Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          +03KyD5VQkIvMl8l2R83uJJCQbg5gbQGRDCP71oUxuY=
Subject key identifier:   4D:B0:A6:B5:AB:4B:24:AA:C2:01:E3:13:54:EB:6F:45:CB:0E:CD:43
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       019A4DE2040C2332DBADDDB76A096502F091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0E5E
Signing time:             Tue 04 Nov 2025 08:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:49 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: gjl5dSkMcPo6uot0saQ/hGjqMHCDdvCgjepe4ydTfgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:04:0c:23:32:db:ad:dd:b7:6a:09:65:02:f0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Nov  4 08:00:49 2025 GMT
            Not After : Nov  5 08:00:49 2025 GMT
        Subject: CN=4db0a6b5ab4b24aac201e31354eb6f45cb0ecd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:34:7a:af:2d:8c:48:66:76:1b:c0:49:38:
                    0c:79:d8:e3:e9:9a:0d:91:8a:95:40:45:fd:66:85:
                    6f:0a:e3:75:45:d4:b6:09:9b:3f:67:ad:a5:52:4c:
                    01:24:62:07:70:a4:b1:f2:46:0c:d1:1f:b8:6a:5c:
                    8d:9f:da:97:9b:d5:ad:1f:f3:cf:eb:89:0b:6a:46:
                    ac:d2:08:9c:79:72:c0:ff:1a:5c:ba:29:21:33:d1:
                    fa:69:1c:4f:cd:b5:db:41:f6:6d:f7:71:7d:58:6f:
                    70:27:4d:44:6e:8b:85:b7:18:93:23:68:0e:55:50:
                    01:ba:ef:b8:23:29:50:04:a1:fc:e7:ad:cc:c3:63:
                    46:19:b3:22:d3:0e:96:2f:87:3f:05:c4:96:f1:1f:
                    19:f8:ec:66:e1:be:8a:f5:e7:eb:e2:45:50:83:95:
                    dd:52:dc:6b:6d:a9:9b:e4:58:ba:9f:98:b4:6b:dd:
                    cf:98:b2:01:30:0b:cd:7c:26:a5:09:17:2d:07:06:
                    1e:61:52:96:0e:7f:5d:b2:1c:cb:89:ce:39:54:60:
                    d5:24:91:1d:19:4f:a6:21:df:c8:85:3f:99:48:c7:
                    02:aa:76:65:95:65:08:a7:7e:81:1e:ca:94:36:89:
                    b1:b6:14:1f:df:f5:a7:76:30:c0:06:a8:55:c3:ef:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B0:A6:B5:AB:4B:24:AA:C2:01:E3:13:54:EB:6F:45:CB:0E:CD:43
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:61:f4:ea:ec:e6:d6:21:35:71:76:d0:8d:53:83:7c:7c:c6:
         92:0d:cb:03:23:8c:d6:59:f4:33:7d:36:54:cb:2c:c9:a6:2e:
         40:c4:58:68:bb:83:13:0b:98:ec:83:b0:f2:8e:bc:82:ee:69:
         12:4d:14:8b:8f:a1:a4:ce:93:a7:88:c6:17:05:8d:22:a2:3d:
         45:94:0f:33:03:44:cc:c9:88:5c:ff:49:10:74:68:cd:a6:41:
         e0:bd:b0:7b:ea:d1:8a:e7:38:45:20:07:38:86:cf:49:74:c4:
         ed:82:b3:56:6f:6e:1b:86:98:c4:07:2a:3a:9d:46:81:29:3c:
         0e:cc:2d:d9:48:6f:fc:8a:b7:f4:df:0a:25:53:e8:74:14:77:
         aa:0e:86:cc:f0:90:56:23:8a:63:97:a6:50:54:aa:ec:15:7a:
         cc:df:c1:94:e8:56:f8:4e:6b:c1:b6:8d:8d:91:b1:47:94:f8:
         e2:e6:b9:29:a5:53:53:46:c1:bd:d8:f8:79:7a:d6:3e:84:f7:
         6d:14:e0:a4:f3:02:a8:84:46:5e:f6:49:8d:ad:51:a8:96:60:
         16:aa:3f:57:5b:07:47:c3:86:c3:36:07:1b:ad:77:43:dc:d9:
         37:75:8e:8f:98:a7:23:4c:32:09:a7:7d:e4:71:0c:ad:31:f0:
         f3:61:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client