Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
File:                     1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json)
Hash identifier:          q+Ecjppmn2Mx0FfazozkLc49HORTEBkugcO/58riTdk=
Subject key identifier:   9E:14:23:99:02:50:D5:CA:20:68:2D:19:56:D6:C1:63:88:D9:C3:2F
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Certificate issuer:       /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial:       019A541AD8838267CFDA058DC7DD3C21FEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
Manifest number:          171B
Signing time:             Wed 05 Nov 2025 13:00:36 +0000
Manifest this update:     Wed 05 Nov 2025 13:00:36 +0000
Manifest next update:     Thu 06 Nov 2025 13:00:36 +0000
Files and hashes:         1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: aBY/iae/XkJqiRwse1MeobTrxBFzvsa1bNpwBM8ndgQ=)
                          2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=)
                          3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=)
                          4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:1a:d8:83:82:67:cf:da:05:8d:c7:dd:3c:21:fe:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
        Validity
            Not Before: Nov  5 13:00:36 2025 GMT
            Not After : Nov  6 13:00:36 2025 GMT
        Subject: CN=9e1423990250d5ca20682d1956d6c16388d9c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:60:a1:c7:5b:c6:20:de:b3:38:04:e6:19:
                    dc:99:16:0f:a5:1d:d0:01:4a:93:cf:31:67:50:dd:
                    77:9a:45:25:1a:79:b9:db:cd:1d:c4:fd:3f:94:b1:
                    96:d7:47:c2:32:20:fa:d4:51:0e:be:52:53:c2:b1:
                    3c:34:ec:92:52:db:20:80:90:7a:a4:38:86:1f:13:
                    b7:f9:ba:d0:0f:97:17:ad:e3:ae:05:23:e9:b5:4b:
                    11:77:13:ef:d0:62:bb:42:63:0a:70:1a:83:e0:a9:
                    9b:46:f0:33:b6:98:63:34:2c:39:95:e3:bd:07:b9:
                    2c:87:82:bb:2e:8c:29:e7:be:15:55:60:48:63:c8:
                    1c:72:79:63:d9:c7:16:95:6a:05:4d:be:46:7e:2a:
                    e4:7a:2d:1b:8c:22:d6:b4:97:ea:f7:ea:b1:b1:a1:
                    30:8f:d6:e4:15:d9:a8:62:31:fe:27:d5:c5:d9:d4:
                    88:29:0a:c0:df:af:11:7c:a9:b4:c3:04:22:04:b3:
                    aa:6a:ae:68:6a:06:f7:17:5b:48:98:6d:86:14:da:
                    17:4e:a9:a6:75:5e:42:ae:d6:a0:0c:cb:5b:a1:91:
                    3e:c5:b6:36:ce:d4:2f:5c:47:33:3a:2e:58:a9:c5:
                    0d:4c:45:5a:42:e6:a3:bb:25:37:30:33:6f:0d:34:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:23:99:02:50:D5:CA:20:68:2D:19:56:D6:C1:63:88:D9:C3:2F
            X509v3 Authority Key Identifier:
                keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:9a:e6:a9:80:5b:1a:d4:f4:66:8c:27:18:07:bf:71:96:
         84:11:ac:42:71:25:5d:6b:f1:b6:19:7a:d2:15:4b:ad:10:b9:
         c7:9a:4a:04:ff:ad:11:17:d5:7b:b1:d9:d7:47:54:fd:08:59:
         26:06:43:b7:77:a3:9d:f5:8b:51:c9:76:5a:57:d5:21:42:4a:
         87:60:54:2b:82:55:72:63:ea:8f:25:13:e5:80:36:58:28:11:
         67:01:0b:fe:a1:24:4f:22:0b:9e:e8:cc:f8:73:cc:ce:38:54:
         b5:24:28:f4:9f:e6:e9:7f:1c:06:22:81:db:c7:c6:20:0f:84:
         e2:fb:d2:4d:20:81:2c:fa:48:68:ca:de:1a:1b:40:66:56:a2:
         4d:97:83:7b:38:80:13:7a:30:69:b6:05:f0:bf:f7:9d:e0:f3:
         35:48:fe:5a:95:1c:04:e5:86:6b:f3:01:39:4e:87:5c:3b:01:
         c2:f6:50:aa:ce:19:7c:0e:51:76:9f:21:08:71:d9:44:14:62:
         fa:b4:c8:59:f5:fc:3d:b0:e0:a9:01:52:b1:c9:63:c4:56:5d:
         09:f2:9a:0d:7e:32:d1:d8:ee:e3:b0:bf:35:7c:9d:b4:70:c8:
         12:9a:df:5b:10:a0:ce:a8:25:6d:4d:0a:3e:0d:61:29:97:b3:
         a8:42:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:21 2025 by rpki-client