Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          vE84BFcP6quS66FrGpUJGKrI9xSTednDFKSig75DoMU=
Subject key identifier:   F1:E7:E8:9F:67:10:C6:D2:3E:44:37:E0:15:77:EE:7C:D6:28:B8:28
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       019A4F624C5CD7B466CFEADF83AFD6E06DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          0486
Signing time:             Tue 04 Nov 2025 15:00:33 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:33 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:33 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: Q6Nh3HLwstb/IakD0ecso5R9Jeh6ove4NNHcFLr1SBQ=)
                          2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:4c:5c:d7:b4:66:cf:ea:df:83:af:d6:e0:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Nov  4 15:00:33 2025 GMT
            Not After : Nov  5 15:00:33 2025 GMT
        Subject: CN=f1e7e89f6710c6d23e4437e01577ee7cd628b828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:5d:8c:b1:1c:9d:4c:65:5e:5c:8d:a3:85:
                    38:63:a0:9b:3c:06:9d:b8:b6:65:2d:11:86:34:8a:
                    da:59:9c:0a:cc:a1:69:7f:e7:2d:13:c0:78:fb:41:
                    b1:89:0f:af:cd:bb:ad:7c:69:78:b3:ac:aa:5b:31:
                    e0:3b:11:75:4a:07:25:d3:4d:89:ae:65:84:95:c0:
                    81:53:8d:87:53:19:56:9e:f3:f7:d4:86:82:33:0e:
                    eb:53:74:22:7f:e9:01:8c:80:30:88:ad:53:e9:f7:
                    fe:8a:1b:cb:33:a4:4e:73:63:af:3e:94:9f:84:92:
                    04:9d:37:e4:ab:bb:d6:39:df:38:b1:a0:c2:c5:07:
                    43:50:c5:0d:fe:58:db:33:33:f7:87:15:22:61:81:
                    ae:34:95:b0:75:2f:79:27:4e:7f:a6:18:73:4f:83:
                    40:b0:4c:d3:77:4d:7f:e3:38:9e:07:bf:95:67:51:
                    1c:ff:99:be:c9:98:76:82:da:1c:7f:33:1e:e9:78:
                    d8:60:42:a5:56:3a:a9:c9:13:49:c1:3f:21:fd:be:
                    ac:e0:fe:20:b7:72:79:eb:85:84:12:3c:1b:5f:15:
                    f2:4c:81:7f:6b:74:b5:b2:36:73:18:70:cc:10:9a:
                    e9:75:37:05:82:76:74:47:a2:b0:26:14:55:0d:82:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:E8:9F:67:10:C6:D2:3E:44:37:E0:15:77:EE:7C:D6:28:B8:28
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:ec:a8:7c:f6:fb:a0:4d:03:fe:45:aa:53:97:2f:f6:96:
         12:f9:49:b5:81:a0:b2:e0:15:de:90:2d:cd:bd:10:fe:67:69:
         91:a8:ad:ad:5a:0e:ef:39:4d:55:7b:b9:65:28:c3:bd:2d:86:
         6a:82:f9:d4:ea:ea:09:84:b8:27:8f:f7:cb:72:5d:90:e1:14:
         28:85:0e:f9:b2:c7:8d:9b:90:b8:55:f7:e6:61:12:eb:9f:48:
         0a:b5:58:f7:4c:44:55:93:b9:5a:78:25:ab:c4:51:05:9e:8e:
         25:d8:44:60:b6:d1:68:d2:82:39:fa:4d:04:5c:87:d3:91:c5:
         af:e3:cf:89:be:96:78:94:7a:83:d9:d0:ae:1d:e1:d7:c9:74:
         d2:e5:9f:38:6d:d3:39:08:f3:12:af:49:96:8f:7f:8c:e9:0a:
         be:03:8f:a8:3f:15:fe:d1:40:8e:b5:ba:5a:1c:e8:7d:37:2d:
         5c:c8:63:5f:59:3e:5c:4b:26:6a:c7:1e:c9:34:fa:30:94:0c:
         8b:76:cf:bf:61:0e:59:c7:ae:34:f1:27:ec:25:9a:75:2f:be:
         fc:36:1c:33:7f:ca:74:c7:45:5c:fb:53:d8:17:c3:e0:67:af:
         50:17:ee:21:17:78:d0:b0:49:63:3c:86:0b:a1:86:53:ac:42:
         d0:e3:07:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:50 2025 by rpki-client