Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File:                     cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier:          +c8SBq6TOLK3uX4UMaF3X3Ag9tb9lB4GGEvfH7JKkUo=
Subject key identifier:   2E:6A:D5:91:2F:29:03:76:D5:0E:06:9E:BC:D3:05:CA:4B:18:C6:C0
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer:       /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial:       019A4D3CF58AC3C60B77510468D04EF426A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number:          0FD2
Signing time:             Tue 04 Nov 2025 05:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:31 +0000
Files and hashes:         1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
                          2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: bIN35dDaAAHzoUZgtxqcROnUBXQqNNOInZ5wtiCnyYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:f5:8a:c3:c6:0b:77:51:04:68:d0:4e:f4:26:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
        Validity
            Not Before: Nov  4 05:00:31 2025 GMT
            Not After : Nov  5 05:00:31 2025 GMT
        Subject: CN=2e6ad5912f290376d50e069ebcd305ca4b18c6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:ed:a0:26:d8:32:3f:c9:3c:13:e6:51:ad:
                    31:bc:31:93:34:26:cf:45:ca:be:a2:7a:6a:12:c7:
                    02:07:d2:22:05:ff:a1:e2:aa:08:0c:c0:23:23:ae:
                    12:c4:e0:a6:bb:03:da:1d:42:4d:48:25:78:80:59:
                    ce:4e:84:71:ef:76:cc:27:9c:62:d2:a4:65:80:0a:
                    57:69:2e:e9:71:7c:12:2e:c1:63:6e:99:ae:6e:07:
                    53:14:aa:81:26:f6:1e:1e:88:99:42:ee:13:e2:94:
                    97:fe:05:92:ba:5e:ac:9c:e6:e1:06:74:53:19:8d:
                    94:b3:8a:ea:fd:f4:8f:3a:0c:20:ff:fe:27:0e:f7:
                    9c:07:88:46:58:2c:b3:54:3f:e0:e7:94:2e:f1:1f:
                    32:6b:f7:fa:66:32:ee:8b:e9:dc:e5:d6:f9:02:fa:
                    b6:8b:60:d5:34:30:83:fd:0f:1a:f7:ec:3a:72:25:
                    90:d9:15:ee:f9:f7:12:a5:cb:fd:f0:76:f4:8c:f9:
                    13:b5:8c:4d:6c:82:c9:a0:d3:78:04:ef:0d:66:ef:
                    4b:c7:19:6f:d0:d4:89:eb:e9:07:66:b7:09:af:86:
                    13:07:3e:16:b8:78:77:d1:e3:ce:ff:ca:09:db:8f:
                    e8:42:60:c0:44:f2:00:ef:5d:e7:70:6c:09:57:cb:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6A:D5:91:2F:29:03:76:D5:0E:06:9E:BC:D3:05:CA:4B:18:C6:C0
            X509v3 Authority Key Identifier:
                keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:36:89:a7:5d:f7:78:d8:81:96:47:23:d7:e8:3e:a2:e8:23:
         8c:d6:64:5c:1e:c1:94:f8:a4:df:71:b7:16:04:1f:d2:c0:09:
         d8:c9:80:a5:74:e4:2b:e3:72:fa:b4:96:af:7f:ed:9d:59:ff:
         1c:24:23:75:a6:4c:e1:1b:8c:4c:00:8a:a9:fa:a4:31:96:af:
         38:55:4c:5e:d7:53:97:17:7d:84:a0:26:a4:c0:ed:aa:12:b7:
         51:f0:4d:6e:10:6c:19:1d:f2:74:a7:88:a1:ea:7f:a0:11:4d:
         82:da:10:bd:02:ff:f1:9d:ae:46:12:77:74:60:e8:2e:71:e7:
         72:86:51:47:50:47:e6:c2:84:fc:7f:68:30:eb:b5:11:cf:87:
         55:74:3c:86:44:2d:15:ad:b2:ad:c7:8f:e8:f3:c0:90:a0:c9:
         3f:d8:09:00:e4:72:d2:96:68:40:bf:f6:d5:b7:8a:9d:9c:be:
         71:a7:f4:ea:f2:06:d1:d2:f1:28:7e:04:3d:2c:1c:3e:67:c9:
         35:36:93:eb:85:f3:58:af:fe:89:b4:05:7e:90:1c:c4:86:8f:
         cd:b5:01:8d:d7:6e:72:0a:17:62:f0:29:9b:73:1a:33:0f:71:
         aa:d9:93:4e:f1:a8:d3:63:fc:84:72:c8:72:7b:03:99:d6:d5:
         75:28:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client