Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          KAchDucg46ZDe+s5un/tNRdw+qdbXw0Ab5YHFFJWis4=
Subject key identifier:   53:A4:F7:FC:C6:85:44:C3:C5:74:9E:25:1F:CC:41:8F:A3:7F:80:61
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       019A4EF453061832651FAAC20125610F65AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0BD8
Signing time:             Tue 04 Nov 2025 13:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:26 +0000
Files and hashes:         1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: vtBfd7c82gMTtzs6V/kx0qJSH7ziOZau/H/zDepSCDw=)
                          2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
                          3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
                          4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
                          5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)
                          6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:53:06:18:32:65:1f:aa:c2:01:25:61:0f:65:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Nov  4 13:00:26 2025 GMT
            Not After : Nov  5 13:00:26 2025 GMT
        Subject: CN=53a4f7fcc68544c3c5749e251fcc418fa37f8061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:17:0d:a8:0e:e0:50:3b:fe:b5:2b:0a:c5:
                    2d:85:e3:19:d0:fb:f0:0c:b6:77:3a:aa:ae:97:2a:
                    07:8f:43:f6:1b:8c:22:28:db:f7:7b:23:de:5b:6a:
                    bc:4d:b4:0a:cf:f6:34:53:c1:82:f9:f3:e4:9e:2c:
                    73:2c:78:8b:03:24:f2:8e:aa:ba:30:ea:ff:2c:38:
                    93:2b:b2:30:ea:b3:00:df:1f:f9:2f:f4:33:a0:d9:
                    57:46:ba:8f:0d:fc:e6:fd:a7:f4:35:91:4e:e3:00:
                    c8:41:c7:b8:1a:85:e7:6a:9e:23:39:95:1b:ed:19:
                    4c:9b:84:39:b1:e0:1c:46:c3:b9:25:77:3a:bb:f0:
                    84:78:f7:c5:75:0e:58:c5:6e:73:02:c8:8f:29:da:
                    93:b0:18:95:cb:98:ad:b9:61:a5:c3:52:16:00:fa:
                    e0:ae:33:55:a3:cc:48:fb:80:22:7c:26:cb:7f:35:
                    70:1e:bc:80:00:c5:ae:92:58:cd:13:db:79:fb:57:
                    ce:6e:c4:be:7a:1b:2c:4e:d7:cc:c8:c3:bd:b5:45:
                    7c:b7:e5:a5:6a:77:6f:e7:80:dd:ce:2a:72:eb:75:
                    5e:c2:bf:7b:5a:06:8d:2b:39:d6:4e:90:7a:b0:3d:
                    2e:6d:dd:bb:f3:e9:02:29:71:97:72:d3:87:fb:ae:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:F7:FC:C6:85:44:C3:C5:74:9E:25:1F:CC:41:8F:A3:7F:80:61
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:01:63:4a:f6:af:e4:09:c1:74:10:aa:7f:6b:78:f0:b0:
         8d:ce:8f:43:5a:1b:a4:b5:fd:82:75:15:5d:8c:c6:92:c7:94:
         34:f9:cc:dc:de:85:a5:00:51:fc:45:9c:26:38:a9:63:c1:be:
         c2:92:89:d6:1c:da:bb:76:f0:07:f3:26:ff:f4:73:60:b7:69:
         70:fc:f9:5a:8f:24:2f:32:f8:0d:f8:db:49:e2:b6:07:eb:a4:
         9c:8b:8b:b5:19:0e:90:4f:48:fe:ad:a8:7e:6e:fc:c2:1c:d8:
         fa:2d:d5:a5:fe:1f:d1:a4:fd:c2:2f:61:d2:98:f0:15:19:cc:
         a6:40:7e:85:5d:7f:82:6e:3c:6d:93:c5:ea:34:df:06:e1:ee:
         1e:99:b6:ee:97:71:15:e7:f6:f3:2c:de:3d:77:1f:5f:ad:f3:
         56:95:47:bf:8c:e6:c3:a7:7e:64:87:88:e2:81:7c:45:22:e9:
         b6:64:9e:cc:95:e9:22:a9:5a:5c:d0:a0:f6:f3:46:84:52:3f:
         32:84:b3:6c:35:ec:b8:71:5e:b3:a6:d1:18:7f:3a:27:2f:b2:
         3c:a7:e1:f2:d8:9b:8f:aa:60:11:f2:be:a1:c5:46:ce:6e:56:
         8a:91:f9:06:3b:22:8c:2a:56:8f:16:b4:f4:47:21:51:54:0e:
         1c:b5:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:25 2025 by rpki-client