Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          w6dCGqQW6JvWgWdiTsxIU6/7wjoKRoT7yA8UxChmadE=
Subject key identifier:   CF:78:F1:D9:9C:17:71:77:10:B4:80:40:B3:77:5E:28:11:22:8B:23
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       019A5307B4F54CF85300A2001EB83A05A481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          1710
Signing time:             Wed 05 Nov 2025 08:00:04 +0000
Manifest this update:     Wed 05 Nov 2025 08:00:04 +0000
Manifest next update:     Thu 06 Nov 2025 08:00:04 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: PVSEwP83nX5Bgkp0PCEwWUTczckCKfBxpjcdGBSEhdY=)
                          2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:07:b4:f5:4c:f8:53:00:a2:00:1e:b8:3a:05:a4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Nov  5 08:00:04 2025 GMT
            Not After : Nov  6 08:00:04 2025 GMT
        Subject: CN=cf78f1d99c17717710b48040b3775e2811228b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:6b:41:ec:4c:10:b7:2b:87:89:05:21:fd:
                    bd:95:1f:4f:2a:11:85:6c:0a:79:27:ad:aa:11:d1:
                    c3:48:eb:97:73:1f:00:3b:a7:59:a1:b8:4c:3b:db:
                    ff:2e:2f:e0:68:67:1a:d2:54:2f:4b:25:aa:fd:ab:
                    ec:eb:ef:9b:66:45:87:2f:a1:8e:37:11:94:4f:c9:
                    30:9d:1c:2f:0c:17:30:d7:c0:22:78:27:27:9f:e1:
                    09:cd:09:9c:d2:be:14:29:05:d5:a5:8c:1f:28:87:
                    dd:fb:53:72:6e:eb:2c:9f:63:c1:0f:9a:2f:95:92:
                    69:cf:f9:0b:39:52:24:39:3e:45:9d:f1:f4:21:62:
                    e2:9c:d8:df:44:e4:29:52:06:6c:0f:1a:8a:16:df:
                    b2:1a:c0:7f:f9:e8:94:ed:76:8e:e9:cb:9b:75:e8:
                    ac:5a:2d:70:18:87:62:72:c5:6a:8b:9c:7b:f6:24:
                    44:f0:48:0d:29:51:f5:6c:c9:24:9b:d1:7d:f1:a0:
                    7a:a5:d4:94:b5:b0:4f:90:53:38:d8:c5:e0:15:e5:
                    e5:31:fe:40:e9:71:d6:1a:f7:e3:68:da:73:22:52:
                    86:93:e3:1d:48:f9:b0:2d:03:e1:23:f4:24:2d:62:
                    d9:c7:4d:ee:75:34:f6:f0:ba:a4:7b:8e:3b:d5:9f:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:F1:D9:9C:17:71:77:10:B4:80:40:B3:77:5E:28:11:22:8B:23
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:7f:2e:5b:cc:3e:a5:f9:e2:c4:16:64:d9:a2:c7:41:57:
         3d:9a:f8:30:f3:23:7e:4b:5f:47:9f:0b:5a:4e:f5:a2:f4:ec:
         b4:db:ea:50:a0:11:38:8e:0f:9d:92:2f:ff:b9:f0:e1:24:87:
         6a:29:8f:00:6d:9b:69:ff:70:87:54:fe:b3:f7:17:11:02:72:
         95:1b:5f:03:09:f5:e9:be:c7:74:38:05:bd:eb:af:95:05:fb:
         91:72:e9:21:f4:e8:cf:94:e0:1c:2e:4a:18:c5:24:f5:7f:23:
         83:3b:ed:07:2a:56:ca:64:c7:f0:63:36:57:37:e7:b7:bb:11:
         88:cb:28:c6:3c:8d:3e:6a:bd:1b:c1:37:f1:2f:b5:69:af:8b:
         01:c6:3a:78:d0:b0:26:6b:14:fc:a3:57:0a:ea:f5:75:e9:61:
         6d:d0:a6:82:fc:b7:ac:a5:9f:b7:6f:26:a5:df:3b:43:e9:e6:
         65:ac:83:e9:67:e6:e0:cb:38:5d:2d:98:38:d3:86:34:e0:c8:
         2f:db:4f:52:b0:1e:2b:70:64:96:c2:fc:8b:6a:53:44:00:47:
         69:28:f5:47:36:60:dd:11:07:02:1f:cf:2a:0a:92:44:7d:a6:
         16:74:fd:25:d9:fa:fd:6b:4e:60:f0:d9:61:48:95:4a:9e:dc:
         02:c8:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:13:28 2025 by rpki-client