Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          Kw9PZ3pPQSz4O6OnHwkYMeXVTctjGCR/P8HJD9atJJc=
Subject key identifier:   43:D9:7C:7F:97:DF:EE:D9:33:56:A6:94:8C:E9:11:F6:52:53:2C:98
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       019A5150A737C8AA288AE7BF3BF64EC74BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          1410
Signing time:             Wed 05 Nov 2025 00:00:31 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:31 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:31 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: f6b4YcY2088SHV1I5MFoaFEcp6lJnx8ut/3ShBVI1z4=)
                          2: IC8rrkeuZ3TqcdV591D01mfbwHc.roa (hash: 7tBT71N8NPjqdd9xF1vrNPm9jbI3kLMX+SeUrC9ethY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:a7:37:c8:aa:28:8a:e7:bf:3b:f6:4e:c7:4b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Nov  5 00:00:31 2025 GMT
            Not After : Nov  6 00:00:31 2025 GMT
        Subject: CN=43d97c7f97dfeed93356a6948ce911f652532c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:4a:d7:4d:54:ff:3c:4e:a5:bd:32:1c:7d:
                    b9:43:c1:98:ba:da:b2:19:bb:12:72:f7:49:e8:d3:
                    d0:6f:3e:f9:5b:a6:1a:fe:aa:4e:1c:82:fe:96:bd:
                    8f:5d:e0:9a:2a:61:e7:61:80:0e:53:ba:47:f2:bb:
                    e3:72:c8:d3:e9:73:5a:c6:67:56:a8:b6:b8:4e:9f:
                    73:ea:f1:42:0d:a7:f8:a7:56:52:bf:8e:c5:88:53:
                    8e:ef:a4:e6:ed:1c:b2:69:3c:c7:de:ec:2f:09:e3:
                    0e:a9:2f:e2:93:48:e7:de:a3:b3:9f:41:8d:a4:af:
                    46:f2:d7:9d:1a:ee:c3:77:d1:df:d3:bd:47:29:bc:
                    03:b0:e9:ee:d5:ba:bc:e4:0b:a9:dd:b6:cd:b2:f8:
                    43:47:e1:c8:ab:60:e3:82:db:c7:22:1f:c9:3f:57:
                    e1:db:6d:4b:8f:d5:f8:49:67:96:e8:94:aa:8a:7c:
                    d4:9d:6a:98:3c:52:fc:cb:09:7b:29:27:e8:e6:20:
                    00:2a:f3:85:ef:24:19:73:73:e6:72:d0:66:fb:e4:
                    57:51:49:f0:fa:cc:7c:0b:0e:da:e3:2d:20:92:b5:
                    b1:8d:cc:7e:c3:e3:2d:8e:00:41:28:16:73:09:01:
                    6d:62:49:b4:55:99:71:69:df:f6:31:27:ce:fa:6b:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:7C:7F:97:DF:EE:D9:33:56:A6:94:8C:E9:11:F6:52:53:2C:98
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:6b:24:a0:bd:6e:24:c6:75:ca:3d:6b:12:3d:e4:4f:e5:
         8d:bb:1f:e0:73:76:6e:19:53:be:87:e0:c5:b0:2f:cc:c1:4a:
         4d:97:86:87:25:f2:da:9b:db:16:d6:55:08:a6:10:f4:d8:59:
         33:47:a6:33:a6:0c:e2:d9:62:d2:59:f4:71:f9:07:cb:4c:c7:
         84:12:4e:6f:39:73:d3:65:a8:72:10:4a:cd:6f:3e:ec:f7:88:
         ab:61:74:da:a6:79:63:72:14:0e:6b:8c:8c:19:dd:e1:69:65:
         84:8e:62:15:ec:be:bf:4b:2e:19:9f:c0:12:a1:b4:67:40:55:
         75:ca:b3:59:b3:93:b7:86:0c:31:84:66:aa:cd:3c:cf:41:4f:
         12:08:4d:79:c0:33:34:8e:92:26:ee:cc:75:bc:5f:e5:bd:9c:
         15:27:ce:11:34:67:fa:bc:6b:cb:ec:2a:e4:6d:84:9f:b8:2e:
         d1:37:32:08:f3:47:74:d0:e3:e3:78:dd:35:59:62:9e:9b:94:
         e7:35:dc:c8:f9:35:97:d5:84:09:04:46:b6:c0:60:29:d0:8e:
         a5:0a:09:b1:2b:f9:22:9f:af:78:4a:34:fe:9a:75:d9:18:cf:
         d3:20:e2:88:18:7a:d7:7e:9f:70:4b:af:32:3a:12:39:b5:14:
         49:17:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:29 2025 by rpki-client