Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          wDgmgMl4oD7/b7mELEUduN0cu5YSc/YjvtQ9GSFC1JY=
Subject key identifier:   A6:2C:0C:84:83:2B:5A:16:74:5D:8D:34:62:D7:DE:AE:C0:29:DC:C3
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       019A4F62BEBEA656F67B394892F8685C5896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          1554
Signing time:             Tue 04 Nov 2025 15:01:02 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:02 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:02 +0000
Files and hashes:         1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
                          2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: 7bKDan+LflP0KHWyV1UM1YlQAU6cei6B0+vEZD5FLdE=)
                          3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
                          4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:be:be:a6:56:f6:7b:39:48:92:f8:68:5c:58:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Nov  4 15:01:02 2025 GMT
            Not After : Nov  5 15:01:02 2025 GMT
        Subject: CN=a62c0c84832b5a16745d8d3462d7deaec029dcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:0c:89:6c:be:38:56:f7:53:34:7d:c3:20:
                    3a:5d:c2:62:5d:59:25:d8:f5:a3:4f:44:d3:bd:8d:
                    ed:70:58:65:c8:88:b0:b9:1b:2e:40:1a:af:43:80:
                    63:c6:af:3d:63:0e:5f:18:56:e0:78:a4:0c:6f:80:
                    7c:12:62:6c:ca:7f:22:13:49:2d:70:e8:74:b2:53:
                    0e:ff:81:da:fc:7a:ca:e9:cb:5b:04:19:27:eb:15:
                    90:b4:63:dc:64:b1:7b:60:bd:91:15:49:a2:a2:3c:
                    88:07:22:2c:7f:f4:65:3e:7c:12:d8:09:b5:79:1f:
                    07:37:eb:2a:40:79:81:71:07:3f:12:ce:8b:14:32:
                    69:1b:f9:93:b8:99:c2:43:7b:eb:7f:d2:fe:28:4d:
                    92:f8:5f:09:eb:69:0b:d7:a5:d3:1f:99:02:95:3e:
                    fe:6b:11:87:5f:d4:fe:72:8f:49:dc:c1:0d:f9:77:
                    b3:f6:f7:e7:25:1f:4e:46:0f:83:0e:29:89:ca:59:
                    f9:19:ac:f0:a4:ce:70:ea:1a:5b:76:38:dc:2c:81:
                    78:e8:e5:5e:80:9f:bd:aa:29:2e:fd:f9:1a:d7:01:
                    6b:da:3c:fa:16:a8:8f:f7:be:dc:02:d6:20:a6:20:
                    11:6c:a1:df:47:b1:82:e2:62:bf:16:fd:1b:e7:1f:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2C:0C:84:83:2B:5A:16:74:5D:8D:34:62:D7:DE:AE:C0:29:DC:C3
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:b2:39:98:f9:eb:35:b5:ba:0f:a6:d8:d0:3d:c1:30:22:
         ab:28:51:42:85:aa:12:c3:94:dc:ce:aa:b3:ab:79:ad:e2:54:
         ef:15:36:bf:2c:ab:00:bc:9d:71:4e:64:6c:fd:3d:0f:8e:c8:
         82:e0:33:6b:a8:4f:bc:62:16:0f:0f:2c:57:15:63:67:80:ef:
         ff:ba:00:dd:bf:da:3d:c7:5c:65:bc:b2:b7:84:8a:20:6b:99:
         cd:94:9b:0e:cf:f0:fe:9d:ed:f7:84:7b:1a:ec:5f:b1:95:e3:
         0e:b8:55:1b:c8:b2:8b:f4:a9:17:2b:41:0c:87:57:7d:51:ba:
         bc:a4:6f:39:78:b2:32:38:f1:c6:37:71:7d:91:21:b1:61:4d:
         88:12:96:ce:1e:96:49:3d:9a:14:90:e8:c9:51:64:ba:ef:20:
         a0:58:a2:a9:5d:3c:7d:3c:83:a9:00:57:ec:e2:d4:7b:dc:09:
         5e:a1:47:15:0e:e5:81:db:ae:ae:ba:a8:8d:18:6d:95:e8:54:
         23:a5:90:15:5b:79:fe:e0:11:98:5f:2a:25:40:dd:f6:25:b8:
         96:aa:df:41:06:75:fd:8f:a9:1f:ed:d5:10:f8:80:28:6e:01:
         e1:ec:5c:f6:77:3a:2e:cd:b2:70:fc:82:18:77:d0:99:f6:b8:
         1d:1b:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:02 2025 by rpki-client