Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          F+aC6MgfEqTLrlYbMl6e71/Fm2PDzqRniZvQ2CE92Gk=
Subject key identifier:   96:73:4B:E6:69:B4:7A:BD:DB:24:F7:0E:22:F3:29:0B:17:9E:CA:DD
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       019A533FA40D9E3752BC0B2C5892C8424F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          1304
Signing time:             Wed 05 Nov 2025 09:01:10 +0000
Manifest this update:     Wed 05 Nov 2025 09:01:10 +0000
Manifest next update:     Thu 06 Nov 2025 09:01:10 +0000
Files and hashes:         1: _h71B272PJZJXIBvxnSAiFkPc3o.roa (hash: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: sjZwlIEzwn6185YclAXXVqOPCpf++2+ynkW8D5uYKpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:3f:a4:0d:9e:37:52:bc:0b:2c:58:92:c8:42:4f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Nov  5 09:01:10 2025 GMT
            Not After : Nov  6 09:01:10 2025 GMT
        Subject: CN=96734be669b47abddb24f70e22f3290b179ecadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:c1:a1:7b:f9:22:d5:04:8c:19:e7:0d:1f:
                    84:98:29:a8:6a:6d:5c:a3:4a:6e:8d:26:e3:36:e8:
                    bb:e2:37:09:8f:8f:b0:75:65:28:e3:cc:66:8b:a0:
                    af:eb:1d:f8:4d:24:5b:45:33:32:88:b8:bc:cb:b3:
                    bd:6a:c5:ec:09:51:80:ed:78:85:f3:6d:fe:83:ef:
                    b8:57:79:31:66:96:aa:fb:22:94:20:e2:c6:a4:b5:
                    3d:83:88:69:9a:95:6c:40:1a:3b:06:c0:5f:02:fa:
                    da:6c:54:ed:df:c1:ba:23:ba:30:a1:7f:24:ca:26:
                    6e:ea:13:38:c4:ed:22:91:f4:19:da:c6:66:05:e9:
                    b0:6f:fb:4f:bd:ea:1e:ae:a3:f2:59:0d:f6:16:c8:
                    66:1f:7d:6f:95:36:4e:84:5c:ae:e3:71:69:df:ba:
                    d1:04:91:17:73:4c:dc:c5:cd:52:68:26:d3:79:ba:
                    31:85:03:ea:d3:92:0a:db:06:13:a6:68:5a:85:7b:
                    48:f3:48:13:b5:24:96:cc:48:f3:f1:77:32:53:3c:
                    70:42:f3:f5:b6:3e:79:f7:a2:d7:5a:02:ef:50:b3:
                    46:78:c7:12:84:3e:e8:0b:47:19:9b:bc:fa:93:25:
                    6f:2b:56:7f:5f:dd:48:d7:dd:3b:96:df:e5:83:2b:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:4B:E6:69:B4:7A:BD:DB:24:F7:0E:22:F3:29:0B:17:9E:CA:DD
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:b9:93:a5:5d:22:ab:87:6f:03:03:1e:89:58:3e:51:dc:c1:
         47:f4:11:69:fe:0c:65:f9:ac:e3:85:1d:f4:61:4e:80:47:53:
         60:b3:d6:1b:e0:26:7f:4d:e0:59:86:0a:fe:2c:20:a3:54:0d:
         4a:64:50:19:b6:a4:3c:4f:40:91:aa:3a:b9:de:f9:d7:17:eb:
         66:8a:c3:7b:6a:d4:6d:97:bd:ee:2e:34:b1:1b:17:36:79:d3:
         ba:e1:98:9f:74:87:44:47:1e:20:ef:29:fb:94:19:c9:71:50:
         5c:30:7b:93:fb:0d:49:2f:c0:b8:d2:80:6b:11:a4:8f:27:6f:
         85:70:d4:af:05:3a:26:fe:2c:2d:2a:be:31:d8:48:9b:af:ee:
         b1:9d:00:6a:15:27:3a:5e:e4:72:55:a2:d4:4c:e1:52:2e:f1:
         97:0f:3f:06:b9:fc:ab:af:32:25:ad:a1:8b:65:c7:10:2d:91:
         29:af:fa:3a:49:e9:9d:c7:59:04:43:f6:8f:a2:62:b6:3f:a1:
         5f:23:29:91:39:cf:76:0c:69:1f:24:e2:9e:a4:36:cc:99:5d:
         da:c0:e4:c6:bb:89:50:04:58:9a:04:a0:52:e7:46:46:1d:b5:
         e7:5f:ac:16:ef:d4:f0:22:1d:e4:3b:95:c0:92:e5:ff:fb:43:
         04:33:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:59:18 2025 by rpki-client