Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          uMyU1RkUh8dG3pCgs9qt833GAmzGFKLCRK2hrQ73r58=
Subject key identifier:   FF:B2:C6:D4:A2:71:2D:B5:EE:43:1E:87:DF:B6:2B:06:5F:61:DC:29
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       019A4D738CEC5336E443D748EF32CE1F85E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          1436
Signing time:             Tue 04 Nov 2025 06:00:09 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:09 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:09 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: pFcDIsjprhxNB3wU55dpZxNFK8hFDc3dxs8BCK1fJMc=)
                          2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:8c:ec:53:36:e4:43:d7:48:ef:32:ce:1f:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Nov  4 06:00:09 2025 GMT
            Not After : Nov  5 06:00:09 2025 GMT
        Subject: CN=ffb2c6d4a2712db5ee431e87dfb62b065f61dc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:37:15:5d:a0:b8:08:18:fb:28:5d:c7:d1:
                    49:de:09:27:5c:1b:df:bc:e7:f1:3b:cd:94:3b:bb:
                    4e:e3:32:bc:0d:63:9b:4b:67:3e:ef:af:6b:db:71:
                    dd:45:4e:8d:46:55:50:e3:47:c1:20:13:d5:9c:ac:
                    d2:06:21:22:c4:da:2e:d7:82:72:5b:54:18:7c:34:
                    a3:83:cd:79:71:69:3c:84:ef:1f:f8:a3:be:06:a5:
                    c5:65:c0:76:1d:98:c7:f5:c0:04:c2:59:a8:81:2d:
                    96:52:8b:9b:42:ae:ad:0e:60:33:71:21:c9:57:79:
                    d7:c6:43:d2:aa:93:b4:6a:66:e9:e3:73:e5:35:28:
                    c0:b4:cc:a5:93:3e:c7:62:59:93:85:f3:72:f2:eb:
                    d1:46:4e:c6:40:4b:20:fb:8c:35:d7:7a:16:b1:a1:
                    32:45:5d:f7:9a:7f:2b:aa:fe:77:f2:fb:bb:7c:85:
                    40:ee:bc:d6:ca:45:c2:46:b1:8f:24:8f:bb:48:c6:
                    2e:40:cd:2d:d7:d8:97:b0:a1:83:8c:b5:ce:9c:e4:
                    29:36:4c:74:b3:8f:8e:bb:3b:87:14:e6:05:59:2c:
                    bd:66:59:5c:f4:26:89:70:4d:b9:cb:2b:c1:62:ad:
                    ee:47:60:4b:16:25:f3:0d:ed:7c:2c:23:51:11:64:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B2:C6:D4:A2:71:2D:B5:EE:43:1E:87:DF:B6:2B:06:5F:61:DC:29
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:b2:8b:c5:4e:10:a0:12:ba:32:d2:d9:e5:a1:6f:6e:62:
         44:fd:34:6f:23:2d:d3:58:97:59:1b:df:ad:5b:57:e0:bc:37:
         ba:42:fb:77:b0:8a:fe:bf:22:fd:bf:7d:ac:63:c8:07:84:dd:
         40:ea:a7:d6:b8:21:b4:84:82:0a:7f:97:6a:e4:29:9a:35:9c:
         21:cd:27:b2:b1:db:4e:1c:4c:bf:ad:26:89:8c:a3:51:fd:fe:
         bd:69:4c:a0:7c:d2:1a:b6:2e:81:7a:7a:dc:f7:ee:5e:76:5c:
         67:2c:1c:4f:a4:2e:ba:65:f1:ce:21:e7:3b:cf:ca:ef:ec:ef:
         c1:7b:16:23:b0:3f:9e:ef:56:84:58:7d:93:44:ab:a1:01:f8:
         42:f4:22:74:03:51:9e:14:3d:4b:29:cc:15:f1:75:88:1f:b5:
         04:cb:47:a8:8d:e1:85:0e:a7:38:eb:f6:fb:db:0d:1c:27:4e:
         06:ec:73:c2:9b:01:55:d9:2a:92:14:d7:2d:f8:d4:2b:1d:3f:
         cc:e3:a1:ae:18:76:76:66:f6:84:71:b9:46:e1:9c:54:9b:4b:
         bc:03:64:5c:31:bf:2c:ec:5f:da:ad:0c:bb:d0:4f:5e:cb:2c:
         a5:2c:19:d9:08:c4:da:9c:5e:2f:dd:b4:4b:4b:ba:39:90:7b:
         28:db:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client