Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          gMhSyZRzV+rDQ4IGb5N4dKbZqDmc/eZWEWSggCUSgpk=
Subject key identifier:   F0:A4:3E:80:95:7C:13:AC:20:BE:42:44:02:B7:07:E3:AC:F6:BB:F9
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019A5074B2488B21305FFC0124FE070A1F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 20:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:16 +0000
Files and hashes:         1: 1-eDQG0lW6qJaqnPl-W2D7USsJOU.roa (hash: o6geDpXzRfzq+KqGmBjgU8yJ/MMEJhEhk7nT0703UAQ=)
                          2: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: Ph+QWJgk+qSlAdnNn/s/3NZ3lrFxPiD7UEdCmb7WJPk=)
                          3: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          4: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          5: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:b2:48:8b:21:30:5f:fc:01:24:fe:07:0a:1f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Nov  4 20:00:16 2025 GMT
            Not After : Nov  5 20:00:16 2025 GMT
        Subject: CN=f0a43e80957c13ac20be424402b707e3acf6bbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:7a:b2:2b:e1:f0:7a:1a:91:c5:11:2d:2c:
                    42:03:15:dd:0a:fe:a0:40:74:0d:fb:51:e8:70:5e:
                    ac:0a:70:f2:fd:09:0f:88:0f:58:d4:99:d3:bb:be:
                    bf:3c:40:56:22:42:79:ea:c5:fd:fb:23:f6:c4:4e:
                    42:73:3a:45:fe:17:81:f6:26:e9:00:0c:bb:2c:ed:
                    46:38:ab:89:ab:b2:ca:8d:9d:a4:7e:00:52:6e:09:
                    e1:5a:e6:ce:e8:ae:a3:7d:06:c3:7a:82:72:1c:15:
                    5c:4c:ee:83:d2:fa:5b:61:1a:23:69:dd:36:ac:71:
                    74:70:7d:e2:7e:f5:f7:85:8d:be:99:7a:c1:27:94:
                    1f:bb:7b:9a:29:05:ea:f9:8c:39:0a:9b:02:10:fd:
                    f2:cb:78:e3:5c:a4:27:73:b8:e7:c9:4c:fc:e6:aa:
                    72:1e:f5:2a:3e:a1:82:b5:1a:89:da:f5:b4:f7:92:
                    57:a6:da:d2:26:04:c7:0c:b7:4a:bd:22:65:81:7a:
                    f6:9a:99:52:33:9b:41:3a:dc:cd:8e:d0:07:a1:4d:
                    8a:4b:f0:b4:85:da:90:f1:7c:e9:1b:e9:57:a6:81:
                    21:36:02:28:36:a4:39:83:74:42:35:47:34:d4:74:
                    c3:ae:b6:0a:4a:0a:d5:ad:83:92:52:44:18:a3:cc:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A4:3E:80:95:7C:13:AC:20:BE:42:44:02:B7:07:E3:AC:F6:BB:F9
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:78:7d:89:a9:f3:ee:02:fe:d7:38:35:80:5f:54:4e:b7:
         73:99:60:74:8c:65:85:15:58:11:d3:93:39:c1:55:be:3d:b7:
         10:51:ae:91:1a:a1:e9:5d:6c:42:e2:fc:09:bb:fa:95:d7:64:
         f7:00:f6:37:11:4c:fe:de:9d:6b:aa:f8:c8:b6:ec:46:0b:cf:
         29:6e:2a:1e:30:2e:66:ac:31:18:05:2e:bc:3e:8d:f6:24:ab:
         06:8c:0d:e4:1a:73:ed:2d:bc:08:60:8b:ff:e2:1a:09:58:7c:
         94:c2:34:42:81:96:46:fa:ef:a4:fc:81:20:23:c4:9c:ff:4d:
         68:51:8a:92:76:6b:5a:7e:70:22:90:fb:e9:2d:89:21:c2:b9:
         a6:e8:73:55:8a:23:70:63:f7:8a:2d:8f:c7:7b:b5:c4:41:5f:
         53:bf:06:ee:7c:73:2d:a3:74:8c:08:42:8f:59:97:d6:3a:89:
         d2:fe:8a:4f:c8:7b:6d:f4:2f:5b:02:c5:eb:86:1e:02:ac:0d:
         a8:c4:74:ac:43:dd:87:6e:ce:f6:4e:56:54:c9:42:a3:db:62:
         d1:85:4b:f7:57:ff:87:56:22:ff:b4:e5:96:58:48:91:4f:d7:
         26:0d:94:33:82:78:5b:e5:2c:0d:72:97:30:ad:4c:35:1b:cd:
         57:be:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:14 2025 by rpki-client