Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File:                     sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier:          kYOHo0TawSiMxW2TBs90mWTpZ2lkD9QzLB6y3bUkLPI=
Subject key identifier:   69:23:4F:A0:5D:E3:74:86:44:0B:D1:32:69:7B:96:5E:91:41:16:94
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer:       /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial:       0199FDD96CE6EAB4DA6C7DB24737AC539A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 19:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:48 +0000
Files and hashes:         1: pgTDkA03VW0zDxlnTBVHz55HqJY.roa (hash: rBFxYtlNHOxBeylPNnZjz2J7DVtg6cM4mYoztB0MlM0=)
                          2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: kznk/V+ZBrM/6GOdXFgYx527c+GxwDnvi3c1pgpzQUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:6c:e6:ea:b4:da:6c:7d:b2:47:37:ac:53:9a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
        Validity
            Not Before: Oct 19 19:01:48 2025 GMT
            Not After : Oct 20 19:01:48 2025 GMT
        Subject: CN=69234fa05de37486440bd132697b965e91411694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:a7:ed:7a:55:f2:ce:68:01:eb:6f:ee:db:
                    eb:12:dd:3c:4f:c8:d1:44:e6:1b:b0:03:12:8c:8f:
                    cd:9b:ca:1d:5c:39:61:89:be:0e:b9:94:7f:e0:69:
                    91:a5:d0:bf:5b:53:7e:e4:18:bc:b9:fd:c0:5e:92:
                    7a:2b:c5:30:e1:90:cc:da:4d:8a:b4:e3:1d:d2:9d:
                    bc:30:fd:79:06:72:d4:09:1b:21:40:48:e7:19:29:
                    cd:bf:0b:44:39:8a:80:21:70:f3:90:ac:c5:2e:a8:
                    4e:93:c3:58:9e:f6:7e:a0:41:00:31:0f:70:a5:e6:
                    a8:c9:06:fe:cb:fd:f4:aa:6a:4d:4c:f2:0f:be:a4:
                    97:56:87:29:43:70:41:e0:d7:6f:c0:6d:83:32:ad:
                    98:b2:75:a9:fd:45:7f:d7:a5:fa:5a:33:c0:e4:a2:
                    29:32:19:41:a1:28:e0:78:9d:df:50:b9:4f:4f:28:
                    55:29:a8:38:37:d9:2d:fd:5e:36:14:10:f0:32:da:
                    ff:fe:6b:e9:bd:75:d7:6a:b7:6d:92:25:98:26:00:
                    f8:59:36:c9:7f:94:ed:fa:6b:4e:91:20:8d:f5:ab:
                    99:7f:c0:21:ea:fc:32:fc:28:c6:2d:26:e6:9b:86:
                    39:af:92:4b:05:b5:d8:6e:e1:83:18:a5:a2:eb:17:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:4F:A0:5D:E3:74:86:44:0B:D1:32:69:7B:96:5E:91:41:16:94
            X509v3 Authority Key Identifier:
                keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:29:f9:49:bb:91:49:60:bb:92:e3:1d:d5:93:72:0f:e1:
         6e:b7:19:fc:97:df:12:c3:04:c7:ac:e6:e4:1c:00:c8:04:4b:
         22:cc:43:b2:02:32:07:00:6c:f5:bf:ae:4e:c7:45:51:63:23:
         ee:f3:7d:79:2a:80:44:59:26:68:a1:46:02:6f:45:b0:ba:15:
         68:7c:12:76:6f:be:9b:67:42:bd:3d:e5:e1:5e:22:d2:d2:89:
         03:fc:1f:98:c4:ca:1f:6d:72:26:8e:2a:1c:4f:8a:aa:a8:ea:
         f4:9e:18:16:97:fc:35:f3:15:d3:85:8b:03:73:6c:f7:ea:bc:
         b2:c9:58:b9:d2:be:8f:b8:8c:b6:f8:f2:ea:54:9d:79:ba:c4:
         66:66:0a:d9:f7:4b:54:09:85:84:63:de:1a:10:5b:a9:ff:e6:
         77:a1:ec:6f:72:85:d9:d6:0d:9b:96:b0:23:b8:5d:ed:d9:b7:
         eb:55:cc:1b:b8:bc:a7:65:88:8d:fa:e7:51:da:d9:63:9d:22:
         81:88:e3:b9:8c:2c:17:e6:c3:67:fd:ae:45:0f:cc:aa:82:4e:
         e2:f7:ea:c9:6f:09:86:61:c9:71:c1:67:d7:ed:c2:c3:08:8b:
         90:a5:d4:a9:e6:06:8c:0d:2d:fa:d4:a8:26:d4:2b:77:14:a0:
         9c:66:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:37 2025 by rpki-client