Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File:                     t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier:          ynFMpJu2BRTgnMj7eHLymjSedvL2cFia0qqKDMVdeoI=
Subject key identifier:   13:71:61:3D:32:AD:40:53:5E:14:DD:8B:B1:F2:CF:38:92:C7:04:7E
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer:       /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial:       019A503E5A0178F3D7C37FF94096A0C0FB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number:          0F03
Signing time:             Tue 04 Nov 2025 19:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:54 +0000
Files and hashes:         1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=)
                          2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: 4p1rg5iIdhdFOEdWE+puUzdks0pn+FaZXLbrixe2Mgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:5a:01:78:f3:d7:c3:7f:f9:40:96:a0:c0:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
        Validity
            Not Before: Nov  4 19:00:54 2025 GMT
            Not After : Nov  5 19:00:54 2025 GMT
        Subject: CN=1371613d32ad40535e14dd8bb1f2cf3892c7047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:4b:a5:8f:b3:24:de:cc:7f:fe:e0:49:af:
                    ee:87:f3:74:9a:d0:d6:18:1c:ea:dc:25:33:c3:a8:
                    6a:25:56:06:29:9e:26:9c:e7:b3:26:f7:e8:f4:3f:
                    9a:88:7e:36:49:e6:56:bc:67:02:c7:eb:74:70:7c:
                    49:58:48:55:b3:29:b7:5d:c8:0e:92:b2:ed:a3:33:
                    35:8f:ec:6e:5a:93:cf:48:4c:f9:d3:61:b9:75:5c:
                    76:f3:49:c7:ed:e4:74:0c:62:f4:5b:6a:cf:cc:ef:
                    9b:54:c9:99:11:53:b2:5d:47:81:d1:72:45:af:e3:
                    39:ce:36:12:4a:76:73:a6:14:ce:b5:b4:e2:5f:a9:
                    10:73:8b:43:57:83:e8:34:18:31:34:52:c9:d1:37:
                    0c:65:06:3c:ed:85:9d:f3:23:37:8a:48:56:e1:57:
                    21:b4:c9:1c:62:92:54:ec:07:ec:ec:7e:34:61:0b:
                    4b:47:cf:96:9d:20:8f:11:6b:98:eb:e3:34:db:94:
                    d8:59:50:1f:ba:f5:60:38:e1:7d:06:7d:b9:f2:f8:
                    35:08:cd:ca:45:90:6f:c7:2e:f7:6a:2e:bb:e2:f4:
                    a7:1d:fd:5b:b1:5d:e2:c3:90:72:5c:6f:7c:c3:7f:
                    91:58:22:8a:fa:a0:b6:16:85:67:fe:95:f9:86:fe:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:61:3D:32:AD:40:53:5E:14:DD:8B:B1:F2:CF:38:92:C7:04:7E
            X509v3 Authority Key Identifier:
                keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:86:b4:3d:32:db:a6:0c:f0:13:7d:05:69:81:03:92:14:
         a0:d0:fd:fa:28:fe:ab:4a:72:b5:c3:c7:33:f0:f4:c5:e3:4c:
         6c:3d:58:03:e2:33:99:f8:d7:b5:d7:48:4a:73:62:10:04:b5:
         e8:70:97:d1:ff:db:18:8f:c3:b5:4a:74:b7:4c:b1:5c:1f:14:
         5e:c7:c5:5d:fb:92:69:34:fb:a3:57:d2:f1:6d:4e:be:f1:34:
         52:73:a3:dc:25:f5:da:8c:de:f8:d0:14:67:3b:fa:ac:62:05:
         24:e3:1e:bf:9c:f1:e3:0f:09:de:c6:65:80:b5:26:0f:46:6b:
         6f:00:f0:00:f2:a4:cb:6e:41:17:7f:ba:ec:1a:76:cf:52:68:
         26:0b:f5:bf:af:11:44:0a:09:81:cb:75:46:3c:0a:d6:80:a0:
         c4:fe:28:00:ae:c5:81:ed:ae:c5:53:62:29:f4:9d:52:b4:fb:
         74:c1:50:11:7e:c9:64:58:18:be:7b:57:f0:4c:b3:a8:1d:61:
         d7:9c:c2:a5:25:d8:0c:b4:32:3b:b3:4f:34:4a:a9:d7:73:5c:
         4a:10:56:62:76:dc:f8:95:7f:ce:89:72:20:ea:b9:79:d2:3d:
         8c:a4:95:cf:53:53:ea:d2:4f:65:9f:de:c6:0a:89:d8:ec:b2:
         52:5e:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:46 2025 by rpki-client