Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File:                     c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier:          Oe0ezjKOGUDe6iwUoH5RzFcF4zBQzjRUanQY58K5KLs=
Subject key identifier:   B1:8A:03:BF:AE:AF:E7:3F:17:28:74:85:9B:94:0A:64:33:05:30:89
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       019A522C4CF7D061486903089EFBAA640093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number:          152B
Signing time:             Wed 05 Nov 2025 04:00:26 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:26 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:26 +0000
Files and hashes:         1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
                          2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: C7XtUITddmEoNHeAh8SnoTX/N43z/rYMZsE64+WNg0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:4c:f7:d0:61:48:69:03:08:9e:fb:aa:64:00:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: Nov  5 04:00:26 2025 GMT
            Not After : Nov  6 04:00:26 2025 GMT
        Subject: CN=b18a03bfaeafe73f172874859b940a6433053089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:b5:77:1b:64:06:cd:6d:bd:83:04:1d:61:
                    d2:d2:76:46:31:de:b2:67:ef:40:7b:85:c4:49:1e:
                    57:19:ee:5a:02:59:26:1a:e0:2c:6b:7f:49:d2:02:
                    6b:54:f2:eb:2c:16:25:36:1b:21:46:a2:0c:0d:d4:
                    96:24:b5:9f:af:5e:aa:56:3f:81:1d:70:6a:20:c7:
                    5b:7c:4e:33:04:8a:5e:d7:e3:b1:0c:32:42:d3:44:
                    2d:43:07:b3:c0:b1:bc:4e:1a:93:cc:23:22:49:81:
                    b7:d0:51:60:43:6d:a3:08:e2:ae:5d:4a:ac:c8:10:
                    bb:ac:81:7e:90:ea:9f:e8:e6:94:bb:96:d3:8b:c7:
                    d1:5a:89:ce:f3:e3:cb:7b:0c:f2:f8:50:98:1f:66:
                    0b:48:7a:b0:19:9a:0a:79:5d:4a:58:bc:e0:95:ab:
                    f8:1c:20:d1:29:3c:22:09:35:52:23:b0:8b:0c:14:
                    d4:86:1c:f2:35:c0:40:62:fb:4d:87:09:e2:c6:ba:
                    bf:26:77:31:b6:d3:45:a1:c8:85:b5:29:63:14:26:
                    c1:59:73:04:04:6b:c9:cf:ea:76:80:05:55:1a:0b:
                    b5:a4:5e:7c:8f:72:5b:b3:84:93:28:58:e5:b1:1b:
                    27:01:d1:08:1c:29:c1:a4:66:a0:d5:99:54:94:cf:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:03:BF:AE:AF:E7:3F:17:28:74:85:9B:94:0A:64:33:05:30:89
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:3f:48:58:cd:5b:70:a1:96:a8:3b:13:c7:31:ed:84:84:
         dd:3f:85:b8:67:55:d4:21:94:da:7c:da:d1:59:66:f9:dc:c2:
         02:53:41:9c:2a:a1:ab:09:73:93:00:fa:d4:c3:ff:1f:58:a8:
         ee:2d:48:4c:c2:ed:11:af:75:36:ee:11:ed:5f:44:cc:e2:24:
         34:94:e8:a3:0d:25:25:4c:0e:85:56:eb:83:37:77:3c:92:57:
         92:be:f5:ab:27:b3:97:34:78:b6:b4:d3:2a:01:33:71:3e:b0:
         22:35:cf:12:bd:a8:12:6b:e0:ce:9c:52:d0:28:b0:7c:57:8e:
         85:b3:ab:a1:4f:ec:8b:85:e7:c6:17:8d:c6:39:a5:f7:01:0a:
         0f:52:6f:8b:e2:e5:58:e5:7f:e4:73:00:13:f2:34:6a:2e:a2:
         c2:86:b2:32:43:04:85:5a:43:17:a5:d0:f4:be:84:89:5e:b7:
         96:2a:9b:74:95:19:5a:7f:3e:07:5d:42:03:76:df:b8:89:31:
         d9:7e:83:1d:e9:81:cd:73:26:b4:d6:e0:08:bf:0e:c7:e2:90:
         91:ca:f0:32:b5:9f:e8:23:60:94:f1:bf:35:f3:c5:69:ef:7c:
         9f:71:e6:f4:49:af:b5:8f:2b:3e:a2:ae:54:d9:6e:70:b6:d4:
         44:40:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:29 2025 by rpki-client