Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          S6MGPGg1o9mfrZI729pHneGNIfqZ71sxG0kCyBZ5QkU=
Subject key identifier:   BE:A3:E2:EB:35:FF:C8:0D:1D:77:BA:EB:A7:47:A1:B3:5C:11:24:78
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       019A5375F4209FCFE2773E53BFB3B47D9BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          1596
Signing time:             Wed 05 Nov 2025 10:00:30 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:30 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:30 +0000
Files and hashes:         1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
                          2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
                          3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
                          4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
                          5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
                          6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: f55MYJ6v87bqYz1w/plj+3jUJ36oQlLTBBavmy1YN8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:75:f4:20:9f:cf:e2:77:3e:53:bf:b3:b4:7d:9b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Nov  5 10:00:30 2025 GMT
            Not After : Nov  6 10:00:30 2025 GMT
        Subject: CN=bea3e2eb35ffc80d1d77baeba747a1b35c112478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:f6:13:c8:5b:a9:d0:50:d7:dd:4f:b8:8a:
                    ab:ca:6b:1f:46:3b:87:c1:07:80:f4:9e:8b:29:d6:
                    f7:d6:75:b2:45:e6:0c:8d:4f:69:c1:90:65:a2:bf:
                    24:42:06:38:5d:6f:73:d1:4b:f9:06:6f:5c:75:df:
                    34:88:e1:bc:a5:ac:db:b5:42:26:5e:e4:f7:79:f0:
                    7e:00:9e:fb:72:60:7a:59:d7:32:d5:50:f4:1b:cc:
                    52:dd:91:ae:0f:06:8c:06:d5:fb:b9:dd:ff:d5:9a:
                    66:dc:3e:3a:79:6e:c7:84:2a:10:8a:f1:50:34:d3:
                    dc:7e:7f:f7:b1:75:f4:81:a1:81:e2:f9:6d:42:13:
                    59:e4:b7:45:d8:77:42:f7:48:50:dd:f6:3a:4b:8c:
                    e1:c1:8a:4f:6d:03:76:a2:22:bd:83:05:71:96:e9:
                    60:1e:22:c4:5b:2a:17:ff:a0:21:e5:e7:a4:bb:d2:
                    c6:79:08:a0:5c:82:a1:33:14:d9:c2:47:21:83:75:
                    f4:ba:15:f7:0f:a6:eb:9f:ba:ef:3d:05:27:c3:45:
                    60:45:ed:f3:96:b6:80:15:b6:8f:8c:a4:72:95:62:
                    9c:ce:2a:d5:19:af:7f:86:dc:f8:95:7a:e6:25:1c:
                    5a:a1:03:49:c3:9d:de:a1:37:d9:e2:50:04:6b:95:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:E2:EB:35:FF:C8:0D:1D:77:BA:EB:A7:47:A1:B3:5C:11:24:78
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:e5:d5:f8:3a:02:50:bc:14:ba:ff:06:d9:1d:e5:a2:5d:
         9d:90:da:12:10:2a:9c:03:7d:b3:35:84:e6:6f:51:cd:0d:ef:
         89:b9:60:36:09:e8:f8:2d:db:9d:58:26:81:86:74:48:8e:73:
         f6:b1:74:80:47:d8:8e:35:0f:07:d8:ee:11:ef:07:a0:85:4c:
         20:b7:4a:79:30:f3:d5:79:c0:eb:35:fc:fe:58:0c:37:14:9f:
         ae:03:75:6e:7e:1e:8f:86:d2:08:5c:2c:f9:40:92:a4:97:07:
         85:3e:18:e8:37:68:ab:c1:20:47:97:00:6e:3f:cd:8d:5b:1b:
         d5:50:b5:12:6b:d9:af:84:83:cc:d7:b6:cb:20:ec:77:a1:3b:
         f9:e1:e2:8f:30:ce:18:5a:85:a2:cb:2f:3b:ed:49:51:28:55:
         2b:66:e5:6b:dd:5c:0a:5f:af:4f:7e:fd:7b:b9:0d:c6:1c:7d:
         5a:36:3a:05:fd:69:20:f9:96:51:48:8f:c0:28:15:99:a7:ce:
         2f:01:50:fd:3b:70:4e:5b:27:c7:08:2d:e4:b8:bc:55:8c:e0:
         27:4b:27:f6:2a:af:1c:03:3b:6e:c8:71:b2:88:e8:e5:f6:f3:
         c0:ac:12:c5:0a:ff:54:b5:e0:f4:8b:25:c7:b0:d0:09:97:65:
         e9:b0:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:56:33 2025 by rpki-client