Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          X3pLPzXy8PX8WIJ4u0g7vb9+6mQJ7r84B1GlhDR0GN0=
Subject key identifier:   53:07:36:A3:E0:BD:40:47:41:46:89:C6:7B:A6:C5:29:BD:FF:A8:87
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       0199FC58C1BFB54087C2B644D64ABFF07F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:39 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: dy3eGQy7eipNoqQ0JCoAzbSV5rzYj36wagc0hmye3Ps=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
                          4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:c1:bf:b5:40:87:c2:b6:44:d6:4a:bf:f0:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Oct 19 12:01:39 2025 GMT
            Not After : Oct 20 12:01:39 2025 GMT
        Subject: CN=530736a3e0bd4047414689c67ba6c529bdffa887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:b8:fb:9a:5c:69:22:ac:cf:f9:d5:79:cc:
                    e4:4d:ec:1c:f5:9d:d4:6e:19:f6:43:fd:49:5a:8d:
                    51:5e:d5:fa:41:65:f6:4c:52:68:30:98:d7:4e:ab:
                    10:d4:56:48:75:29:d9:8b:f0:3d:0c:17:33:d8:52:
                    46:bb:ed:8e:9f:cc:fd:84:92:ca:47:2d:c9:03:41:
                    fd:c1:39:8f:28:e8:ab:f3:20:71:d5:1d:d5:a5:a3:
                    63:d2:0e:4e:af:9c:5d:d3:69:3c:6c:23:85:87:ad:
                    e3:67:4d:9a:9b:69:f3:d9:15:ce:62:f2:59:a9:a6:
                    d4:ee:c3:39:f2:93:43:c9:b1:d2:ad:c8:30:b0:91:
                    5a:57:96:c9:92:b1:4c:f7:4f:4d:99:15:51:1d:54:
                    b6:9b:e0:eb:48:8d:89:33:84:79:2e:ef:6e:d9:a0:
                    0d:7c:c4:a5:7d:af:0b:11:d0:85:a9:d5:13:fe:51:
                    75:02:52:76:5b:c3:70:2e:0b:32:86:07:9e:76:f1:
                    25:65:bb:94:a2:c9:fa:92:ef:57:86:d4:c8:65:2c:
                    e6:00:a5:82:e7:d6:92:cc:b8:df:a3:e8:1a:45:c2:
                    42:73:da:c8:50:a1:50:74:a6:9b:f9:b4:45:48:d2:
                    a9:cd:5f:0e:1f:01:9d:8f:ed:da:d6:fe:22:d5:cb:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:36:A3:E0:BD:40:47:41:46:89:C6:7B:A6:C5:29:BD:FF:A8:87
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:29:b7:72:82:c0:d6:de:cd:21:b4:61:0e:85:26:91:88:
         29:20:68:70:02:d2:c5:37:51:f3:cc:8d:57:7b:05:43:a4:ee:
         01:85:a3:b9:46:fc:25:d3:b1:0c:46:0e:01:c5:0a:86:44:2b:
         c0:34:06:70:df:3a:97:02:f4:ab:b6:76:8d:a6:25:84:3e:bf:
         e5:b6:4b:62:c0:06:a9:c7:6f:4b:f4:f9:e9:2a:da:ec:5f:3b:
         d8:9a:ad:1c:a5:16:b8:d3:33:89:e4:d1:0c:46:ca:e3:ec:79:
         d1:f2:78:2e:cf:90:9a:dd:a2:fc:28:a3:db:db:98:3d:4a:09:
         b0:56:02:c1:ac:fb:e9:f0:56:61:66:01:80:a0:0a:9f:4f:76:
         db:c6:f1:9c:59:d5:7a:eb:6c:6e:84:ea:f2:46:12:3f:1d:16:
         7a:b9:ab:31:d5:d7:72:4a:48:c9:e5:73:a3:20:63:2c:48:e9:
         da:fb:41:3f:5f:44:b1:ac:c8:ca:78:88:ff:6d:6a:6b:03:03:
         82:fe:89:96:74:93:5b:30:be:e6:81:ea:cf:41:92:68:ed:a2:
         82:5a:1b:88:84:9a:79:ee:22:fa:8d:6a:f1:ea:8d:97:88:11:
         3e:32:08:ec:b7:ad:81:08:57:6e:0c:b8:47:9f:66:10:a6:b3:
         8e:e5:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:39 2025 by rpki-client