Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          8Zpy6U4z45p5eQii0mU/LaETUtdiazrURvyeq2IzOLw=
Subject key identifier:   AD:7E:99:C5:AB:12:35:9F:24:2C:39:44:F8:0E:73:52:CC:9B:6E:75
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       019A017E98578FE61E6FC269A1B2B580CC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 12:01:04 +0000
Manifest this update:     Mon 20 Oct 2025 12:01:04 +0000
Manifest next update:     Tue 21 Oct 2025 12:01:04 +0000
Files and hashes:         1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: HfokA4W53t3oNaCGpx97R4d1VLa2om/9Bur3byFOJxU=)
                          2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:7e:98:57:8f:e6:1e:6f:c2:69:a1:b2:b5:80:cc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Oct 20 12:01:04 2025 GMT
            Not After : Oct 21 12:01:04 2025 GMT
        Subject: CN=ad7e99c5ab12359f242c3944f80e7352cc9b6e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:41:8d:64:93:99:d7:76:3f:d4:55:e0:2a:
                    f7:4a:44:96:e7:95:5d:c5:97:f2:99:0f:92:83:b5:
                    9a:f1:c2:0b:f5:e9:31:73:d5:3d:89:3c:07:55:1c:
                    6a:76:7c:d8:fe:49:44:d7:24:53:a2:03:28:b4:ce:
                    73:78:a5:d4:a3:87:f0:3c:84:67:01:8b:d8:5d:33:
                    5a:0f:31:cf:bd:06:06:cb:51:98:71:54:bc:ec:c7:
                    88:1e:fa:b4:86:ef:ae:b2:ca:93:c3:af:0b:14:d0:
                    3b:d0:6f:21:e5:6a:5d:61:a3:f0:d2:5b:67:9c:91:
                    0a:00:3a:65:fc:a2:f1:43:e6:2e:e3:e6:8e:24:64:
                    2b:8c:9b:e5:73:ed:54:69:be:17:43:37:67:20:85:
                    2b:9e:1e:cc:d2:58:75:78:eb:2c:d3:2d:60:94:5e:
                    a9:d9:47:5d:f5:2f:f5:7e:bc:8e:85:05:85:4c:6a:
                    44:89:99:77:8c:df:52:f3:23:03:18:52:c9:06:37:
                    8a:e0:b5:56:fd:33:f7:09:17:66:46:aa:cd:83:c5:
                    21:5b:4c:dc:80:8b:d1:2e:75:41:2f:db:5f:45:1f:
                    0e:8c:40:0f:23:70:6f:09:c3:89:ad:7d:bd:37:6e:
                    8a:81:e6:af:00:16:80:51:49:32:ba:e7:30:fa:20:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7E:99:C5:AB:12:35:9F:24:2C:39:44:F8:0E:73:52:CC:9B:6E:75
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:75:ba:34:e8:5e:72:4d:fe:28:13:6e:23:91:36:b5:5b:42:
         ca:cf:74:87:5a:26:e4:a1:69:20:98:3d:97:c1:fc:31:1a:5d:
         e7:54:ab:c4:33:0c:da:22:9f:9b:2e:73:84:b8:78:35:5e:9e:
         83:69:cf:f6:ef:ee:ee:dc:a1:cc:ad:26:f8:60:1d:43:04:6a:
         ad:79:c4:a5:87:bb:80:38:13:1a:ec:3f:e3:fe:d3:70:29:eb:
         34:2a:3f:71:f1:ec:03:c8:4f:7f:b6:c1:af:45:88:d3:68:0d:
         96:69:ed:eb:78:53:6f:95:4a:12:8f:e0:64:15:da:3b:c0:f4:
         5e:65:b8:5b:fd:44:8d:cd:5e:08:f1:f4:74:24:17:ff:c4:39:
         cb:ed:63:34:30:ee:96:b7:26:a6:d3:72:99:e1:f5:ff:25:64:
         ab:0e:7f:85:7b:e5:06:5e:b3:66:e2:6c:a5:d1:b4:a6:b7:89:
         eb:8e:21:8b:70:87:8d:ab:f3:51:b5:77:55:b7:fb:dc:5e:94:
         a9:1f:ba:9d:c2:53:19:97:4a:96:75:75:72:de:c3:74:9c:b4:
         11:17:2e:51:b0:d0:70:e0:7d:be:79:1a:04:fd:94:88:f4:e0:
         d5:6f:21:f6:21:aa:ab:e2:c1:2c:dd:97:24:5a:4d:b8:1e:fb:
         dc:d2:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:58 2025 by rpki-client