Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          GqH801mVrbEFmyqxAo5JpN0Dv4SQmzwk/4+PoQwfhsk=
Subject key identifier:   C5:65:EA:80:D9:69:FA:3B:A6:29:5D:94:68:DF:09:F8:F3:0E:7D:15
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       019A4D73BAEC0AFC4CB104AA3EB023C01C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          0625
Signing time:             Tue 04 Nov 2025 06:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:21 +0000
Files and hashes:         1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
                          2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
                          3: K4EzHSk1OTprfFu33wbkhRI9yVU.roa (hash: kwoZBLXnxtnLuus/aL73h2OdIKgHiGaRAdqLJUprZV4=)
                          4: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
                          5: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: ozY4SSeYB2rYcALA44jO2XlS5mmAJmkZxPZNQwnTLA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:ba:ec:0a:fc:4c:b1:04:aa:3e:b0:23:c0:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Nov  4 06:00:21 2025 GMT
            Not After : Nov  5 06:00:21 2025 GMT
        Subject: CN=c565ea80d969fa3ba6295d9468df09f8f30e7d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:0b:f6:a5:71:86:5c:04:4e:4f:28:f6:fd:
                    db:8d:63:23:48:13:a5:23:a6:63:c9:76:b2:80:35:
                    68:24:a9:68:e1:88:09:2d:ed:7b:44:52:f1:b7:9c:
                    90:c2:3c:4e:f2:a3:34:dd:5f:32:2c:53:66:5a:90:
                    f0:2d:fa:da:3a:f9:ff:8e:2a:61:eb:7b:9a:03:de:
                    b5:fc:c1:ba:b9:e3:49:9f:80:94:ef:07:11:88:57:
                    d2:79:b5:4b:99:31:fc:f0:da:b1:b6:a2:01:9d:93:
                    60:0d:98:7b:b1:c0:68:6c:25:d9:29:cb:f5:5b:40:
                    77:33:3c:46:98:f3:ee:f7:67:fe:91:f1:d9:78:e8:
                    73:41:de:51:ab:a7:48:a2:db:cb:a1:35:bb:33:40:
                    0a:34:e9:ab:c8:6b:4c:73:95:1d:0a:ed:26:81:8d:
                    69:4e:5f:95:44:e2:fb:e7:5c:20:1b:1e:4c:9c:94:
                    c6:ca:38:8a:de:23:ad:51:3b:12:24:b5:73:cf:35:
                    fc:ea:95:c6:49:ce:0d:f8:ae:75:97:89:35:d4:c4:
                    e7:94:35:69:df:f4:b4:c5:70:ff:98:ea:1c:6f:5d:
                    b5:db:41:4f:94:a0:e6:56:e8:e7:bd:e8:8b:8a:31:
                    85:0c:f7:78:89:10:54:45:99:50:c0:bf:c9:bb:cb:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:EA:80:D9:69:FA:3B:A6:29:5D:94:68:DF:09:F8:F3:0E:7D:15
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:4a:34:18:85:f3:f0:e5:07:19:78:fb:b1:ca:86:41:7d:
         bb:4d:54:4a:e2:96:9d:b7:44:87:b0:b9:c2:ae:9f:9e:c6:9d:
         b9:44:eb:c9:cc:f7:67:f6:32:a1:cc:d0:98:dc:fa:bf:62:77:
         b8:be:15:54:cd:a3:5c:f0:1b:46:e9:f1:d8:62:a4:6c:63:e7:
         ab:09:a1:df:2e:69:51:a1:2c:20:45:6b:73:2f:92:a0:cf:b2:
         01:43:7d:90:69:d4:5b:fa:2e:7b:ca:b9:8d:18:fb:46:9e:d4:
         fe:de:7f:a3:cb:83:1e:a3:6d:a5:9a:88:00:52:9c:72:96:7d:
         d5:ef:4d:ae:0c:af:60:ec:72:b3:4c:d0:0a:c4:74:85:da:4f:
         e2:41:3a:76:2c:e6:10:4a:b9:ad:3f:ac:81:9c:0c:61:0f:0e:
         2d:51:8f:91:0f:e3:a2:ad:ea:b0:e9:2c:c1:77:cd:e9:60:c2:
         6d:91:50:43:96:bc:47:e7:f7:2c:85:59:84:45:9b:02:35:e5:
         c6:2b:58:4c:25:8c:b0:09:9b:d5:32:d3:94:da:38:7e:59:e6:
         b6:be:9a:67:5e:15:21:6f:24:a1:5c:af:77:46:96:63:7c:d5:
         59:a4:de:b1:89:3c:31:30:70:d3:76:f2:af:33:d1:02:66:56:
         1b:5c:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:47 2025 by rpki-client