    c6:e8:13:99:b6:c3:92:39:65:46:dc:f1:2a:6f:c7:
                    ba:76:a1:d3:ec:52:d2:4a:59:38:0c:ff:e2:20:b7:
                    77:5c:bd:37:16:34:ea:2b:be:10:cf:ad:91:6a:d2:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:23:97:85:D0:26:80:E6:23:F1:47:D6:CB:E8:CC:62:6A:E2:FC:6F
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:af:ba:18:71:c2:16:15:03:f0:a6:56:a8:58:b5:ee:a4:
         4a:72:70:bb:37:55:c0:60:12:94:da:66:bd:4e:a1:79:d9:85:
         e8:b0:54:58:69:3f:ee:72:a4:39:68:e4:af:7a:70:82:0b:5e:
         7e:f8:ef:5b:09:fc:31:5f:e8:88:44:f5:f9:c3:e9:be:f3:fe:
         df:e2:31:59:17:5c:e3:77:a6:a1:15:a4:e1:d3:bf:a9:a9:8b:
         1f:1a:cc:10:b2:47:cc:96:18:10:3a:a8:00:3d:1a:ad:48:1c:
         99:eb:ab:9f:a6:4f:1e:cc:33:0e:04:08:a7:19:32:d7:7a:b5:
         8f:a8:de:c7:ed:0c:81:7a:79:95:eb:29:71:6e:b4:0b:86:2b:
         22:02:c0:85:41:e9:b8:d8:52:da:9d:3c:41:af:da:29:bd:80:
         38:ba:51:bf:6d:09:2e:92:b1:b4:16:a3:f3:93:e0:78:28:2e:
         26:73:cf:60:48:58:ad:7d:87:40:8b:0f:34:10:ef:0a:b7:cb:
         01:fd:44:6f:9c:2d:b4:83:f6:ce:58:42:40:1e:58:94:7f:28:
         c6:61:82:82:a3:27:54:86:cf:70:f8:04:4d:40:d9:14:b2:c9:
         20:1c:76:bb:d0:20:5c:43:5d:c6:b0:c7:58:6b:97:b3:a5:86:
         9e:c0:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:52:03 2025 by rpki-client