Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          hFVA49kU0oEe+D0Lff71bG4WJaytmeCZ03cdNorwEvY=
Subject key identifier:   01:76:3B:B1:59:59:93:C0:39:AF:89:7E:46:2A:2D:F7:17:11:00:2C
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       0199FCFD62F211684D97F01052419C9BEC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 15:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:28 +0000
Files and hashes:         1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
                          2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
                          3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
                          4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
                          5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: /5mj5OEyielieXVjVtl9QBBAGFkad/TsJ4dOBYCy4Fs=)
                          6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:62:f2:11:68:4d:97:f0:10:52:41:9c:9b:ec:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Oct 19 15:01:28 2025 GMT
            Not After : Oct 20 15:01:28 2025 GMT
        Subject: CN=01763bb1595993c039af897e462a2df71711002c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:4e:45:f4:d1:ae:8e:6e:98:b5:82:3d:06:
                    4f:80:7c:20:20:00:a1:4e:43:f0:fb:eb:f3:c6:1b:
                    ad:1f:4b:eb:37:5a:d9:6e:79:03:f2:52:c3:b2:79:
                    98:d6:da:f8:51:73:d7:5c:73:cb:f7:bb:d9:a8:06:
                    9a:78:e2:08:a5:5b:00:e3:3e:c7:7f:fa:a3:fe:25:
                    10:9e:a0:0e:0c:b2:e2:cc:53:2e:df:fe:5d:1d:d6:
                    90:44:7d:bc:ac:9c:67:9f:b5:f5:12:b1:6a:b8:28:
                    94:73:c7:84:46:35:9f:03:e4:b6:97:20:1d:37:dc:
                    3f:98:ca:f4:2a:ef:e6:3f:88:ec:f8:1f:be:87:ef:
                    a6:10:dd:44:04:09:d7:57:f4:36:50:9a:29:b2:c0:
                    ed:63:1a:5b:95:96:62:d9:d8:4e:02:37:ac:4b:a3:
                    9e:8b:5c:c0:66:f5:01:35:5a:3e:a7:94:e0:9b:42:
                    99:e8:44:8d:eb:e2:68:ed:cc:c7:0d:f3:09:e0:da:
                    cd:29:c8:d4:20:f7:95:a0:ab:b7:d4:76:e9:d1:ba:
                    6a:89:1b:55:1b:9d:dd:aa:d2:eb:c1:43:83:e4:3f:
                    44:d6:1c:79:2e:a3:d6:63:da:1d:11:72:89:f3:a8:
                    fe:48:70:5e:d9:cf:12:c1:95:27:2f:e4:f6:0a:ab:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:3B:B1:59:59:93:C0:39:AF:89:7E:46:2A:2D:F7:17:11:00:2C
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:90:84:cc:2d:fe:69:62:3e:d3:56:75:3f:5b:9b:05:9d:95:
         9f:b1:56:3e:da:da:a1:b8:f8:5f:62:fb:25:53:d7:67:01:ad:
         ec:73:e9:ab:2e:41:1b:e8:59:14:55:a9:0b:3a:85:90:df:16:
         95:1a:15:bf:07:3c:f1:f0:aa:81:2d:a5:25:6d:0e:68:fd:3f:
         07:e0:de:a8:fc:c8:eb:9d:73:34:1f:fc:5f:01:c2:67:0d:64:
         be:ed:e9:3a:ad:f1:2f:17:53:ab:fa:da:dd:76:e9:c9:07:b6:
         ec:e4:7c:9f:69:3b:52:b2:b0:ce:a0:64:98:a7:d2:04:43:dd:
         95:82:f6:52:6f:f5:f1:2e:fe:07:de:d8:1d:78:f3:15:dd:54:
         19:bb:6f:6d:8b:88:9e:e0:37:67:33:5e:8a:c4:32:46:ad:bd:
         7b:1d:20:c8:c9:ed:0f:50:66:c0:c9:1f:5f:33:ba:7c:c8:1e:
         a3:c8:cb:f2:32:78:9f:bf:e8:dd:bf:21:94:0d:f2:78:38:58:
         36:aa:91:9f:93:91:9a:a9:a6:60:19:51:ae:7f:e3:3a:f4:cd:
         8f:4a:d5:62:02:86:a6:37:85:07:0e:8d:d9:3e:03:26:2b:90:
         2d:e4:4d:b4:5a:2b:09:08:27:ab:68:82:40:a8:68:4c:75:c0:
         51:fe:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:58 2025 by rpki-client