Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File:                     CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier:          Z+7mfG1XJt9WlaBPzn03VdlFokDmOKRWj1qXXHmkTks=
Subject key identifier:   2F:29:81:A6:29:18:A0:9C:F2:31:A4:9E:6F:71:8C:AF:81:48:36:93
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer:       /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial:       019A53AC9180D67C69FE48856BC980F64022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number:          114A
Signing time:             Wed 05 Nov 2025 11:00:09 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:09 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:09 +0000
Files and hashes:         1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: F1jfcUJ48LM7zcIYK4Q/358ptRIDjUr/shnUjL10mEo=)
                          2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
                          3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ac:91:80:d6:7c:69:fe:48:85:6b:c9:80:f6:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
        Validity
            Not Before: Nov  5 11:00:09 2025 GMT
            Not After : Nov  6 11:00:09 2025 GMT
        Subject: CN=2f2981a62918a09cf231a49e6f718caf81483693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5a:23:7f:0f:29:64:31:bf:87:5d:42:32:60:
                    79:31:96:65:35:2f:e1:0f:de:d9:44:0c:3f:66:c9:
                    0b:44:a5:de:64:62:ff:4f:48:89:24:6d:ae:f9:52:
                    cd:15:02:36:5d:86:a5:1b:c0:cd:15:78:b5:93:98:
                    7e:f7:50:95:c1:70:36:23:68:29:8b:79:06:8e:33:
                    62:cb:7d:53:72:40:83:f4:20:b7:72:e5:d9:17:61:
                    d7:08:8e:74:5f:d5:e2:df:31:7b:15:41:31:4a:4f:
                    25:eb:c5:8b:79:a9:51:f5:35:67:eb:fd:25:dd:f4:
                    2b:79:59:24:89:22:65:c3:44:0e:49:b6:a4:6c:a1:
                    39:0e:50:8d:63:56:0b:de:40:5a:e6:cf:16:cb:54:
                    3f:13:06:52:83:c3:20:de:96:7d:b6:45:81:3e:4f:
                    6b:b7:b4:bb:e0:7f:d6:95:ee:a9:5f:32:8e:93:d0:
                    fb:88:b3:31:07:6b:8b:ca:08:05:a0:56:72:7b:39:
                    5b:01:85:28:ec:c4:a5:0c:70:75:c4:c7:de:53:3c:
                    f9:a3:fd:79:13:14:22:42:c4:36:97:10:93:7d:50:
                    3d:84:c0:da:c9:1b:f1:fc:49:79:f0:1b:de:a3:5a:
                    d0:92:11:44:0b:43:d9:89:64:78:a5:2d:6d:5f:1d:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:29:81:A6:29:18:A0:9C:F2:31:A4:9E:6F:71:8C:AF:81:48:36:93
            X509v3 Authority Key Identifier:
                keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:d8:37:ca:26:46:7b:6c:a9:02:1c:71:9a:26:8a:97:4f:
         c1:49:ba:c1:8f:57:f8:34:f2:cb:2c:b3:91:91:63:39:fc:67:
         b2:90:fc:90:93:37:19:85:f9:be:68:82:28:fb:45:51:0b:e3:
         d0:24:74:89:48:a5:d5:64:09:ab:03:ce:83:28:f6:67:52:f9:
         85:af:c0:d7:d5:f1:f0:81:1c:21:4a:37:9b:7b:6d:18:67:29:
         54:1d:87:e3:7a:ce:6a:2a:5b:50:ce:92:01:4d:66:eb:92:e6:
         49:0f:21:73:01:60:d3:b0:eb:a2:56:0d:7f:4f:57:ce:03:fb:
         a9:d8:d2:77:ff:c6:0b:ff:2e:18:42:6a:3c:98:c9:5f:ed:44:
         6d:46:ef:ee:dc:15:97:09:01:44:e4:be:65:25:ca:09:ea:84:
         53:8a:eb:35:74:1f:22:c0:55:7d:e2:f1:cf:f3:d6:1d:f8:e7:
         d8:45:50:e0:bc:e9:cc:45:04:dd:e9:d2:13:3f:f4:53:1b:b1:
         80:6b:c6:34:c2:01:55:85:cb:b3:80:eb:0e:35:c6:c9:fb:b4:
         3e:17:46:78:8b:ba:a2:76:66:42:5f:6e:4d:72:9a:39:32:22:
         0a:26:e2:1e:48:e9:a9:e8:e0:b9:41:13:1f:0d:2d:d8:0b:53:
         ca:38:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:56 2025 by rpki-client