Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          /of9VqJ1Id/zsBW1hYLt58L5zlZ+81/WIgArw9wlVIk=
Subject key identifier:   FF:4D:A2:A1:E8:D9:B5:8E:2E:3C:AA:42:49:AF:E5:D0:9D:8F:CB:A7
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       019A4FD0045B96DB669A766230E2955869AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          13F8
Signing time:             Tue 04 Nov 2025 17:00:23 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:23 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:23 +0000
Files and hashes:         1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: 6bNqhFIoP5IJ7RW3hPByVSdrobGVETB4BhcFwa7518c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:04:5b:96:db:66:9a:76:62:30:e2:95:58:69:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Nov  4 17:00:23 2025 GMT
            Not After : Nov  5 17:00:23 2025 GMT
        Subject: CN=ff4da2a1e8d9b58e2e3caa4249afe5d09d8fcba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:cf:e4:ff:48:40:22:8e:6d:1e:09:3d:f7:
                    85:cd:75:b6:e3:26:5e:9a:97:76:c5:14:47:2a:e8:
                    2c:41:68:f5:87:52:af:15:b6:c1:34:53:fe:cf:ab:
                    0f:ef:94:b6:ab:c7:39:bf:9a:88:8c:7a:a8:0d:33:
                    3b:52:86:f9:d9:0f:72:14:76:3c:e0:77:8f:30:12:
                    a0:87:e6:18:c3:96:93:b8:c7:90:e2:19:25:d0:fc:
                    45:a0:9e:83:fa:4f:00:67:69:e6:ea:d9:75:62:44:
                    11:59:ac:52:e9:ae:66:be:e2:ce:64:99:aa:b4:b8:
                    40:17:c0:9e:9a:7f:5d:75:31:aa:86:94:8b:96:78:
                    87:c6:83:cf:f1:3f:95:60:7d:75:77:84:f7:00:cf:
                    1e:a6:13:89:c8:22:bd:fc:9e:2c:48:bf:1b:31:46:
                    ab:9d:c9:5f:46:b7:81:f1:04:31:1a:1d:e9:80:91:
                    3e:f2:37:ff:d5:6f:5b:d4:db:88:a0:84:0f:5a:db:
                    4b:1b:aa:ab:ac:92:b0:e5:45:be:15:00:9d:27:64:
                    7e:23:11:42:74:a3:bb:57:d6:09:d1:2e:d5:65:f9:
                    45:6a:b0:01:33:98:7c:47:0b:bb:eb:99:54:5d:2f:
                    43:30:b3:41:86:57:1b:d9:97:2b:d3:98:c0:a6:85:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4D:A2:A1:E8:D9:B5:8E:2E:3C:AA:42:49:AF:E5:D0:9D:8F:CB:A7
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:27:0a:04:86:df:ce:61:77:a4:71:cf:70:2a:08:6c:46:
         96:df:b1:d1:ee:f9:4e:6a:ca:59:6c:a6:63:12:73:48:70:24:
         09:c6:64:e5:2e:0f:37:be:7c:13:7d:4f:88:b9:fa:ac:53:2b:
         b9:15:33:6a:9e:18:e7:fa:7f:6a:f9:bf:8e:20:b7:6e:f5:7f:
         aa:ee:fd:ce:02:6a:37:54:33:ed:a3:af:70:21:ba:75:03:33:
         85:d8:3f:87:1a:1e:43:b8:c1:ee:d1:f8:ef:c0:22:f6:61:a4:
         e5:e9:e0:93:28:ac:c2:da:a3:62:0f:f7:52:74:58:da:5a:d4:
         33:aa:04:49:63:cd:24:d3:f3:d6:70:13:fd:d4:54:9d:9c:bf:
         9b:33:d9:fe:15:32:5a:57:12:ac:01:aa:30:6d:38:55:5d:3f:
         5b:60:5d:34:b4:1e:23:41:eb:5e:1a:d7:8c:ae:72:77:33:d1:
         64:fc:78:c1:73:87:d7:4a:b0:cf:12:e8:ff:72:e9:19:43:3a:
         29:02:ee:9b:65:54:4a:94:05:ce:36:4c:33:56:f4:f4:57:f9:
         51:61:ca:9e:44:cb:95:4b:ba:72:bc:4b:96:f8:6a:5a:0f:a3:
         57:f3:26:4a:d4:a5:8c:54:4b:e6:95:2b:4f:77:78:94:e5:39:
         bd:9e:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:44 2025 by rpki-client