Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          2clRv/BhsWmTlaJFVlFWRtmCe4fzoHO32tMsrhWoQ7M=
Subject key identifier:   A9:C8:F4:32:C4:22:F7:08:04:95:7E:1A:58:AA:E3:C6:AC:56:79:1F
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019A00D9EA97AB097A18C46144007CAC988F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          16E7
Signing time:             Mon 20 Oct 2025 09:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:12 +0000
Files and hashes:         1: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: sFJ5nN2syIWMtfI13erCEnT005l3netHnOSv+39P8Fo=)
                          2: wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa (hash: kPUheiP/1RIkZMjes3RF7D1Dk6VSyteFka8OLwBciXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:d9:ea:97:ab:09:7a:18:c4:61:44:00:7c:ac:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Oct 20 09:01:12 2025 GMT
            Not After : Oct 21 09:01:12 2025 GMT
        Subject: CN=a9c8f432c422f70804957e1a58aae3c6ac56791f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:aa:d6:57:2b:d1:49:0d:68:e3:f7:41:eb:
                    d1:b6:25:0c:0d:6c:ac:ca:e8:78:90:9c:eb:0b:2c:
                    ec:c2:f0:ee:35:47:7a:03:80:83:b2:cc:2d:38:d2:
                    a5:44:90:9f:e9:96:ee:96:6f:34:a8:57:d5:ca:40:
                    e9:c9:ee:58:90:ba:b1:98:ac:99:75:34:a6:af:43:
                    2e:21:22:05:98:73:55:6e:fe:67:e8:20:c4:7b:db:
                    24:d4:82:3e:fc:6c:aa:39:e7:f0:0f:76:f0:63:34:
                    a2:07:87:d7:f3:c5:88:46:a7:5f:de:cf:18:d0:ba:
                    9a:50:2f:da:1d:cf:49:58:1b:1e:94:b8:0d:98:f6:
                    7a:8d:b8:cf:e3:aa:50:f0:00:b9:31:d8:5c:d3:71:
                    2d:52:ed:be:1d:67:00:ef:91:8c:b6:24:e3:41:2a:
                    31:8a:88:61:e6:f5:c4:59:9d:ff:1f:d6:1d:27:da:
                    0a:a8:53:79:d3:2e:e1:94:ed:2d:bc:b0:26:44:7b:
                    9a:82:60:7a:bc:6c:39:e8:e9:c6:46:7d:b7:4d:ad:
                    c3:19:cb:8d:8c:5c:fe:ff:13:6b:c9:59:31:ea:39:
                    28:bb:e5:f1:78:bb:18:21:df:b9:3e:3e:21:a1:32:
                    8f:f0:aa:60:e5:75:f8:2f:b4:03:f6:99:0a:a1:5a:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:F4:32:C4:22:F7:08:04:95:7E:1A:58:AA:E3:C6:AC:56:79:1F
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:99:e7:47:1a:c7:22:96:a0:c3:b4:4f:d8:7b:d5:91:bc:
         31:cc:6c:9b:bf:5d:f8:97:f8:68:3a:4a:8c:31:7f:44:ac:31:
         a9:97:b8:b0:b3:93:b6:87:59:e4:cc:a6:fe:02:7a:5e:b7:e5:
         a2:1a:b7:b7:7e:17:9f:c7:06:a0:53:ca:87:ff:c5:29:c4:74:
         92:c1:98:78:8e:6a:e1:97:1c:63:1d:53:11:bf:aa:dc:73:5c:
         67:f5:ec:ad:34:a7:77:74:01:11:e0:0b:95:ef:27:d2:b9:60:
         7d:ea:b8:a1:32:83:cf:ff:41:53:a4:a3:39:7f:a6:32:0d:8b:
         90:de:e9:df:54:87:48:0f:fe:e3:93:b0:33:09:4c:d4:d3:6d:
         18:20:b4:14:51:ef:b6:03:45:c1:b0:34:04:ab:dd:95:e9:01:
         18:94:bc:44:b5:06:e3:06:91:34:25:55:e7:15:32:4a:a9:0c:
         3c:26:99:ed:81:5b:95:17:c2:90:f5:af:ec:cd:eb:2a:ba:d4:
         db:ee:b8:75:1b:99:13:4e:2b:c4:5f:54:60:cc:e4:54:13:4b:
         99:13:03:5a:98:d7:b3:31:73:38:ae:2d:46:de:0e:bd:d3:22:
         4d:66:84:87:75:65:90:0b:a8:5e:80:74:22:74:8d:69:5d:bf:
         c2:62:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:06 2025 by rpki-client