Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          CUEWRknZCYjV/IYQXEDuBo5A5NWJnlYoWNlBxHMSvWs=
Subject key identifier:   69:D3:4A:EE:BE:8D:29:6C:EA:B7:22:3D:B6:83:B9:DA:91:8D:6C:FD
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       019A0AEEFB9F61C03CCB2F62710A484DDBF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0F0A
Signing time:             Wed 22 Oct 2025 08:00:25 +0000
Manifest this update:     Wed 22 Oct 2025 08:00:25 +0000
Manifest next update:     Thu 23 Oct 2025 08:00:25 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: hTmfgUBlcLP4Ehbo2k8/Fco4UYfHZbm4ZhZf7lLZW70=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:ee:fb:9f:61:c0:3c:cb:2f:62:71:0a:48:4d:db:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Oct 22 08:00:25 2025 GMT
            Not After : Oct 23 08:00:25 2025 GMT
        Subject: CN=69d34aeebe8d296ceab7223db683b9da918d6cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:50:5b:c2:c4:d3:a8:ed:90:3e:3c:65:db:
                    39:c7:ec:0e:67:d7:53:18:e3:55:da:0c:b8:93:3d:
                    45:b9:4e:1f:40:bb:3b:11:c8:31:11:c4:6d:57:9f:
                    dd:af:ee:52:ec:aa:f4:e9:5c:e2:b7:82:b4:7f:51:
                    54:65:23:90:9f:2d:d0:dd:8e:80:cd:8f:1c:3e:9a:
                    8c:4e:de:63:8e:57:64:03:74:00:fd:89:70:59:0f:
                    3d:2e:69:e7:dc:64:b7:61:5b:9a:32:5c:4c:31:1e:
                    0c:b3:72:28:07:ea:58:23:c2:a1:62:dd:f5:a6:33:
                    9a:11:97:fe:fc:8b:39:9d:c7:a7:d6:19:7c:8b:c2:
                    29:83:89:8f:96:61:38:63:55:1d:9b:b7:fb:34:bb:
                    16:17:4e:b0:ad:b5:b0:e1:9c:cc:8d:5f:01:7a:bc:
                    12:a9:65:39:6f:71:eb:5f:b7:88:d2:fe:2e:ca:91:
                    61:ec:66:c2:61:78:4c:a5:38:0c:c3:3b:c1:91:de:
                    c5:cb:8c:65:3e:11:7b:f8:90:d0:8f:c5:80:37:8d:
                    7b:6b:eb:5b:e7:c2:3d:dc:46:5c:b4:b7:12:4d:8d:
                    25:c7:fe:11:a4:c2:89:95:87:89:8a:32:f7:19:8f:
                    87:b1:94:df:7a:4e:f0:41:5c:cb:68:a7:38:30:dd:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:4A:EE:BE:8D:29:6C:EA:B7:22:3D:B6:83:B9:DA:91:8D:6C:FD
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:a2:9f:c1:ed:14:88:13:2a:f1:1c:e5:42:49:1a:f8:87:
         01:c0:8f:a3:58:80:18:1d:c5:d4:6b:2e:1f:9d:3b:8c:e7:a4:
         08:4a:7f:88:b0:b4:cc:fe:54:8f:ce:29:d8:ab:57:ba:64:cf:
         5f:8d:c0:b5:31:43:57:8f:21:68:4a:51:bf:a0:9c:46:6a:bc:
         50:c1:41:ed:16:6f:e3:71:bf:f0:a8:19:62:34:10:23:d5:6c:
         b4:ab:a5:20:63:59:c2:71:1b:08:20:c4:ab:98:c6:64:e5:e2:
         1b:6f:bb:fc:bc:0e:3f:62:6c:14:f5:d2:4c:27:87:5e:83:bb:
         c9:1f:81:62:66:e1:de:1b:fc:ca:9e:50:fe:ab:af:be:b4:8e:
         95:b0:d8:e4:32:b5:51:74:15:91:d8:b8:f5:cc:ea:4d:ae:74:
         48:f8:58:81:8c:4d:ac:a8:75:b8:26:ef:7b:b5:e3:9a:86:0e:
         36:d0:ca:92:de:5b:26:49:6a:86:4d:8f:3c:99:2f:d3:5d:0b:
         f5:3c:c4:48:00:7b:a8:8d:a7:d6:9a:64:eb:de:1f:67:29:cd:
         c0:71:b9:cf:9c:d1:7f:29:2d:7b:a0:33:09:07:ee:9c:9a:81:
         0d:4b:c8:14:69:94:07:b2:79:c3:6b:64:1d:58:ea:97:ea:fd:
         92:33:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:40:16 2025 by rpki-client