Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          8YVqWyNOB5Gpigy+rotqt+vUxnNmhucdwJ07TcVxAwc=
Subject key identifier:   7A:1B:E3:80:E6:B2:C7:EE:3C:A3:70:FE:F7:D5:25:44:62:D0:F3:60
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019A29D4E9F7AD241CB38F2120EF2B847D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1710
Signing time:             Tue 28 Oct 2025 08:00:10 +0000
Manifest this update:     Tue 28 Oct 2025 08:00:10 +0000
Manifest next update:     Wed 29 Oct 2025 08:00:10 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: PNj/C19lcY/mAON9mPLa5ecUPHFbMk5oEWH+c7PF8GE=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:d4:e9:f7:ad:24:1c:b3:8f:21:20:ef:2b:84:7d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Oct 28 08:00:10 2025 GMT
            Not After : Oct 29 08:00:10 2025 GMT
        Subject: CN=7a1be380e6b2c7ee3ca370fef7d5254462d0f360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:03:ae:d8:f3:89:ed:a5:7b:58:f5:f6:3e:
                    c5:bf:1f:6e:99:19:47:56:c8:6c:2e:75:c0:6a:92:
                    7f:39:9f:ba:63:f8:b3:e0:06:ef:58:3d:1d:59:7e:
                    54:02:2d:40:97:0d:14:bf:a4:ec:62:52:18:41:d3:
                    9a:de:2d:b0:7c:60:94:89:88:90:0a:c4:7e:9b:43:
                    51:c0:1f:db:22:78:8f:10:f5:21:6d:16:4b:fa:86:
                    cc:cd:35:20:e0:33:6c:8e:46:b9:0d:d0:c2:91:bc:
                    20:ce:ca:66:1a:6a:91:96:59:33:dd:f2:47:f8:df:
                    1c:f8:08:85:f7:67:e6:7b:9b:4a:0b:c7:03:45:4c:
                    d2:be:c5:a0:b9:e4:0b:50:b3:0b:1b:b5:4a:7c:db:
                    f4:23:03:22:e7:90:97:54:b9:5d:21:34:ed:64:0b:
                    11:79:30:75:c1:ad:c7:fa:f3:78:58:02:d1:6e:96:
                    23:be:85:33:0e:b4:18:79:05:b5:57:91:de:6f:69:
                    dd:be:3e:90:3e:bb:5c:9a:25:d7:6c:78:43:e0:a1:
                    ab:22:1b:9e:12:38:1b:74:15:cb:9d:2b:c5:33:ab:
                    62:4b:43:9e:ae:3b:de:5c:0f:84:51:f6:0e:01:67:
                    2c:a7:9b:c1:91:5d:39:f0:a0:b2:09:e4:07:95:f9:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1B:E3:80:E6:B2:C7:EE:3C:A3:70:FE:F7:D5:25:44:62:D0:F3:60
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:01:97:b7:c7:b9:34:61:7a:ba:3c:09:62:b3:ad:13:47:
         65:7f:f5:40:dc:1c:99:bc:ce:4a:b7:68:ae:cd:87:4f:8c:3f:
         41:ec:78:e8:6d:00:5a:ec:c3:b4:7e:81:e6:fb:96:0b:70:fc:
         60:fe:b8:be:95:39:5f:8c:9b:d4:21:ac:93:27:dc:26:3d:d0:
         bd:24:d5:f2:14:16:61:32:aa:3d:c2:80:9e:39:21:78:4e:be:
         77:0f:72:bb:50:dd:e7:72:1a:26:00:51:91:b1:40:57:a0:76:
         39:da:81:6b:9a:65:67:a3:e5:6c:69:15:dd:98:f3:b0:e7:75:
         8c:15:09:1f:ff:22:ba:43:7f:65:a1:7f:0d:ce:cb:ef:e8:82:
         50:06:ad:9b:e4:dc:23:37:ab:a7:9d:ed:d8:4f:2b:1c:94:13:
         9a:36:8a:fa:26:72:02:01:e9:f1:4b:96:85:fa:bc:6e:77:43:
         93:fa:7b:90:ab:cc:79:9f:ea:09:ba:05:c2:fc:5f:6a:ef:ad:
         17:a8:60:11:82:b9:eb:b9:d6:d9:1d:70:c8:65:1d:37:db:20:
         47:a3:63:cc:b0:a0:fd:54:68:f7:a0:69:89:23:ef:1c:e8:8b:
         a9:49:5f:48:ec:18:c9:91:9b:05:3b:ea:32:56:a6:b6:12:61:
         5a:75:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:56:37 2025 by rpki-client