Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          +wIuubgyz8vCc7fVQu94u7DeE7jlrf+nWDJ9TPCzjNE=
Subject key identifier:   54:FB:47:1A:ED:F1:56:F0:18:2F:7E:8F:29:E9:58:69:A6:9D:69:A6
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019A4EF584433BA871E3C5B4D57DE3CBDF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 13:01:44 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:44 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:44 +0000
Files and hashes:         1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: eAM5LFkFkKowUVN+n6FW83TQtBK8QJNSaFM6YAhybVI=)
                          2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=)
                          3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=)
                          4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=)
                          5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=)
                          6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:84:43:3b:a8:71:e3:c5:b4:d5:7d:e3:cb:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Nov  4 13:01:44 2025 GMT
            Not After : Nov  5 13:01:44 2025 GMT
        Subject: CN=54fb471aedf156f0182f7e8f29e95869a69d69a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:aa:33:c7:0a:47:7c:51:1d:6d:1d:b6:a5:
                    05:11:a0:99:02:db:2c:fc:17:fb:99:be:98:14:b8:
                    c2:05:c6:f5:83:93:43:4d:b8:21:10:d2:4c:a8:fb:
                    f8:1e:44:50:c4:c2:ae:cf:0a:35:e2:ad:3b:90:c6:
                    be:10:ac:76:a8:58:83:83:0c:6e:fb:9c:fe:20:07:
                    98:54:16:dc:ef:7e:47:2a:8b:7f:2a:ab:b2:30:ba:
                    52:a1:bb:24:d0:03:d7:ef:f6:27:6f:b5:71:a1:d8:
                    61:6d:b0:32:09:85:73:c8:81:2d:e6:c4:29:23:67:
                    24:42:47:b6:7c:8c:07:c4:00:ab:1c:df:f4:ef:41:
                    ff:7d:91:27:13:9f:fe:88:6f:61:11:d6:3d:69:ce:
                    61:af:b2:1e:25:a0:d5:76:fe:26:55:ab:89:d6:4d:
                    98:59:15:0a:29:e1:d1:e7:d8:80:41:15:a3:61:1e:
                    6e:9f:82:7f:51:9f:58:2d:16:c2:ee:a9:06:f3:0b:
                    c9:68:73:d7:26:b5:47:b1:19:56:b7:2c:c1:44:79:
                    f3:82:d9:16:cc:37:68:fb:28:10:46:4c:25:15:a5:
                    c2:e4:9c:40:b5:70:12:30:52:7d:32:26:21:67:b4:
                    f6:a7:5b:27:b5:ea:cc:64:98:20:0b:d0:00:fb:e9:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:47:1A:ED:F1:56:F0:18:2F:7E:8F:29:E9:58:69:A6:9D:69:A6
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:eb:b0:dd:ec:75:01:1c:76:83:55:3e:d2:a2:b1:95:88:a6:
         3a:81:1a:45:bd:27:7d:54:3c:3a:e2:af:7f:08:fb:97:e0:c5:
         69:7b:81:cb:fe:e4:9f:95:49:2b:db:d7:3e:78:ae:2e:e6:cc:
         88:00:71:f0:34:bd:2c:48:cb:53:f8:87:b7:b2:73:98:7f:03:
         7c:b6:42:13:53:e1:a4:b7:79:22:1d:81:31:b6:6c:15:c7:b3:
         5b:90:6b:65:b6:6e:f1:ae:60:29:4d:40:3f:cc:7c:81:45:e0:
         ae:9b:96:cb:e2:16:a9:17:f8:45:b3:5d:a8:85:58:34:81:a9:
         79:45:b4:dd:eb:68:2f:b8:c9:63:91:99:9d:19:8a:ea:36:92:
         b1:99:60:d3:f7:b6:5b:ad:ec:15:ed:b4:20:5b:14:04:7e:7b:
         9a:8c:b8:4a:ca:4a:1f:3c:1a:9e:0b:82:e3:4e:ed:99:65:16:
         4a:ab:60:28:9e:f1:9b:7a:61:a6:f9:b3:73:91:54:79:57:80:
         d3:e2:1d:a4:2d:3e:b5:4f:ae:94:73:42:d1:37:da:dd:5c:87:
         9d:ff:bb:00:59:52:75:dc:d8:24:63:11:e8:05:23:ef:64:7a:
         b0:e3:aa:13:6f:4b:2d:a4:dc:f2:cc:62:10:6f:1b:07:b4:6b:
         61:98:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:01 2025 by rpki-client