Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File:                     No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier:          G6tbWuIg5N13Ajm5hKOea1C96qP37bm4RMxajGZUNz0=
Subject key identifier:   5D:A3:B3:29:D4:BD:23:29:6C:D0:46:BD:E2:7A:10:A3:08:D2:01:BF
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer:       /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial:       0199FBB36BF8AA93FB32D9F1260128F47449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 09:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:03 +0000
Files and hashes:         1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
                          2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: BwWsLUPAdKWqQf87l2HXaK5z8TvlPBJq1feAzasZA7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:6b:f8:aa:93:fb:32:d9:f1:26:01:28:f4:74:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
        Validity
            Not Before: Oct 19 09:01:03 2025 GMT
            Not After : Oct 20 09:01:03 2025 GMT
        Subject: CN=5da3b329d4bd23296cd046bde27a10a308d201bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:33:de:11:00:5a:9e:8c:68:74:08:4d:ac:35:
                    01:f1:23:f1:8b:74:98:63:a6:fa:f8:b5:24:e1:dc:
                    ad:5a:d8:01:5a:a7:db:31:19:b7:b1:07:76:30:c7:
                    03:61:5c:b8:36:9e:8f:98:a9:09:40:46:da:29:49:
                    62:92:e7:b0:3c:1c:be:25:1f:60:bc:2d:72:47:b8:
                    62:ad:aa:2f:a6:1c:e1:6d:50:7a:f1:74:dd:4f:fd:
                    46:b2:55:4c:90:fa:f1:b0:04:d9:59:2d:a1:8b:d8:
                    37:67:ba:cd:23:54:75:4f:82:08:31:19:0b:2b:49:
                    1c:32:1c:b1:87:ae:3a:70:da:8f:90:b2:24:b9:cf:
                    6d:5a:d4:ca:ff:25:ac:e2:da:0d:cc:a5:7a:1e:71:
                    59:cb:a0:f7:9a:30:97:ff:85:05:f3:1e:2f:01:0d:
                    7e:20:54:27:a0:8b:29:2c:04:7b:d6:a7:dc:14:ab:
                    48:a7:50:34:d0:e8:c6:e9:d9:56:85:e1:fd:0d:02:
                    8e:86:19:75:ed:b4:76:81:2f:bb:ed:64:eb:15:59:
                    f1:50:78:d9:d5:5c:25:46:82:65:1a:8f:30:bc:16:
                    ed:88:b7:08:52:ab:18:69:7d:1d:98:3c:5f:98:d9:
                    da:63:3c:46:77:02:15:12:40:40:53:af:2e:2a:97:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A3:B3:29:D4:BD:23:29:6C:D0:46:BD:E2:7A:10:A3:08:D2:01:BF
            X509v3 Authority Key Identifier:
                keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:25:8a:1f:20:3c:7a:6c:7b:26:9d:ab:40:91:bb:5b:30:
         61:9c:35:08:70:cf:64:c3:cd:99:23:25:e5:1d:4b:36:c3:12:
         b5:a0:4d:da:22:aa:1e:0a:40:29:a8:93:7f:b3:12:2a:10:2f:
         ad:5f:d4:d6:db:f7:e2:d2:99:74:ee:a0:96:e4:ae:da:28:6a:
         da:3c:d7:c1:ac:64:c0:75:8a:af:f3:24:e3:b3:42:ee:95:2c:
         8f:2a:23:ec:6b:c1:ad:b3:c1:07:c9:4d:bd:47:ce:dc:0d:2a:
         cd:89:9f:c1:4b:5a:42:0f:21:db:52:49:c7:2e:e5:36:8e:4a:
         c7:df:df:60:18:9c:ab:4b:8f:17:6d:00:fd:92:77:a6:70:c2:
         32:53:92:b7:de:ae:97:38:5e:7e:0b:71:57:02:db:15:28:b1:
         87:38:93:ed:c6:57:87:46:22:6a:b9:70:6c:20:33:63:d2:f9:
         7b:4d:a0:8d:a4:05:1f:77:81:f5:7e:e2:8c:00:29:1c:64:a9:
         9c:64:aa:a4:cb:7b:2d:67:c5:fa:d7:cd:c1:07:1e:74:e1:de:
         e9:e1:b6:07:76:90:04:fe:02:0e:3b:82:65:29:5a:2e:6c:dc:
         f5:77:fa:41:b4:97:61:33:0e:d7:09:7a:26:4d:26:bf:64:92:
         2d:cd:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:53 2025 by rpki-client