Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          Et9vpgtdoF8yw2IdmH5IpS0comXXOwl/9PWMt59hhTU=
Subject key identifier:   5C:FB:60:23:12:2C:02:EB:EE:5F:7C:05:6C:94:60:B8:6F:D9:0E:54
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019A4DAADD0210DECC6F1DC1AAFF490B8062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          173B
Signing time:             Tue 04 Nov 2025 07:00:34 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:34 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:34 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: V/Xh3ZkReszGGkZ6dhH2itu2yztzth0QZJkaZu/5jEg=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:dd:02:10:de:cc:6f:1d:c1:aa:ff:49:0b:80:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Nov  4 07:00:34 2025 GMT
            Not After : Nov  5 07:00:34 2025 GMT
        Subject: CN=5cfb6023122c02ebee5f7c056c9460b86fd90e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:f0:0c:71:46:43:b5:1c:f8:d1:1c:ca:38:
                    fa:2d:56:9f:f5:22:3f:8e:e0:7d:7f:20:ef:d3:22:
                    ab:e6:08:f9:e2:32:06:c7:13:d8:51:ac:46:77:03:
                    66:c0:7a:5c:69:5a:c6:59:71:e6:3d:8c:88:97:e3:
                    cc:e2:35:4b:ad:92:df:1d:d9:b4:44:5d:69:50:ec:
                    87:e1:8d:b1:fb:6d:c3:3e:02:17:9c:9a:98:1d:d2:
                    64:19:52:c2:2e:0c:59:4b:12:41:fa:cb:33:67:03:
                    fd:21:4b:1c:d1:7a:ec:a3:f6:2a:f7:88:34:83:9e:
                    18:a8:22:5d:e0:c6:19:df:21:30:0b:2b:6f:7e:79:
                    7f:d7:1e:b7:e7:ce:6b:a8:24:fb:9d:a0:15:6c:db:
                    a2:3c:f6:c4:0e:0d:94:31:78:14:e3:d2:99:00:70:
                    f3:10:c0:e5:2c:3a:8f:a2:7a:be:45:14:21:93:1a:
                    16:b2:2f:41:0f:a1:2e:5d:50:aa:6d:c7:46:41:46:
                    e9:16:81:a5:a6:12:3e:d7:4a:f2:91:56:f5:81:f0:
                    e1:2c:9a:ca:86:dd:45:cc:0e:3d:cf:b4:99:31:4c:
                    ef:31:98:92:0f:d6:ea:18:82:f1:48:72:a5:a8:d0:
                    ed:04:23:4f:f1:a6:b6:56:6c:25:3e:65:a6:dd:80:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:60:23:12:2C:02:EB:EE:5F:7C:05:6C:94:60:B8:6F:D9:0E:54
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:82:66:4c:63:4f:33:c3:95:2e:52:a9:21:e9:e1:41:21:20:
         5d:c0:51:9c:fe:63:15:1b:ac:42:8c:3e:96:5d:a6:83:0f:c2:
         5e:1e:79:d0:f3:43:48:a0:24:f3:81:b2:3c:2e:3c:c7:91:ba:
         df:c0:d9:d7:03:28:6b:08:c1:7a:f7:d5:9f:e4:99:82:ac:93:
         69:f3:c2:3c:ee:09:4f:ed:4b:79:7f:54:64:b9:45:4e:bd:b7:
         30:6a:49:22:4c:f0:0d:01:b1:a9:7d:de:c5:88:cc:b9:df:76:
         e1:98:8d:b0:47:f3:81:98:ad:da:93:df:07:5c:7f:b4:6c:c6:
         58:a1:e0:0d:7a:ed:1c:5c:ea:79:9d:63:e6:14:5f:83:d2:a1:
         6c:ca:c1:de:e3:3f:98:16:1a:8c:bb:5e:11:2b:13:dd:0e:17:
         00:3a:b1:5d:d5:7d:99:e4:74:7c:3b:b8:ab:62:00:be:de:11:
         20:18:b5:ff:09:ef:46:be:3b:4e:2b:3b:9b:f1:90:ef:f4:01:
         ab:51:f6:0c:65:a5:25:07:88:63:57:08:90:ae:4c:de:e4:eb:
         d9:d8:99:be:f6:7a:42:58:81:23:d9:11:f0:0c:02:cf:ae:17:
         9a:16:93:ec:58:4c:7f:96:f2:f1:ca:65:39:c5:e5:64:40:3c:
         0a:3e:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:35 2025 by rpki-client