Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File:                     9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier:          E7t6IKUR4AWHWNshK0iAoZnQ94FzNHVqN8llM+ZaRCo=
Subject key identifier:   0E:4C:3B:A9:55:C1:39:1C:3D:B6:3E:98:5B:8F:7B:A7:14:51:97:17
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       019A4FD01EFBF8A1796EC78BA731C4EC4C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number:          0361
Signing time:             Tue 04 Nov 2025 17:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:30 +0000
Files and hashes:         1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: j7mP2iPPpldn0eCKJrp1HCXKBBlN8IhxOYL+ILZK4HA=)
                          2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=)
                          3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=)
                          4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:1e:fb:f8:a1:79:6e:c7:8b:a7:31:c4:ec:4c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Nov  4 17:00:30 2025 GMT
            Not After : Nov  5 17:00:30 2025 GMT
        Subject: CN=0e4c3ba955c1391c3db63e985b8f7ba714519717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:1f:9e:ee:51:b6:e2:7b:6f:27:b5:65:75:
                    66:b5:91:a6:97:72:1d:b9:41:ed:45:a1:5f:09:4a:
                    7a:c1:7b:06:0f:c6:9e:6b:4f:cf:7a:86:72:c0:71:
                    e3:5d:f0:77:c8:34:20:60:05:0a:3c:1e:82:8e:8d:
                    51:c0:43:34:28:d4:08:96:75:1a:6d:76:76:11:b0:
                    8c:4d:2a:c5:1c:2f:fe:06:4f:88:99:df:d2:50:69:
                    22:2b:df:69:fb:85:6c:f5:66:61:46:2a:4a:4c:5d:
                    56:d4:cf:42:b1:de:0b:a5:e9:58:63:3e:b5:8e:91:
                    e1:4e:fb:f4:6e:54:81:62:49:31:74:96:22:f4:4c:
                    ec:65:a9:b8:d6:34:0f:cb:56:ba:fd:13:8f:bc:2c:
                    7d:39:df:12:6a:3b:61:bc:8d:7b:c0:77:ee:58:f7:
                    4f:26:8b:42:fd:ce:f3:79:6f:bb:b9:b7:6c:24:6d:
                    52:fe:6d:8f:c6:0d:1f:8e:43:72:49:a3:dd:f9:3a:
                    f1:65:55:70:52:78:60:de:c5:43:46:e0:71:21:38:
                    5a:7a:8a:3f:e0:93:67:0d:aa:1b:6a:ac:79:8a:77:
                    83:aa:80:dc:e3:27:80:50:5e:b8:b6:5a:b3:3e:95:
                    9e:cf:90:87:72:7e:94:99:07:02:27:d6:75:05:96:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:3B:A9:55:C1:39:1C:3D:B6:3E:98:5B:8F:7B:A7:14:51:97:17
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:15:ca:ed:cc:b6:a9:55:d5:ad:24:02:6e:ee:67:81:bd:49:
         74:46:89:b5:fe:72:71:12:02:00:80:9a:84:d7:57:a1:c4:6c:
         54:bb:06:18:2f:9d:20:d3:d8:c3:b2:b6:dd:07:85:9c:db:ed:
         58:fb:4a:1b:eb:78:1f:5d:4a:b6:1c:0e:c8:9b:37:2d:89:3c:
         02:18:9c:d1:52:58:51:16:3d:4e:37:53:15:64:05:bc:6b:5f:
         4c:92:82:f7:e8:b4:a5:03:17:a5:17:f7:c1:2d:4c:46:ba:71:
         9c:ee:72:39:7e:f4:40:2e:2f:b4:4a:4f:aa:e7:74:9c:29:74:
         ae:df:2c:23:0a:68:4e:d7:3d:61:49:b3:4a:68:a5:e0:64:3f:
         27:dd:1d:c8:44:cf:88:ad:78:30:e1:8d:4a:b5:65:55:f6:c2:
         72:a1:35:97:93:83:58:30:ef:23:0c:4e:21:6a:0c:fb:a0:85:
         dd:98:34:50:95:ba:12:cc:55:1d:29:2c:44:59:37:06:c5:38:
         b8:bb:a8:26:fe:12:c7:62:97:49:b3:a9:85:b7:bc:ba:f3:ad:
         da:c1:99:34:1b:6c:a3:9e:28:ad:60:fd:d5:0e:49:61:fb:d4:
         a5:a2:65:1a:76:d3:a6:ea:9e:0a:09:30:e9:96:c1:d1:78:03:
         67:1d:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:40 2025 by rpki-client