Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
File:                     e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json)
Hash identifier:          tqBzob6CTPlrCc024T1HmivatbylZx3B6wAB3C9oksI=
Subject key identifier:   07:01:16:BC:1E:DD:ED:65:8A:47:64:15:2D:F5:BE:7A:AE:4F:37:2A
Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
Certificate issuer:       /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Certificate serial:       019A4EF4C6C437C02755A31E4B84635BF717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
Manifest number:          0304
Signing time:             Tue 04 Nov 2025 13:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:55 +0000
Files and hashes:         1: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (hash: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=)
                          2: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: 6ilkHmmn2a/HKoH8z9ZWb+ZXilTxl5RJ2na7hxSydzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:c6:c4:37:c0:27:55:a3:1e:4b:84:63:5b:f7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
        Validity
            Not Before: Nov  4 13:00:55 2025 GMT
            Not After : Nov  5 13:00:55 2025 GMT
        Subject: CN=070116bc1edded658a4764152df5be7aae4f372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:bc:8b:66:50:fb:8f:d8:61:82:b7:7f:4b:
                    a6:69:a5:aa:52:87:5d:35:38:fd:5d:20:28:41:f2:
                    d6:24:ef:f6:fe:05:af:a7:db:5b:ec:e2:f3:ac:4a:
                    9d:45:94:de:03:45:f9:6b:b7:b5:ec:e0:47:e6:84:
                    d6:f2:91:77:2d:87:27:7b:5a:2c:51:f1:fe:aa:ea:
                    5b:5e:3b:e7:d1:43:82:32:98:24:33:70:8a:3f:3a:
                    79:62:bf:74:47:7e:6e:48:33:54:ae:fa:f1:07:a9:
                    8f:96:c4:a6:0e:e1:84:7c:e4:51:a2:69:36:ae:a9:
                    4b:45:ee:1e:db:88:e2:f2:15:28:af:d8:13:65:40:
                    1b:c7:ec:26:47:cb:7e:74:44:87:85:20:d9:5b:e2:
                    f5:0e:1b:fa:a2:32:8a:3a:f4:58:0d:b8:ca:65:87:
                    1c:37:9d:70:e2:b2:3b:f6:7d:e7:47:33:aa:f6:4a:
                    2a:e3:4d:8c:35:51:c4:d4:90:c8:be:6e:39:6a:2a:
                    fe:fa:da:f0:23:88:2c:4c:c3:27:db:f1:4f:75:73:
                    a0:17:e9:5a:a6:3e:93:df:05:8d:58:a2:11:b1:56:
                    00:55:1d:79:69:dd:c6:c7:2e:a6:93:23:f1:7e:5c:
                    e5:2c:bd:ce:eb:0a:ad:ca:4d:b5:fb:94:62:f7:da:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:16:BC:1E:DD:ED:65:8A:47:64:15:2D:F5:BE:7A:AE:4F:37:2A
            X509v3 Authority Key Identifier:
                keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:38:97:d2:ae:81:9a:83:4d:92:f8:7e:98:05:8c:fa:c3:
         06:2a:ab:4f:46:f6:56:9f:96:1b:b1:51:e4:e9:54:3e:ab:bf:
         7f:e0:b1:f1:fb:89:49:e1:2d:72:a4:b4:0b:72:2d:16:32:ca:
         7b:0b:c0:e0:f4:61:74:2d:bb:d7:aa:d5:19:6a:fa:77:84:cc:
         16:07:73:db:35:57:db:1e:a6:80:a1:ab:e7:85:f4:65:e1:a6:
         7e:e3:a7:a3:2e:6e:c0:1b:1a:11:ea:ab:22:61:f5:00:bf:06:
         db:ad:0b:6a:f4:40:14:77:5d:f6:11:7f:ae:77:3c:ef:8f:ea:
         bc:87:14:b3:38:61:25:46:89:e2:04:16:a5:98:d3:b8:d7:d0:
         f5:a8:30:97:3c:cf:27:07:ff:a5:8a:d2:ff:50:7d:72:1f:f3:
         5f:d3:1b:7d:81:d8:d4:6f:ee:9d:a2:f4:b3:06:d3:1c:32:c7:
         c7:ce:ed:95:c1:b1:d9:9c:bf:67:52:0d:1a:83:88:05:b6:f7:
         7f:53:27:48:ab:36:e3:c9:b8:25:27:76:5e:6c:a5:0f:5a:d6:
         9f:1c:fe:ca:66:23:9e:6a:e1:5e:b5:2d:54:10:7e:8a:b3:42:
         8b:47:73:94:56:1f:31:b9:56:ac:27:52:73:2c:28:48:b8:5f:
         e5:f8:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:47 2025 by rpki-client