Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
File:                     c-9Luv3HPlPAmdTVLpye_6g3m08.mft (raw, json)
Hash identifier:          Tg+SGaEI/yDQz/Kr5XVpf3fbyYDkQN2hqeeX1tQVk8k=
Subject key identifier:   BC:08:C7:33:59:2C:10:23:D0:59:73:A7:09:DE:2E:16:4C:C9:CF:75
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Certificate issuer:       /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial:       019A4EBD562F84519E242887142FCDBC5873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
Manifest number:          1331
Signing time:             Tue 04 Nov 2025 12:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:22 +0000
Files and hashes:         1: 9pCer8puLnj5hC-8qZh7MHueqPs.roa (hash: IUzgUbYlTvAtwHST9A9dU/nYKg0FWPtCZLzU6KzN7aI=)
                          2: c-9Luv3HPlPAmdTVLpye_6g3m08.crl (hash: EY1RpBc1Pk2AsEa7sq9d1Cv8WQ/+TMwBupMvG3PHaJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:56:2f:84:51:9e:24:28:87:14:2f:cd:bc:58:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
        Validity
            Not Before: Nov  4 12:00:22 2025 GMT
            Not After : Nov  5 12:00:22 2025 GMT
        Subject: CN=bc08c733592c1023d05973a709de2e164cc9cf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:ce:2e:f9:6b:37:c8:89:65:5e:4f:8f:cc:
                    8a:11:b9:84:32:f1:a9:1a:3b:1e:28:53:e9:e4:cb:
                    02:7f:0a:4e:ce:6b:e3:57:03:63:e2:37:c9:b5:45:
                    91:d6:94:a0:94:22:04:59:86:39:d3:e0:73:c5:17:
                    e1:39:d3:bb:df:27:ba:03:7f:83:a0:a0:c9:4d:6d:
                    04:a0:5a:50:92:ed:5b:11:ac:9f:b0:f1:e4:04:e2:
                    96:f0:ff:27:5f:eb:d2:c1:e5:ff:16:a6:e1:8c:f3:
                    89:a9:76:8c:71:4f:16:58:6d:c2:4e:9c:e5:53:5d:
                    fb:89:e0:2a:6e:d7:bf:a8:85:94:38:4c:7c:63:12:
                    45:31:5b:58:54:7a:86:49:10:f6:21:8e:19:74:10:
                    58:94:84:9a:ac:1d:96:d2:26:1b:1d:2e:08:95:8d:
                    e4:1c:f4:10:5c:5a:e5:ef:74:f8:cb:83:b4:ec:3b:
                    34:c9:8a:c1:27:0e:05:fb:51:9e:df:f4:d1:03:27:
                    a9:32:26:e1:00:33:48:88:8a:92:81:97:73:f3:fb:
                    76:11:8d:0a:ab:76:6f:74:ff:20:23:a8:5e:10:8e:
                    b3:4d:73:91:09:6d:13:f4:f7:b0:03:14:b2:49:2e:
                    96:58:f5:7e:d9:94:a0:69:b9:28:1d:7b:11:85:cc:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:08:C7:33:59:2C:10:23:D0:59:73:A7:09:DE:2E:16:4C:C9:CF:75
            X509v3 Authority Key Identifier:
                keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:dd:46:03:12:53:a1:b3:c2:05:e0:ca:84:64:75:96:dd:
         3e:9c:b8:f2:ef:c0:ed:c7:22:fe:4c:96:2d:76:fa:83:a2:04:
         0e:f1:5f:ef:6a:06:15:9b:88:f2:cc:2e:eb:db:44:37:ab:70:
         8c:6e:e4:5f:62:28:e7:38:1f:4e:f2:ea:6b:b5:17:2c:3e:11:
         86:16:40:7b:f0:c3:3d:05:50:f5:6b:f3:f1:c3:b0:5e:66:14:
         f0:1d:80:62:09:d8:c7:8b:e5:00:27:7c:dc:45:60:e3:a9:83:
         86:45:4d:ec:93:76:4c:24:b9:7d:0e:3a:68:28:69:0b:67:3d:
         22:7c:f2:f6:d8:87:94:17:36:51:d0:d1:1c:fb:38:f4:05:1d:
         bb:b2:33:32:06:03:e5:24:80:46:03:19:bf:e8:0c:55:a1:19:
         e4:41:ba:17:8f:2e:75:72:8f:ab:f4:15:ec:0e:7c:a8:3d:d4:
         43:32:6e:6c:52:84:11:5d:60:8f:fd:a7:50:0e:46:55:68:62:
         a2:88:b8:06:ef:85:64:2d:02:08:6f:3e:80:85:dd:d4:c6:fb:
         86:86:d7:fb:1d:97:10:09:f0:dd:d0:ba:e4:ad:05:ef:fc:e9:
         fc:6b:0b:52:e6:8f:83:08:e0:52:6f:76:8d:c8:a8:74:ae:0a:
         55:da:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:28 2025 by rpki-client