Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          HQsBWUOSqUzFv5PeUxi62CKlzygU3KWGaQz/psxdLp4=
Subject key identifier:   F4:E1:0F:CE:28:18:BE:25:25:A2:4A:F6:BA:AB:CA:0B:E7:AE:0B:B1
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       019A4EF48ED0D73E90B018E5A0FFB5F03F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          1440
Signing time:             Tue 04 Nov 2025 13:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:41 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: CKA2xrnrv6K/AWQkw4MZ54CTKVMZxVmkOzoFFDAFzNA=)
                          2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:8e:d0:d7:3e:90:b0:18:e5:a0:ff:b5:f0:3f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Nov  4 13:00:41 2025 GMT
            Not After : Nov  5 13:00:41 2025 GMT
        Subject: CN=f4e10fce2818be2525a24af6baabca0be7ae0bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:76:e5:f2:74:8e:61:16:0d:3b:0f:ee:1b:
                    8e:3c:05:50:5e:b1:d3:19:0f:46:15:7e:a1:bf:aa:
                    56:c6:22:5b:b8:1a:68:f8:8a:94:3b:99:72:30:45:
                    65:9a:78:ab:6d:62:67:c3:79:7c:2f:76:1f:86:5a:
                    21:9d:a9:6e:3d:31:0b:dc:29:da:e9:6c:52:e3:e1:
                    9c:93:09:05:c8:7a:37:c7:19:bd:03:50:4d:89:07:
                    7e:1f:70:2f:5e:79:ba:97:8d:e0:29:f5:b9:e4:3e:
                    85:06:74:4a:b1:ae:01:99:54:54:50:44:9f:08:9d:
                    6b:f5:e2:63:41:29:83:e1:6a:6f:54:47:c5:37:d0:
                    13:2a:dd:ad:24:1f:d0:01:f8:75:b8:13:a7:4f:87:
                    c5:7b:20:a7:36:88:ee:d8:58:cc:1f:40:df:ce:67:
                    38:0d:b9:15:ea:37:b1:65:13:8c:df:35:db:a5:4a:
                    3c:d6:01:3a:40:92:c4:b0:5c:b0:44:50:d1:b8:cf:
                    84:fc:ed:a7:a2:cd:c9:d0:0e:80:20:d2:66:a9:fc:
                    16:f2:e2:23:13:57:ad:6b:43:bb:5d:b5:8e:16:9a:
                    f6:2b:61:77:d9:2a:f4:d4:30:cc:64:cf:de:22:66:
                    b3:85:1a:c0:fa:47:60:ec:48:79:59:59:71:c2:5e:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:0F:CE:28:18:BE:25:25:A2:4A:F6:BA:AB:CA:0B:E7:AE:0B:B1
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:52:b8:f5:b9:39:6e:e3:ad:60:08:de:93:43:c7:40:f0:c0:
         28:17:28:4f:01:8d:99:6d:12:8d:77:b2:86:c3:cb:8b:b0:30:
         45:f4:af:81:6f:8d:0c:c0:61:b2:77:2d:e1:16:8d:c3:fe:65:
         08:1f:2a:94:18:d0:20:d8:3a:10:97:b5:9d:89:05:bc:30:cd:
         19:e6:97:86:d9:f5:94:9d:31:b0:ce:39:55:9f:31:ec:f9:47:
         16:d5:f4:25:a4:0d:54:c1:bf:2c:ba:cc:8b:f3:08:82:6b:ab:
         49:90:6c:85:17:d0:70:67:bf:78:fd:06:a0:ca:0f:28:24:eb:
         9a:ea:08:b6:1e:66:43:58:2c:27:1c:91:aa:77:8f:ca:c8:12:
         ac:ef:c7:2d:f4:f1:ae:e0:a4:c2:94:1e:d3:58:28:b7:44:f0:
         83:26:a6:fc:44:8d:fb:cd:4c:dd:48:ef:76:62:ae:ed:ca:b0:
         fb:24:09:75:f7:5d:95:52:22:43:1d:c3:f5:85:9b:d1:95:a9:
         af:f3:7d:eb:bc:78:9e:95:f3:79:97:4f:22:92:ad:21:b9:58:
         eb:90:1b:5b:0f:b0:28:d5:62:71:3e:60:98:20:a3:3d:db:03:
         2a:64:e8:41:c0:4e:71:2a:ec:98:d6:eb:fd:e4:81:33:db:bf:
         ff:ad:72:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:09 2025 by rpki-client