Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          HmBksz03DfgAQvj/hEjbcOdc17tUUC/zSFxHqiIkoKA=
Subject key identifier:   09:2B:9C:F4:AB:7F:07:E9:72:BE:AD:D9:6E:34:D0:67:A5:65:95:FE
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       0199FBEA7411E1DF7CEA68E745379AC781A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          16F3
Signing time:             Sun 19 Oct 2025 10:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:10 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=)
                          3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=)
                          5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: gav4QLiSDMJN4ZbfQcPWz34nTbXaPCrMlms1KRMttWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:74:11:e1:df:7c:ea:68:e7:45:37:9a:c7:81:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Oct 19 10:01:10 2025 GMT
            Not After : Oct 20 10:01:10 2025 GMT
        Subject: CN=092b9cf4ab7f07e972beadd96e34d067a56595fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:ea:43:30:d7:8a:aa:ce:11:9f:28:a7:81:
                    04:a3:4d:7a:e9:55:6f:ea:39:0e:20:8f:33:41:2d:
                    dd:33:ee:0b:8c:36:2e:94:3a:81:b8:9b:04:ac:7e:
                    bd:01:46:95:e2:3c:e3:b7:94:23:04:39:c4:2f:c5:
                    1b:5a:06:4a:b6:51:69:d7:9b:33:93:39:53:6e:b9:
                    96:97:17:49:b4:63:dd:a8:b1:09:bc:a7:a1:f1:c1:
                    f8:a2:b4:66:0b:01:d0:4a:66:12:29:f6:c2:1c:e2:
                    50:60:d9:7d:cd:09:2b:f9:d9:fb:61:2d:2f:ee:4d:
                    24:61:03:9a:15:3c:f0:0d:a1:b5:c1:9d:4a:b9:b4:
                    8f:8a:24:24:80:44:10:6c:17:96:2e:07:29:b3:70:
                    22:1b:93:10:8c:a6:c7:67:a8:90:bf:70:8b:bd:a9:
                    10:2f:7d:3a:f9:ae:64:3c:07:da:2b:31:06:b4:62:
                    bd:6f:15:70:f8:ad:51:9d:c0:e1:2e:64:b4:ef:d4:
                    71:51:aa:5f:0c:ff:38:de:99:fd:d2:47:04:a5:e0:
                    ad:ff:d5:18:42:1a:65:67:3b:07:8b:0f:4c:18:03:
                    28:cd:68:4f:3e:aa:e0:33:4c:99:f0:b0:d5:14:93:
                    dd:b2:85:63:5f:ca:73:e9:53:27:5a:0a:34:93:f2:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:9C:F4:AB:7F:07:E9:72:BE:AD:D9:6E:34:D0:67:A5:65:95:FE
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:c3:f1:d5:2d:26:2f:8b:87:7b:2a:a5:6b:f1:41:44:e9:
         37:29:e6:3e:85:eb:24:c7:ee:bb:90:5b:ce:92:58:df:4a:40:
         fd:95:a8:00:9f:14:58:4d:27:70:51:19:62:e1:07:62:6c:48:
         22:d2:cd:62:df:ef:d9:a3:85:d6:57:37:7e:6b:17:a4:80:24:
         2f:25:38:a5:d4:7f:7f:19:01:49:23:64:79:59:da:60:1b:e6:
         55:a5:f8:a1:7c:f6:47:ec:00:b5:54:e6:43:7e:f8:81:78:cc:
         5d:a6:cd:d4:65:49:93:17:ee:a0:57:d5:63:39:ec:63:56:40:
         ca:0c:e3:52:12:17:1d:8b:7a:ea:cb:29:2f:c0:bf:de:03:8b:
         61:c0:a8:cd:77:b9:19:60:5b:6c:3a:e4:91:ab:6d:43:e1:95:
         3a:99:17:e3:2f:55:e7:21:21:77:67:be:f0:af:ee:b0:ee:9e:
         b9:94:af:63:97:65:4d:16:7a:0d:18:d3:d9:56:fa:8f:91:e5:
         58:0e:65:bf:73:1e:3d:7b:22:b7:99:ce:f8:e2:7c:59:05:de:
         91:eb:1c:82:4b:a1:6b:dd:71:30:31:64:4f:e5:bf:fd:d3:ef:
         89:02:2a:34:8d:d1:ac:ef:54:81:49:83:fc:fa:ac:80:70:07:
         ed:43:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:19 2025 by rpki-client