
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          R/lBdgy0fgmLyDTWECYJ/mFQCh7QxNrJ+iVNW4YoA3g=
Subject key identifier:   5A:DF:FE:21:CF:43:36:84:3E:6B:D3:02:E4:9B:4B:85:6B:E3:22:D5
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       019A1EADAD83EE3310A087438CC2FFF695C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          049D
Signing time:             Sun 26 Oct 2025 04:01:29 +0000
Manifest this update:     Sun 26 Oct 2025 04:01:29 +0000
Manifest next update:     Mon 27 Oct 2025 04:01:29 +0000
Files and hashes:         1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
                          2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: opxazxRhNsCYIr/2hz6quEBcqzenzjZHpOdPBEEp7Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ad:ad:83:ee:33:10:a0:87:43:8c:c2:ff:f6:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Oct 26 04:01:29 2025 GMT
            Not After : Oct 27 04:01:29 2025 GMT
        Subject: CN=5adffe21cf4336843e6bd302e49b4b856be322d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:d6:21:46:d5:0f:76:3b:8f:40:78:77:42:
                    de:97:13:a1:c3:93:f6:f1:ea:cc:00:21:3f:05:4f:
                    ef:73:2d:fa:71:f9:92:4a:1a:89:03:51:86:b3:e5:
                    49:9d:ee:5e:15:46:98:d4:ec:da:3f:db:36:03:ac:
                    af:24:f2:d8:7b:1e:06:7c:2e:ac:bc:1c:f6:8c:08:
                    25:7b:4e:a6:3d:4a:88:40:ed:a1:cc:df:47:b7:61:
                    12:aa:26:18:21:67:d6:79:8d:e4:37:18:db:5d:1c:
                    58:2a:8b:8c:7d:72:95:bc:c9:8a:55:9d:c6:b5:a5:
                    ac:8f:35:30:80:ad:e3:d9:ba:9f:89:49:68:1b:c8:
                    73:94:c9:ec:9f:a7:68:f4:14:e4:b8:a8:2e:f4:50:
                    bb:68:58:18:f5:8f:cd:d2:3e:10:a2:47:e5:68:37:
                    c1:85:e1:57:03:98:68:0d:96:d2:f3:51:ab:a9:4e:
                    ff:82:92:87:de:bb:b9:44:5e:19:76:ff:b2:f7:87:
                    ae:0c:f1:4c:57:5e:69:d8:ee:68:05:23:f0:ad:6b:
                    4f:d2:ac:7f:a6:c4:50:e2:f4:1d:ca:ff:24:86:db:
                    db:55:3b:bc:17:e4:2c:89:d5:1e:86:be:f4:af:9c:
                    d0:70:80:68:ab:14:59:db:3a:06:00:67:e7:fa:3a:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DF:FE:21:CF:43:36:84:3E:6B:D3:02:E4:9B:4B:85:6B:E3:22:D5
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:16:42:a0:57:c8:ba:bf:84:a9:b6:ae:a8:21:de:f0:20:
         a7:5d:53:39:66:49:41:11:fe:1a:e3:52:d9:fb:2b:be:ac:07:
         9c:4b:54:be:5f:e1:2f:6c:6e:0e:3b:00:18:2b:ed:f4:7b:78:
         fa:df:1d:20:d8:44:99:94:66:b9:4f:cc:3c:c9:75:94:3d:10:
         33:73:21:cc:23:46:50:f9:9c:d6:37:41:fa:dd:42:98:9c:d8:
         68:5d:43:89:ae:39:d9:03:40:0b:c0:3a:90:d2:5d:53:53:3a:
         73:2e:be:2a:f9:1d:b9:53:71:25:81:cf:d4:0f:44:d1:4c:3c:
         49:0e:0a:aa:aa:8f:11:6f:b9:27:90:f9:ed:98:63:fa:10:71:
         5e:66:7f:4c:68:b5:dc:da:2c:49:98:90:ce:4e:53:1b:9c:2e:
         e3:20:17:6f:1e:05:cd:29:d8:83:89:b0:c8:ea:b1:43:a2:ac:
         16:a4:9a:d8:9d:c0:3e:4d:cd:44:f4:b6:3e:56:39:dc:bb:46:
         bb:68:b0:1c:e1:11:68:ac:0e:5d:cf:bf:23:4e:8b:77:7c:66:
         f1:70:54:44:cd:da:c9:71:6b:e6:86:aa:e8:75:e7:17:4b:92:
         19:6f:ba:b0:dd:85:d1:fc:ec:d8:a8:8f:85:10:1d:87:a4:93:
         ee:4d:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:36:38 2025 by rpki-client