Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File:                     B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier:          cb01esvILaT14Yrcq/ygEmM44/KU9CYXw6ly+2Uq0ZU=
Subject key identifier:   80:2F:61:4F:3C:4F:CB:75:C1:D0:A3:F6:0C:74:FE:40:73:20:BC:67
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer:       /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial:       019A4F998AFBB6D94E961AB8954A62C47A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number:          1715
Signing time:             Tue 04 Nov 2025 16:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:53 +0000
Files and hashes:         1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: Jw/G+/NrNcrTDQ6R+Ut0I6RP+2DoECaP+DvcHiESFOo=)
                          2: FtJU8J9U2_OLLatx6LfvbHOKR_c.roa (hash: dIJaTNJ0+ASaTltOhTPasps3097ycgeaovaUGMkuSR8=)
                          3: T_7VSYnKOSjvnuTWwmwff3kfcxo.roa (hash: DlCYGU13et9ewOw+1fpUIgR8MXw03I1FUpNIzAaiNtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:8a:fb:b6:d9:4e:96:1a:b8:95:4a:62:c4:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
        Validity
            Not Before: Nov  4 16:00:53 2025 GMT
            Not After : Nov  5 16:00:53 2025 GMT
        Subject: CN=802f614f3c4fcb75c1d0a3f60c74fe407320bc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:6e:61:af:e5:11:b3:85:57:60:b4:06:36:
                    fa:4d:c9:5b:c2:2f:33:e4:48:97:9d:04:3b:6f:d2:
                    f7:88:96:e5:d1:2d:a2:47:9b:a6:c0:61:ed:e0:79:
                    1a:06:e7:8b:9b:71:ba:f8:93:30:b3:1d:ec:a8:c5:
                    ec:bd:ef:5e:9e:20:40:f3:95:db:44:53:91:26:c8:
                    aa:46:5c:ce:47:9c:f8:e9:b1:58:fb:23:58:09:ad:
                    e5:43:54:33:12:1e:4c:15:44:c5:9e:8e:3a:bc:1e:
                    20:9c:9f:50:29:7b:bf:08:46:59:a4:39:ac:4d:4c:
                    5f:8e:bb:e8:db:1e:c1:67:a1:0d:23:a7:85:9a:3c:
                    16:87:8f:4c:5e:55:b5:a5:5d:af:76:09:53:63:ec:
                    a8:eb:18:9d:c0:d8:bb:d2:cb:20:aa:99:63:3a:7b:
                    06:af:5e:fc:6b:dd:59:d7:3b:42:a3:c1:8b:9c:95:
                    f7:bc:80:7a:d2:9d:0f:bb:80:84:e2:a5:99:ef:2e:
                    8e:7d:af:50:72:a5:9d:0f:52:21:f7:e5:09:2b:0f:
                    8d:b0:c8:99:9a:6a:ff:e3:8e:cc:5c:b5:88:4b:ee:
                    a7:36:39:64:01:65:9b:72:5b:59:7f:e7:76:75:f2:
                    e8:f2:92:cc:86:31:bf:87:4e:f3:f9:27:a8:81:c8:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:61:4F:3C:4F:CB:75:C1:D0:A3:F6:0C:74:FE:40:73:20:BC:67
            X509v3 Authority Key Identifier:
                keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:60:0a:93:0d:a7:f1:cd:57:2b:81:01:a7:60:a3:fe:6a:
         44:39:13:dd:dd:cb:fb:8b:97:93:82:ba:0f:ab:e8:fe:38:a6:
         2c:24:3f:08:a2:31:0c:a3:f1:0d:2a:65:11:f4:c5:8b:07:4c:
         b2:36:03:3e:fa:df:57:dd:82:68:d1:d1:0e:9d:28:55:8f:78:
         cb:63:45:13:2e:08:50:c8:92:8f:84:65:fd:b9:7d:47:2d:c0:
         53:e9:08:4a:3f:ff:61:49:5e:85:6f:ff:1f:33:d5:d1:18:75:
         a0:fb:3c:48:a3:58:9e:1d:f9:91:d1:21:d0:e1:d0:42:0c:3e:
         53:96:32:dd:6e:a6:69:84:63:e7:29:0e:b0:6d:78:5a:c5:73:
         73:4c:79:a5:57:ab:ec:20:dc:7d:f5:3b:63:9b:13:1e:a1:d6:
         29:82:38:c9:68:72:5b:c9:31:e7:a8:61:a5:db:65:88:c9:2f:
         8b:70:be:2c:de:23:d0:62:da:4e:d9:51:e8:87:8e:8d:7e:05:
         b5:65:af:a8:f1:b0:84:e6:89:b1:2b:6c:08:c5:57:e9:a0:cb:
         f9:44:c0:f1:3a:aa:dd:1a:1f:38:0f:3a:a6:c8:ab:4e:46:6c:
         27:7f:2f:a6:03:a0:18:f6:5b:2c:c7:9e:91:a1:9a:b7:b9:af:
         5b:3c:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:55 2025 by rpki-client