Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          I79dcqxYwoKvTPdzdCgbSPFUlMwAF0ME7r7NbhjPUCI=
Subject key identifier:   15:6A:F8:F7:E0:C9:D0:3F:6E:5D:1F:9B:12:AC:9E:BD:BD:12:95:1D
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       019A4EBD5C1970933B64C18F7614A6603725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          07A7
Signing time:             Tue 04 Nov 2025 12:00:23 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:23 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:23 +0000
Files and hashes:         1: Avvx3aT3VRXUTrx6x69kC7208rk.roa (hash: mkB5F6JMzCQ+6uSffkBPqIwarvvgqz8B0gcG77lROr0=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: peIgN7czlZvgS/Vaoc+D0Z097hoeQcNtuOordQk1UIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:5c:19:70:93:3b:64:c1:8f:76:14:a6:60:37:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Nov  4 12:00:23 2025 GMT
            Not After : Nov  5 12:00:23 2025 GMT
        Subject: CN=156af8f7e0c9d03f6e5d1f9b12ac9ebdbd12951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:71:9f:88:06:10:b3:ef:aa:20:d3:cb:06:
                    a4:4f:21:d5:89:7d:06:95:8a:d7:2e:74:d0:e1:46:
                    ad:8d:43:9d:fc:5c:c2:95:c7:cf:6e:f5:4e:1f:15:
                    30:4d:18:1f:68:13:58:63:ae:50:a0:a9:71:21:9e:
                    8b:57:c9:8d:dc:d6:a9:c9:a5:8a:15:f9:ae:a9:95:
                    84:a4:56:5f:2e:eb:dd:46:ba:05:3b:38:26:cd:8e:
                    84:2b:b0:f4:6d:3c:94:3e:2b:c4:ee:46:09:bf:08:
                    b8:25:e1:b7:67:23:a4:ce:9c:a6:89:c2:9f:dc:c2:
                    55:f3:3e:1a:6c:f4:a6:20:3f:b8:0f:31:44:c1:df:
                    ca:9b:f6:20:5c:ef:0d:7b:12:65:0d:85:f4:60:66:
                    85:a5:84:81:45:f7:3a:7e:92:17:9e:0d:e4:29:b1:
                    f8:83:b3:1b:c4:af:47:cf:51:29:10:8d:02:e8:3e:
                    42:9a:df:b8:b2:b5:f0:9e:4f:95:11:ef:02:da:18:
                    b7:76:ec:59:7a:13:9e:47:6b:50:82:5b:e9:67:c9:
                    bb:e9:4e:7d:92:89:73:8c:ec:81:71:28:be:b7:00:
                    a1:16:b1:a3:6f:da:5f:8c:48:36:be:d8:30:28:b8:
                    76:1a:95:90:69:13:2d:1d:ee:4f:c3:1e:ea:a7:e4:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6A:F8:F7:E0:C9:D0:3F:6E:5D:1F:9B:12:AC:9E:BD:BD:12:95:1D
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:91:60:a8:6b:dd:51:7e:8b:0d:a2:82:09:15:c7:df:bb:a5:
         cb:58:b9:31:e3:8c:85:d0:33:8c:db:55:5d:a8:30:be:fc:2f:
         cb:37:90:27:ce:46:ef:81:7d:8f:a8:cc:38:1e:b2:9a:4f:12:
         35:02:95:54:7c:ca:a8:eb:f3:0c:31:6d:af:cb:7d:97:c9:d5:
         24:95:93:8c:51:b1:6d:9a:f9:7f:36:05:b7:c2:2a:e2:48:fe:
         f6:8b:bd:6f:8a:63:8b:33:3b:fc:34:35:b5:78:a0:a1:72:33:
         b8:b2:bf:ab:03:c4:f3:fe:5f:13:03:23:7e:fc:41:6e:43:b7:
         2f:30:e8:f7:56:37:ec:3f:01:c3:8e:63:a9:9d:02:56:c5:e2:
         a9:c2:66:56:62:d7:b1:78:e9:b0:b9:19:a5:b4:72:f2:57:35:
         7a:f6:63:9f:2f:d4:db:d8:47:d6:37:33:79:39:ef:68:a3:b1:
         1f:13:dd:00:be:7e:50:d9:ee:11:c7:07:e1:8f:ea:df:5a:8e:
         e5:32:85:39:38:d2:88:a3:b0:8e:86:e9:8a:c1:22:e2:2b:6f:
         1d:a4:3f:12:25:55:4e:35:8d:46:2c:1a:3a:bf:bc:8a:13:11:
         3d:26:11:71:f8:82:c5:a6:5a:3c:01:6d:29:7f:9c:59:1c:be:
         46:44:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:45 2025 by rpki-client