Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File:                     aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier:          iHHdswaogfKZ0fA12t1vcIrd2MnY5aAKXSq8jG19lc4=
Subject key identifier:   B0:A0:AD:40:AF:3F:3E:DF:BB:00:65:53:1F:9C:3A:57:12:8E:86:3E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer:       /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial:       019A51511679DC9641E013F5EBFE4EC0B9E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number:          086C
Signing time:             Wed 05 Nov 2025 00:00:59 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:59 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:59 +0000
Files and hashes:         1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
                          2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: ztTaeReVhTjsK7Mezyg0owqCsndSJbzBAehizREjJmE=)
                          3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:51:16:79:dc:96:41:e0:13:f5:eb:fe:4e:c0:b9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
        Validity
            Not Before: Nov  5 00:00:59 2025 GMT
            Not After : Nov  6 00:00:59 2025 GMT
        Subject: CN=b0a0ad40af3f3edfbb0065531f9c3a57128e863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:b6:52:5f:bc:10:81:f8:b1:81:10:8d:82:
                    62:70:7b:85:2f:5e:d2:a8:20:1d:c7:99:e3:b0:6c:
                    70:f7:32:aa:88:fd:4c:a0:5a:bf:27:53:47:6e:b7:
                    b3:e4:7c:5b:6a:e8:6e:9c:ec:e9:aa:35:ea:28:79:
                    8f:71:4d:3f:fd:0b:3c:f2:93:76:53:d6:db:4f:80:
                    81:ee:db:f5:3c:e1:48:2b:b2:29:c2:27:1b:95:76:
                    7f:d5:9a:15:68:9e:93:81:48:49:4c:35:c9:cd:7d:
                    fe:8d:bf:7d:0d:ff:90:3a:2d:35:43:4d:1d:72:fc:
                    75:28:46:89:52:65:c2:b6:37:21:18:9a:50:07:de:
                    ee:24:78:89:ea:c0:8b:cf:7c:67:1f:da:86:bb:62:
                    d3:81:13:e8:71:fd:9e:9b:14:a2:8c:ff:5b:dc:40:
                    b7:9f:a7:6f:2f:97:c3:f0:8c:ce:fa:d7:51:35:a1:
                    04:5e:fd:c2:2e:b5:ee:f4:f7:b2:42:69:18:e3:03:
                    8b:6f:51:d7:97:45:fd:6a:8f:39:61:59:f0:ac:5f:
                    19:3e:2a:43:de:21:45:f1:43:c3:02:36:dc:61:4f:
                    10:57:fb:2c:07:2a:41:16:3e:b5:36:96:76:7f:f5:
                    9d:2f:02:0e:c5:06:5a:83:a8:37:59:e5:ab:aa:8d:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A0:AD:40:AF:3F:3E:DF:BB:00:65:53:1F:9C:3A:57:12:8E:86:3E
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:0a:9c:c8:16:9d:44:75:27:c9:73:22:44:e0:20:c5:ad:
         cd:6c:ae:63:e8:2e:3f:60:a9:e5:fb:f8:30:48:2e:71:81:76:
         6f:be:ca:18:f6:b1:05:62:53:a1:bd:ac:43:99:48:d9:91:34:
         72:fe:ee:58:3e:c8:e8:2e:50:7f:23:48:df:3b:0e:d6:9b:0f:
         b5:be:59:8e:13:b4:e1:ed:af:89:e1:32:f6:7b:8f:df:e7:ea:
         49:2d:39:8d:11:b1:8d:a0:be:16:80:c3:6f:1e:25:52:2f:06:
         35:6a:01:7c:2a:bb:b9:b7:62:2c:05:a4:8a:f7:1f:2d:a3:81:
         cc:1f:63:d1:74:71:1e:bb:1d:40:15:13:cc:c0:c5:37:87:d2:
         0d:85:47:35:84:eb:4c:5a:a6:53:29:f1:52:f5:01:a2:2a:c5:
         6e:d9:b6:55:47:21:04:90:f5:2a:76:6f:9c:9a:e1:6d:29:6d:
         d1:03:30:b3:c2:49:f4:fe:03:2c:21:c4:b7:2f:d9:e6:cc:ab:
         90:c7:53:b6:e2:c1:91:21:4a:ed:5d:cc:df:1c:5f:ad:c0:66:
         ce:59:31:be:2a:11:2e:cb:d9:c2:48:c9:c2:65:60:05:22:c7:
         c5:50:cf:63:c9:ce:44:73:80:26:39:a9:fe:fd:fe:4d:9f:7a:
         2b:bf:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:09 2025 by rpki-client