Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File:                     FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier:          HikNFR6EoSSOzdFaI+gj/evlZeIfNcxJ1N8L8tU6RcA=
Subject key identifier:   2B:53:33:AE:3F:26:10:C0:4A:16:CD:71:F6:8F:E5:5D:11:0F:56:3D
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer:       /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial:       0199FBEAAEE5A73C183777D746787C25C186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:25 +0000
Files and hashes:         1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: 7AXjeKqRCOfe7vHxjyPY3LRBzwHbp1/i587Clb3PZX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ae:e5:a7:3c:18:37:77:d7:46:78:7c:25:c1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
        Validity
            Not Before: Oct 19 10:01:25 2025 GMT
            Not After : Oct 20 10:01:25 2025 GMT
        Subject: CN=2b5333ae3f2610c04a16cd71f68fe55d110f563d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:d8:42:bc:a4:74:d8:73:68:77:95:bc:a7:
                    ab:01:e6:85:21:bd:74:94:ba:ef:fc:26:d4:fa:64:
                    61:81:95:1f:bc:34:b3:1d:82:37:b4:44:d9:d1:8d:
                    d6:80:e6:8c:40:d6:0e:4e:56:18:8a:bb:d3:4d:f0:
                    a3:e6:fd:da:a7:c1:66:89:7d:26:fc:bb:88:bd:76:
                    a1:10:34:6c:f6:40:41:fe:3c:8c:ce:41:b3:4d:dd:
                    93:eb:03:14:40:f4:af:e0:5f:f4:85:b5:39:9c:ae:
                    98:34:63:db:a3:25:a8:95:61:bb:7d:37:f5:65:0d:
                    00:1a:fc:75:37:71:c2:09:f4:f1:c6:82:31:db:03:
                    a9:f8:02:f1:8b:1f:26:e9:dc:11:1d:03:f8:62:12:
                    24:ad:c1:b5:90:a9:d7:92:4f:90:41:a0:c1:19:ea:
                    28:9f:ca:ec:0b:c3:8a:65:97:43:5e:d4:0d:72:42:
                    a6:8b:c3:3f:cf:8c:90:6e:a4:3b:e9:bc:56:4f:ce:
                    42:0b:62:31:f4:37:a7:5c:ca:b5:4c:a7:98:83:c1:
                    3a:7a:fd:ab:25:45:05:33:67:14:eb:a2:1e:e3:b7:
                    1c:ba:6d:8d:02:23:f6:3a:44:f6:2a:3a:e4:61:28:
                    90:0d:cc:83:3d:09:60:b6:d2:2f:51:fb:76:6b:e2:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:33:AE:3F:26:10:C0:4A:16:CD:71:F6:8F:E5:5D:11:0F:56:3D
            X509v3 Authority Key Identifier:
                keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:12:9e:a8:68:f1:27:dd:b9:de:90:28:09:a9:5b:b1:75:
         3b:94:cb:2e:94:8d:26:c4:3a:f5:93:bd:f6:e0:2d:d4:12:77:
         b8:2c:e3:89:42:7c:8b:09:e7:ea:6d:71:6e:1e:8c:f3:cf:a2:
         9e:a0:b5:3f:17:98:17:c0:1f:c2:31:67:56:a8:04:e5:73:cd:
         64:78:84:95:6f:68:8c:a3:b1:22:99:2f:86:08:3a:0d:e7:b5:
         e9:50:4b:c5:cf:a0:e1:56:b1:7e:d6:e5:07:ad:d1:ac:d3:ea:
         42:3b:d7:b6:16:c8:34:4a:70:b1:fa:95:bf:14:0e:4b:62:c3:
         10:d6:bd:8b:0b:1e:b1:95:54:92:9c:69:e7:31:54:ab:ea:d9:
         51:e3:fc:ca:5a:94:b6:15:2e:1e:05:97:08:f1:d5:e2:0e:70:
         91:db:9f:d4:25:33:76:ab:70:12:63:c4:44:14:15:fc:93:d3:
         b9:8f:d3:4d:1d:64:82:58:b3:60:59:ec:e9:ff:1f:88:73:92:
         59:bc:dc:15:be:67:37:2a:3e:57:e2:a3:64:29:84:63:3e:4c:
         eb:25:c9:c5:ef:cc:61:19:d5:e9:80:95:50:00:e1:49:61:f4:
         d8:c2:50:cb:42:1f:96:4f:7c:af:bd:d9:99:9c:ca:11:1d:3e:
         11:b3:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:31 2025 by rpki-client