Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          oMPTSRNKum0Nlki/HhEOjmizhrcymbWiIxPpK8NtJAc=
Subject key identifier:   5E:F3:24:5B:1E:68:15:5F:3C:74:57:41:71:CE:5A:76:B2:CB:04:87
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019A5074A0D0A71E37B0315CC4576A84E067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          116F
Signing time:             Tue 04 Nov 2025 20:00:11 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:11 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:11 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: DiG0+mFQGEl+fP6JhmLQDtvDfZ7/DJ7Mq9o1T9i4fqA=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:a0:d0:a7:1e:37:b0:31:5c:c4:57:6a:84:e0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Nov  4 20:00:11 2025 GMT
            Not After : Nov  5 20:00:11 2025 GMT
        Subject: CN=5ef3245b1e68155f3c74574171ce5a76b2cb0487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:eb:f3:4e:51:91:50:55:2f:1d:9e:83:44:
                    7d:9b:2c:54:69:1e:42:1d:b1:f1:d6:4e:00:57:eb:
                    56:07:25:40:47:fa:02:51:e1:3c:5c:fa:c2:fd:de:
                    4b:7c:41:db:3e:e4:e7:80:a4:3d:5e:49:16:be:c6:
                    18:09:c6:a5:4f:6b:15:74:a5:cb:d7:50:38:d9:9f:
                    73:50:cb:e6:aa:d7:34:f5:a2:da:cc:ad:49:f6:d3:
                    22:e8:b4:d1:f8:0d:39:22:6a:f4:66:a5:e9:03:56:
                    90:e2:d4:5f:20:40:8c:1d:22:a7:77:2f:4b:69:45:
                    23:da:0a:d7:a8:47:be:c6:5a:ce:18:81:87:f4:78:
                    84:08:de:e9:8d:e7:3b:01:6e:d6:b6:cc:98:7c:b7:
                    16:2a:68:dd:2a:f9:8d:68:db:81:ed:f4:3f:c4:e6:
                    38:2c:13:db:b1:ef:5c:f2:c8:38:ad:11:74:54:79:
                    49:36:e9:81:87:3f:55:fa:51:fc:68:5e:d6:d7:12:
                    45:ff:aa:4c:3d:dd:29:6d:b5:59:2c:75:85:cb:15:
                    4b:b4:d1:44:9e:35:f1:7e:6c:35:ca:05:e0:db:1e:
                    3d:14:8a:0b:13:11:8a:6f:63:78:07:a1:70:78:e8:
                    41:64:98:61:0f:63:03:d1:db:2f:42:ae:5f:46:19:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F3:24:5B:1E:68:15:5F:3C:74:57:41:71:CE:5A:76:B2:CB:04:87
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:a2:b7:f3:33:6c:3a:70:71:cb:bb:9b:a3:7b:e9:ae:d0:
         dd:90:1d:de:76:b8:15:60:8d:9d:a7:66:be:38:fc:86:29:1b:
         25:b1:c6:c8:23:40:70:49:d9:70:76:2e:cb:8e:1f:ac:9d:4e:
         39:4b:10:1f:fa:aa:c7:de:de:bb:4e:68:d9:00:55:30:4f:15:
         3e:44:15:77:56:19:c2:be:1c:96:ab:36:c5:b4:0f:68:bd:d8:
         40:9d:9e:8e:73:1e:07:c1:c5:4a:02:41:0b:be:07:a5:ce:80:
         e6:7b:ee:78:1c:4e:9c:05:8e:4e:21:d6:7a:02:2f:80:cf:c0:
         e2:61:8c:15:ae:07:75:bc:0b:9c:ba:e0:7b:b9:cb:93:37:82:
         43:ff:50:f8:04:21:f4:31:96:09:40:b8:6d:14:d7:7c:dc:a6:
         d6:eb:fb:d7:d4:25:f4:2d:55:02:f8:60:b7:1f:68:2f:1d:b0:
         d6:db:de:3e:6a:74:8f:6e:8b:fe:71:76:7b:50:1d:04:b2:36:
         68:d8:e6:f2:77:9c:fd:47:ed:27:05:f4:d1:59:da:a9:99:ce:
         c7:d9:1a:7a:02:1e:ab:3a:bf:34:8a:9d:37:ec:fd:9e:e2:c4:
         5a:cd:2c:eb:bb:3b:cd:7e:ca:38:93:ad:a0:1e:c2:6c:07:2a:
         98:a6:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:11:17 2025 by rpki-client