Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File:                     1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier:          tnnlp4oFTxBi4AH2YLwlpXNgDEOGALD6cvsweSZuuoo=
Subject key identifier:   94:D6:02:B3:E3:6B:69:2D:9C:A8:B7:BE:98:9F:BD:E4:B5:F9:FF:C0
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer:       /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial:       019A5676C054454AF6C92342ADF9304683CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number:          9D
Signing time:             Thu 06 Nov 2025 00:00:14 +0000
Manifest this update:     Thu 06 Nov 2025 00:00:14 +0000
Manifest next update:     Fri 07 Nov 2025 00:00:14 +0000
Files and hashes:         1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: vb2nACSZxfqs5co9IKjcNeondOUP0c1e4Ro6atNZgJ0=)
                          2: _uXBkuhUshA9qmVceLo2r4NfxjI.roa (hash: eLDt5MUCNFk11wBf0J4j69ReU2zTScT7dm7QbxFh55c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:76:c0:54:45:4a:f6:c9:23:42:ad:f9:30:46:83:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
        Validity
            Not Before: Nov  6 00:00:14 2025 GMT
            Not After : Nov  7 00:00:14 2025 GMT
        Subject: CN=94d602b3e36b692d9ca8b7be989fbde4b5f9ffc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:08:53:86:11:d9:de:39:fa:17:45:09:24:
                    4e:11:03:14:03:73:52:1b:88:15:1e:32:d9:9f:f9:
                    e4:45:d7:f6:be:0b:2c:ee:64:f9:0d:9b:24:5d:9e:
                    6d:da:b2:3a:56:5d:43:cc:94:20:bd:d4:6d:5f:d4:
                    20:63:66:3e:25:b1:11:34:34:bd:be:42:76:ef:a8:
                    de:e5:6c:0a:f1:fb:4d:ba:c1:3c:6a:cc:55:a2:5b:
                    13:4e:e8:a3:db:c1:3a:11:61:51:95:08:60:42:aa:
                    a5:9c:51:4a:b8:a9:18:81:d4:51:4e:ea:ce:67:15:
                    9d:39:96:cd:ea:2a:04:16:0c:9d:95:5e:d9:09:25:
                    ea:cc:aa:cf:e0:89:42:97:8b:14:97:f1:08:60:de:
                    53:40:be:03:7a:0d:e9:de:bb:7a:eb:ad:ad:ec:1d:
                    a5:68:60:d6:f6:6b:86:90:68:d0:7c:e0:3b:16:49:
                    4f:14:cd:3a:77:9f:1b:35:38:cf:64:7f:8d:9f:61:
                    16:e1:31:f7:65:ee:9b:6b:68:61:c6:db:9d:5c:f4:
                    67:84:e9:a9:43:85:44:14:2c:f4:59:8d:59:94:3b:
                    26:b0:f1:65:75:b6:b1:e6:f5:73:04:59:7f:8e:40:
                    2b:d8:5c:03:b7:64:8d:ff:4b:e0:75:17:02:0e:dd:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:02:B3:E3:6B:69:2D:9C:A8:B7:BE:98:9F:BD:E4:B5:F9:FF:C0
            X509v3 Authority Key Identifier:
                keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a1:1f:8f:60:7e:b8:44:1b:f5:14:f9:78:72:fa:f2:fa:60:
         1c:a7:c0:26:83:53:48:47:f3:d2:2d:97:2a:4b:cf:d6:68:41:
         c3:c7:6b:12:34:8f:5d:b7:35:ab:8b:ae:d0:cc:62:42:8c:8e:
         ea:0a:f1:58:e5:8a:89:16:8a:da:6c:f9:8b:e4:62:b0:47:4a:
         ae:dc:7f:e2:c6:cf:30:56:80:be:2b:1b:fe:89:03:5d:3f:1d:
         9e:9e:f4:ce:99:44:e0:b5:9a:15:54:a7:a7:f4:e8:da:68:d4:
         3a:fa:37:84:04:19:1c:3e:80:e8:15:06:a8:98:af:6d:8d:48:
         24:b8:f4:55:94:ac:a4:d5:02:35:3b:0e:c9:09:2f:85:27:c7:
         bc:d6:fd:6c:f6:63:58:52:cf:d4:07:dc:02:ce:5f:cb:1a:f4:
         3d:a9:42:52:0b:9f:59:59:67:a8:71:f4:4c:7d:d5:b0:cb:6c:
         28:87:be:82:19:fa:c0:ed:fa:de:8f:2c:82:72:cb:0a:f7:be:
         c3:96:a4:f7:86:f3:f8:4b:0d:b0:53:bf:32:5f:c0:5f:5b:e9:
         19:6c:f7:10:f8:73:1e:f2:71:fd:ce:c9:1b:e0:68:94:a0:e3:
         73:e3:47:ca:95:8c:2e:7a:9a:9c:ac:32:e6:63:83:0e:a5:9a:
         e3:9d:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:29:13 2025 by rpki-client