Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File:                     XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier:          61HxrqqCk+6xAdSkUzALBXIKtnw5Y+vsGPFxUuuSyTw=
Subject key identifier:   46:6E:EB:1E:CD:77:ED:E6:1E:1E:75:91:2D:6C:6F:AB:B5:F6:DC:15
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer:       /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial:       0199FBEA7E0DF35075F73EB665BCA495175A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:12 +0000
Files and hashes:         1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
                          2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: Bv647BElENslcrQkst7U8VvbUPuYqSSipHTPy+iGBPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7e:0d:f3:50:75:f7:3e:b6:65:bc:a4:95:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
        Validity
            Not Before: Oct 19 10:01:12 2025 GMT
            Not After : Oct 20 10:01:12 2025 GMT
        Subject: CN=466eeb1ecd77ede61e1e75912d6c6fabb5f6dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:f3:84:43:38:d3:57:e2:30:06:43:30:38:
                    86:ee:0a:92:53:a7:e7:90:b8:11:30:72:13:93:1c:
                    3c:d7:49:c8:3b:d3:72:55:23:b0:97:f1:49:d3:30:
                    48:3e:e9:24:64:f6:31:9a:bd:ce:ff:99:32:26:2d:
                    b1:63:72:24:3d:24:01:3c:b4:25:6d:59:53:33:85:
                    4a:c6:3c:1a:f7:c0:3d:62:49:d0:9e:19:bc:96:08:
                    12:ce:5c:65:0b:e3:e3:63:ab:49:0f:93:af:8d:0e:
                    c1:99:a2:b3:2e:63:77:d7:fd:2d:67:98:b6:94:d1:
                    59:bb:4d:10:e2:88:4c:e9:7d:80:ce:64:ba:d7:32:
                    64:5b:b0:5f:ec:f3:17:43:6c:c5:d2:53:09:45:9f:
                    9e:5e:f0:92:5f:09:6d:80:a0:9a:a9:06:65:e7:be:
                    d8:0a:8c:f3:c1:0f:16:00:05:af:12:a3:f0:54:aa:
                    6c:67:da:6b:f5:46:1a:9b:57:39:47:0c:77:97:e8:
                    79:d2:41:45:a4:4a:eb:c1:33:12:3f:a5:e9:63:e1:
                    cb:ae:2e:94:28:11:5e:ac:42:ac:e9:d8:a6:dd:a9:
                    6e:70:be:df:4f:69:d1:8c:ec:27:8e:0b:be:d6:f0:
                    63:87:3e:cf:a3:fe:14:2e:dd:b2:11:af:8b:bf:a2:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:EB:1E:CD:77:ED:E6:1E:1E:75:91:2D:6C:6F:AB:B5:F6:DC:15
            X509v3 Authority Key Identifier:
                keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:08:f0:c3:07:d7:7c:e5:53:e7:2b:a4:cd:89:40:d5:32:2d:
         6c:22:09:fa:10:b8:b4:ee:27:bb:21:99:cd:a1:3f:f4:c6:40:
         cc:ad:fb:12:96:1b:f0:68:52:9c:24:be:5c:b2:31:3a:5f:f7:
         94:17:49:3b:a6:7f:74:c3:e7:6a:15:91:7a:41:0a:7c:7f:8e:
         8f:ca:56:cc:78:f1:d9:fe:9e:6c:30:01:d4:dd:8d:92:29:bc:
         3f:73:93:5b:d0:56:a3:ea:b4:ae:b1:88:e2:b1:36:22:51:f6:
         fa:aa:aa:c9:0f:5a:37:5a:91:b5:16:07:e1:9b:74:46:56:af:
         bf:09:cb:2f:7f:ef:37:5c:3f:c4:ea:6e:49:07:83:55:06:1f:
         95:18:2e:ab:34:cd:b8:0d:1a:ed:86:03:72:6b:f8:4c:98:ea:
         fb:1c:ee:7d:d5:7b:c0:8d:8f:22:b1:eb:f7:be:7d:1b:ad:b5:
         b6:fd:40:d8:83:58:6a:d3:01:92:e5:82:42:16:40:e6:ff:7c:
         e6:68:19:5c:84:4d:82:a7:41:88:a7:85:03:aa:d1:e3:88:48:
         b1:f5:68:a0:0a:eb:c3:6b:ca:f1:1b:8f:26:25:71:90:fe:37:
         55:cb:76:7e:a8:aa:f8:c8:19:a2:d8:e4:6f:1b:83:f6:cd:ba:
         05:02:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:08 2025 by rpki-client