Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          +cnLXkFSZsaPGalCtv8+apaoWi+AOrYpIl33v+aDHug=
Subject key identifier:   B3:21:D8:B7:B2:9F:71:DB:0B:3B:F8:8A:88:86:E6:6A:A7:CE:69:BF
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019A51F5877DFF1DFB05D87A1139DDEC83E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0DF5
Signing time:             Wed 05 Nov 2025 03:00:36 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:36 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:36 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: HAlmChnc3UYUXEIXqQ8FWQ0XNp2DVvSn79RWBy9pfCE=)
                          2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:87:7d:ff:1d:fb:05:d8:7a:11:39:dd:ec:83:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Nov  5 03:00:36 2025 GMT
            Not After : Nov  6 03:00:36 2025 GMT
        Subject: CN=b321d8b7b29f71db0b3bf88a8886e66aa7ce69bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:4f:b1:01:c7:f8:c1:52:82:f6:58:e0:26:
                    73:92:a7:d1:d7:db:a9:f5:0f:71:66:ac:82:52:9f:
                    b3:1a:41:0f:53:96:97:a4:db:8c:6b:bd:3a:b1:de:
                    d2:7b:23:67:f0:0b:3c:81:ed:9e:56:dc:41:3d:0a:
                    c4:6f:8a:7f:db:26:f3:fe:95:23:80:f5:de:58:e5:
                    e5:1c:00:d0:c2:93:5e:17:f7:a8:07:45:0d:fe:1f:
                    c5:3e:0f:2b:02:65:66:f4:7f:82:0b:62:5a:23:71:
                    6c:7a:de:4b:04:d1:7a:9f:6f:be:09:44:d3:01:82:
                    0e:a3:e4:38:fb:7c:2f:43:4f:36:09:2e:9d:60:c6:
                    14:47:7b:17:e9:db:ac:cf:75:e6:46:18:cc:ce:bd:
                    c5:86:79:74:a4:db:a2:1a:bb:28:1c:f5:fd:8e:66:
                    1d:fb:ca:d1:60:b0:6d:bc:79:a7:3f:8c:1b:a3:aa:
                    02:8b:67:ab:4d:47:b8:a7:70:11:c1:c7:46:6b:83:
                    19:b0:33:79:12:24:bb:a8:59:12:62:09:94:2a:8e:
                    f5:a4:24:74:1a:6f:77:e7:99:e5:50:d1:7e:14:a0:
                    84:a9:28:08:ea:3b:f7:73:74:83:b0:3d:93:a3:12:
                    00:34:a0:01:f3:43:0f:3b:a3:ba:91:9e:42:1c:22:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:D8:B7:B2:9F:71:DB:0B:3B:F8:8A:88:86:E6:6A:A7:CE:69:BF
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:d2:d2:db:06:39:87:4a:51:f7:b8:50:46:9c:a8:a1:09:
         3b:29:00:d5:6a:c9:96:94:98:30:34:4e:43:ea:1a:13:18:7d:
         60:5f:7e:f3:56:f4:14:62:11:f6:3b:4d:da:9c:b6:0a:c3:a2:
         68:4c:31:61:49:81:c8:77:f9:73:b9:63:8a:d9:d2:b9:87:e9:
         3c:3b:75:15:be:c1:9c:55:76:62:c7:6a:fe:02:a3:f7:28:df:
         69:59:09:e1:ad:57:8e:04:a4:36:31:d1:ff:8d:bd:f4:6f:6c:
         43:09:f6:63:ef:6f:65:3f:f9:bd:f6:fe:d3:af:6d:d1:6c:32:
         1f:13:ad:9e:98:3c:2a:67:08:23:ed:4e:57:4c:56:ff:8a:31:
         54:d3:53:2e:e5:be:d0:ed:64:e5:74:7d:c0:1f:e6:07:6c:3d:
         77:e4:51:33:d1:ff:30:f5:df:fa:fe:3c:eb:ac:06:3e:55:ce:
         b6:be:9b:68:b0:df:39:27:de:69:b2:66:79:63:40:b5:41:3d:
         c9:8c:69:d7:7a:17:58:f6:38:44:04:75:55:d6:bd:34:da:1a:
         a4:d1:e4:4e:f0:f2:57:60:26:8a:52:72:55:ea:72:1e:9f:22:
         41:45:66:cc:bb:b8:a3:04:f4:2a:a7:59:b6:07:8a:72:9f:3b:
         f8:d6:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:59:26 2025 by rpki-client