Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          Vc+dzPOWsJ8aXmZpv8bUWPgYZGNj6vDQP+LjgHK8yX8=
Subject key identifier:   5D:FA:30:7C:42:31:70:EE:19:F6:7C:28:2C:9E:DF:4A:11:EF:A0:1D
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019A4D7488CF1432362D0168E291F47BD150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          12CB
Signing time:             Tue 04 Nov 2025 06:01:14 +0000
Manifest this update:     Tue 04 Nov 2025 06:01:14 +0000
Manifest next update:     Wed 05 Nov 2025 06:01:14 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: W6kGuEsDLE5EMgfuFRXDZJaWZ/RrwMp10yhTX4wXDV8=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:88:cf:14:32:36:2d:01:68:e2:91:f4:7b:d1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Nov  4 06:01:14 2025 GMT
            Not After : Nov  5 06:01:14 2025 GMT
        Subject: CN=5dfa307c423170ee19f67c282c9edf4a11efa01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:eb:99:f5:6e:4c:46:cc:d9:23:db:e2:83:
                    50:60:8f:29:e0:12:d6:3f:c9:2d:0d:17:e4:43:3f:
                    1d:5b:95:cf:e8:63:71:21:c1:15:5f:c1:71:84:f4:
                    5a:67:7a:0c:f9:8d:ae:53:88:89:df:ae:6e:5a:a2:
                    c8:3b:28:87:70:69:4c:67:4f:70:27:d3:2d:09:52:
                    dd:3d:a5:04:b6:1f:f0:ae:3a:c7:93:21:db:98:dd:
                    39:27:41:ca:4d:3d:54:e9:89:f8:e2:7a:eb:1a:26:
                    78:04:ad:d5:e9:87:a9:e7:4f:73:6f:c9:a7:95:45:
                    7f:ae:1f:60:97:83:f5:97:8b:54:6d:f1:af:ab:ab:
                    18:90:7f:b4:37:87:15:bb:4e:17:8b:26:db:76:0f:
                    6c:ab:84:37:bd:48:a0:6c:03:e5:b8:eb:f8:53:00:
                    c0:ee:49:a6:3f:0f:b3:64:88:a6:42:79:bf:5b:4e:
                    ab:4f:0b:1a:20:23:18:34:ce:77:6d:01:ca:1b:94:
                    41:8b:3b:59:fe:78:b5:9f:ca:f2:10:fa:17:6e:93:
                    a3:17:39:45:e5:76:b2:88:bf:65:8a:e2:6e:f8:86:
                    57:ad:f3:e7:b4:e2:97:ab:cd:de:a2:3c:03:9e:3e:
                    4d:58:09:ad:5a:da:4a:85:8a:08:c7:19:0b:a4:27:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FA:30:7C:42:31:70:EE:19:F6:7C:28:2C:9E:DF:4A:11:EF:A0:1D
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:5c:55:3b:19:4e:ef:51:3e:cb:00:47:8c:aa:4d:9f:4d:
         dc:95:2b:9f:56:71:39:3f:6a:3c:d8:79:f2:76:74:35:4b:06:
         ad:7f:f4:e6:b2:ee:a0:5d:0c:bf:86:3b:4d:6f:44:c6:f7:28:
         4e:af:bb:19:4d:62:32:ac:f0:b0:7b:97:7a:d0:67:80:15:78:
         69:1a:cc:de:0e:3a:42:22:2a:d5:3f:5d:4e:c9:81:c7:6e:7d:
         77:f0:71:60:80:97:0e:c2:50:54:d6:d5:8d:c2:7a:ed:5e:2f:
         ac:b4:92:30:4c:93:75:f4:d1:bf:05:f4:31:30:ab:93:e9:62:
         6f:a9:d9:35:c9:b9:17:eb:bb:85:22:dc:89:42:29:63:44:fc:
         28:14:11:87:3c:90:7f:11:bf:5a:3c:6e:cf:fe:99:2e:32:46:
         3f:3b:0a:71:27:ae:50:4c:dc:df:05:e8:00:a1:c5:23:c5:db:
         c5:88:34:04:89:c6:17:35:f6:5c:05:a6:d3:71:4a:ef:9a:bd:
         08:24:62:63:74:7c:c7:6b:7c:32:10:e6:c4:f8:a2:21:9f:f6:
         48:5f:af:9a:eb:41:12:d3:cd:b5:26:4e:8a:57:58:b7:36:37:
         bd:3f:c7:9d:43:61:17:e9:73:aa:80:6d:ae:8e:a8:1f:f5:2c:
         51:1a:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:01 2025 by rpki-client