Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          owbt1xImHq1BX8GLs8pBWctw5coo1h2zIpA0AHbDlYk=
Subject key identifier:   4F:2B:AF:43:DF:57:E5:94:37:46:2C:34:C1:3D:EF:BE:F6:CC:A2:DA
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019A4EF54E6C19048153C1ED99F0BF4ACC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          1712
Signing time:             Tue 04 Nov 2025 13:01:30 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:30 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:30 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: LvXnnCYxpB20gjkhn9UBYEVJruOlou+7ELh2ykGQEvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:4e:6c:19:04:81:53:c1:ed:99:f0:bf:4a:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Nov  4 13:01:30 2025 GMT
            Not After : Nov  5 13:01:30 2025 GMT
        Subject: CN=4f2baf43df57e59437462c34c13defbef6cca2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:d7:52:1d:7e:16:54:70:46:cf:41:4b:db:
                    63:72:05:22:f3:7f:bf:b8:5b:12:94:8b:b2:40:94:
                    1e:50:30:1d:4d:08:52:5d:99:fa:9e:93:c3:0d:ee:
                    a3:30:19:06:ca:8e:51:2c:5c:b9:60:24:0b:90:4f:
                    60:ff:18:e4:a7:0c:49:04:77:9e:b1:d5:72:11:e1:
                    b1:e6:19:e7:82:b3:bc:27:81:2a:cb:9e:5c:26:44:
                    d4:0b:c8:f4:fa:3a:21:5c:3b:50:91:43:86:b1:db:
                    2e:f0:8a:40:3c:59:65:39:77:91:6d:90:99:2b:be:
                    65:83:9e:2b:1c:be:d0:91:15:74:c0:f4:ae:db:75:
                    3e:c5:57:8a:9f:ef:c7:9e:de:93:69:bb:2d:8e:8c:
                    87:20:10:d4:3a:ed:93:a6:a3:d2:80:5c:f9:b3:3e:
                    fd:93:db:f8:d7:8c:87:c5:ee:a7:45:ab:75:d9:97:
                    7b:7a:29:83:ea:1c:81:00:f1:ba:ac:52:88:fb:2e:
                    a8:4f:fc:08:6b:22:d0:96:ca:df:60:55:fe:47:44:
                    88:2c:93:88:fe:c4:ca:e9:84:ae:fd:cf:26:12:24:
                    34:4f:f2:ae:77:66:16:e2:6c:2d:d3:03:ef:2a:2b:
                    a9:ad:34:5e:f8:0a:03:63:cc:80:28:27:93:d5:b6:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:AF:43:DF:57:E5:94:37:46:2C:34:C1:3D:EF:BE:F6:CC:A2:DA
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:93:c9:a1:5c:c3:9c:35:9b:5e:53:9a:64:11:80:2d:71:3a:
         27:8d:e7:39:0f:a6:48:06:45:60:8b:fe:9e:13:84:31:ea:e6:
         bc:9e:9d:b8:d5:09:05:c5:b9:08:b0:db:f3:76:d5:fe:33:cd:
         f1:11:e4:ae:78:5e:f8:96:9c:d7:5d:ba:56:3d:ad:68:d4:e4:
         68:00:66:9f:c8:db:9d:c4:bb:34:4b:6e:4b:95:84:5e:f8:72:
         d6:7b:c8:19:e9:f1:0d:e5:f5:53:2d:5f:30:d8:ea:f7:99:42:
         42:f3:ed:1f:53:f3:16:df:6e:20:50:fa:8a:7c:8e:b6:1e:80:
         7b:df:ed:a6:24:5c:ea:96:74:2a:36:26:07:ac:6f:43:c7:5e:
         5b:89:39:29:ce:d2:85:e0:0b:ad:cc:76:8e:86:73:9a:73:71:
         44:80:53:cd:cb:71:67:37:c5:10:2a:4d:06:4c:7a:65:04:32:
         68:2f:60:1e:ef:a7:78:d6:ff:19:7a:e0:c8:e0:f2:3e:1a:c0:
         63:ff:b8:91:17:25:74:4a:dc:91:3b:38:9a:14:ce:39:d3:a2:
         e8:fd:56:59:ad:8e:75:b5:c8:c9:c2:ea:7f:12:85:a9:3c:63:
         1b:0d:e0:a9:94:1e:36:fa:56:15:cd:4f:e7:44:f3:d7:3f:da:
         37:21:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:15 2025 by rpki-client