Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          4YsRypdmczg6Ro4vxFrQs2OK0j2wkIyJ9BrfZwX/d2E=
Subject key identifier:   3C:38:84:08:C4:5F:15:16:2B:B5:FF:E8:16:1B:56:0B:F8:13:01:99
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019A4F2B8D454BCF9EF08383FC4B1A10421D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          17BB
Signing time:             Tue 04 Nov 2025 14:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:45 +0000
Files and hashes:         1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: ZTkn+5WzW8Fh2b10+KnUyMprHtXI2r6MNxN8/z5JlNw=)
                          5: pd06xiSADpx6OPCHaHoDbZicX-c.roa (hash: 7rPwvwkbz2GM/1gSKgNiQpZdIpeLCjqX9IgRZrEoaZ4=)
                          6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:8d:45:4b:cf:9e:f0:83:83:fc:4b:1a:10:42:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Nov  4 14:00:45 2025 GMT
            Not After : Nov  5 14:00:45 2025 GMT
        Subject: CN=3c388408c45f15162bb5ffe8161b560bf8130199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:95:98:0d:d2:5e:0b:d1:a4:ed:98:38:12:
                    da:4a:f0:ab:30:aa:79:98:b3:82:a4:1b:48:d0:9e:
                    12:82:16:1d:0c:9a:e2:69:50:74:33:5a:94:10:f6:
                    57:3b:41:c0:9a:25:65:ac:97:42:41:5b:f7:81:84:
                    d7:05:e2:3e:9b:1f:c7:c6:bd:e4:14:94:6d:e6:c1:
                    eb:5d:3d:f2:f0:4a:ca:0e:85:5a:f2:c0:84:08:d4:
                    3d:ee:cc:02:5c:f9:86:88:82:5c:f3:86:92:bf:71:
                    6d:ff:44:db:6b:5f:02:8b:e3:df:fb:44:32:f4:da:
                    ed:03:a2:ff:1b:47:ab:c6:c2:ce:8f:59:74:22:e8:
                    3e:3d:50:be:a0:2f:0c:ab:1e:65:5e:cd:99:17:cd:
                    dc:1b:a7:a3:77:f8:72:47:f8:26:c1:32:f4:37:7f:
                    77:ed:c6:90:ed:e2:32:a9:17:f1:92:43:2a:82:05:
                    2d:a4:02:9d:26:57:92:aa:06:f2:dc:f0:c6:8a:b3:
                    65:c6:fe:58:8b:6f:0b:f3:fc:51:5d:35:ac:9b:c7:
                    49:80:c2:1b:c4:9e:9f:76:0f:6a:f9:f4:2c:af:a7:
                    06:c2:0b:94:a1:2b:e5:d9:ce:26:94:ac:d2:cf:b1:
                    22:4b:b2:45:f6:f7:15:81:1b:d7:1e:a9:42:a1:9f:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:38:84:08:C4:5F:15:16:2B:B5:FF:E8:16:1B:56:0B:F8:13:01:99
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e6:07:08:64:4e:73:8a:21:d7:91:aa:72:1d:ec:ad:6d:03:
         4d:58:0d:04:92:b3:d4:a9:aa:ea:43:b8:bd:10:c0:ca:25:81:
         ac:a6:e9:8b:4b:1b:31:d5:8d:a6:34:cd:80:70:15:ae:71:e5:
         e8:4d:45:ef:7c:99:ff:7d:17:44:a0:bf:e5:de:06:a1:08:86:
         94:49:6f:e8:19:84:be:d5:ba:ce:0a:02:89:3d:52:59:e9:6e:
         a6:0d:ae:37:73:84:7a:71:5a:9d:6e:0f:2b:4a:61:04:4a:c2:
         58:4d:72:51:49:c1:5f:51:10:8f:df:a9:d5:95:b7:0a:f8:34:
         9c:29:4f:a8:36:a4:2d:46:00:c7:78:ad:38:28:e1:56:83:90:
         e5:cb:a7:42:19:f9:6f:b4:e1:54:23:48:6b:a3:b2:dd:b5:1e:
         e5:e7:70:36:3e:bb:c2:34:54:a1:04:8f:d5:e9:cb:97:e5:b0:
         7b:55:bd:d2:54:77:d3:95:bf:dc:72:fd:38:9f:dd:4a:46:43:
         3f:93:d2:7d:be:24:2b:b5:80:09:93:a2:74:9f:d1:f0:cd:62:
         cb:ab:d4:6b:f5:d2:34:88:2a:88:d7:b2:67:0d:cc:34:00:71:
         88:48:51:73:c8:aa:ca:bc:24:22:0a:16:4f:e1:80:9a:59:ab:
         3a:3d:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:09 2025 by rpki-client