Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
File:                     Myrs0kO-9YfIebv-H-TFpb6zNFU.mft (raw, json)
Hash identifier:          rCuIOYb7yXf36PBeju4JWF1BSP0D0+K9HgfNoLSqtxM=
Subject key identifier:   EE:52:A3:19:CD:7D:C0:06:1A:4E:D1:A6:85:43:45:87:99:F2:DF:34
Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Certificate issuer:       /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Certificate serial:       019A53E432B6E279259EEDBF1FB60735790E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
Manifest number:          B9
Signing time:             Wed 05 Nov 2025 12:00:55 +0000
Manifest this update:     Wed 05 Nov 2025 12:00:55 +0000
Manifest next update:     Thu 06 Nov 2025 12:00:55 +0000
Files and hashes:         1: Myrs0kO-9YfIebv-H-TFpb6zNFU.crl (hash: JwpsP8kv+vFt88+dgHpflcQ2jii+nNsqNHMnTwkLH9o=)
                          2: YCOzpt6m55VdUCTyaUiIpHbbaAw.roa (hash: 8KEhXczZ5fk5hHX3jazf7zw7DRdBM2iZ9Jxn8A/DTF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:e4:32:b6:e2:79:25:9e:ed:bf:1f:b6:07:35:79:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
        Validity
            Not Before: Nov  5 12:00:55 2025 GMT
            Not After : Nov  6 12:00:55 2025 GMT
        Subject: CN=ee52a319cd7dc0061a4ed1a68543458799f2df34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:53:bf:e1:4a:42:db:b1:af:bd:45:b5:f0:
                    60:93:fc:c1:1b:a1:36:e7:3d:38:b1:c4:fe:ef:d4:
                    27:31:4f:40:3c:1b:84:76:17:87:82:9b:2b:7a:f4:
                    4c:02:47:95:9d:de:7d:a2:53:f6:5a:ee:4b:69:d9:
                    54:5c:d2:24:f0:76:de:79:48:72:63:4c:b5:9d:a1:
                    8e:b2:ac:b0:16:a9:ce:19:b0:89:bb:2d:02:cd:c6:
                    7d:66:10:77:f0:4b:d7:f5:d9:83:0e:ef:d0:24:02:
                    46:12:37:63:58:5e:98:27:40:97:37:d1:61:0b:57:
                    cd:c2:fb:cf:40:3a:6f:ce:6c:c4:39:34:10:96:8a:
                    da:43:26:a4:a3:04:8f:f3:55:39:15:89:35:d8:13:
                    07:08:4b:65:85:6c:a2:ce:6b:33:a2:83:2a:6e:11:
                    fb:e9:17:c0:c3:e3:6e:ca:c5:34:6b:4a:aa:85:e2:
                    04:ec:5d:40:fe:85:85:c9:6a:67:4f:b1:10:76:7c:
                    08:5e:5b:bf:60:ea:b4:d9:3e:f1:09:16:cd:9e:7f:
                    e5:71:38:6b:42:ac:81:30:4d:8a:28:ee:7b:ba:fa:
                    9d:fc:2b:8d:03:ce:49:a0:d5:d4:a2:a6:af:ea:75:
                    de:ed:f2:8e:5f:63:50:30:77:ec:18:ae:0b:e6:d9:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:A3:19:CD:7D:C0:06:1A:4E:D1:A6:85:43:45:87:99:F2:DF:34
            X509v3 Authority Key Identifier:
                keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:56:94:a6:66:b8:1c:0f:90:01:19:f1:f1:d0:1f:0a:42:1e:
         58:a8:b4:a9:8b:87:23:f5:b8:80:1e:20:a1:47:e7:bc:9b:f0:
         eb:82:3a:e0:72:93:6a:af:42:9b:dc:00:be:2a:6c:1b:35:44:
         0d:85:f2:47:6c:f8:f6:21:7e:45:9a:57:2e:f8:57:3e:a1:57:
         9a:4d:f4:0b:f6:d2:15:23:79:8e:3c:ba:26:1d:41:9a:f3:cb:
         0b:c1:ff:ee:a6:c6:1e:39:4c:2e:51:2a:82:14:7d:82:0e:c4:
         c7:63:b6:f6:0c:ae:54:2a:f9:5f:36:70:c1:5f:ae:5b:63:cf:
         4c:b3:64:10:fe:e4:41:8f:43:c7:cf:65:34:74:19:92:fd:e3:
         db:8b:19:24:02:d6:80:46:29:92:ff:fc:a6:6b:c4:b4:5d:77:
         e7:c2:1a:39:db:67:84:24:66:67:9b:d4:d9:35:61:26:18:fa:
         17:8e:87:b0:5b:27:4a:9e:42:b1:06:50:3a:7a:93:ca:3b:d6:
         2e:b3:34:5f:60:8f:0e:10:c5:83:61:bc:29:79:5a:bb:b3:dd:
         eb:af:8d:21:89:f7:d3:74:45:d5:af:3a:b4:c4:04:ab:26:05:
         3e:ce:fa:ae:0f:c7:6b:d7:d6:26:13:de:ae:89:84:ec:3b:3c:
         f9:b6:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:16:25 2025 by rpki-client