Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File:                     mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier:          eOe54sI4T3A2MPEonWxoIxM7TDdNLutinCTbvtryeb4=
Subject key identifier:   DB:09:D8:4C:45:C9:80:2A:B4:B4:50:2C:79:0E:9F:E4:85:1B:F1:8F
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer:       /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial:       019A022351D27D53BEA8B3E38B300B49167E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 15:01:00 +0000
Manifest this update:     Mon 20 Oct 2025 15:01:00 +0000
Manifest next update:     Tue 21 Oct 2025 15:01:00 +0000
Files and hashes:         1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
                          2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: flaNmTbUKe6EZ8s8VfBHj9+jc+6viB1NQevOADSInhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:23:51:d2:7d:53:be:a8:b3:e3:8b:30:0b:49:16:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
        Validity
            Not Before: Oct 20 15:01:00 2025 GMT
            Not After : Oct 21 15:01:00 2025 GMT
        Subject: CN=db09d84c45c9802ab4b4502c790e9fe4851bf18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:54:93:73:42:c9:81:37:5f:94:e1:47:44:
                    7b:85:91:d8:cd:08:a5:b6:73:cf:0b:74:d2:e5:0f:
                    1c:89:9a:02:b0:ef:d0:4a:96:5f:dc:67:a5:25:74:
                    64:fd:3a:53:e8:9a:c6:35:f9:4d:9b:0f:70:d8:11:
                    b1:ae:fa:25:97:6c:21:b8:99:f7:c3:e2:cf:da:63:
                    79:ba:45:2b:32:ff:c4:c3:c5:d4:3f:13:49:f6:37:
                    d6:72:55:d0:ac:b0:e2:60:64:7c:c4:4f:9d:01:95:
                    ed:4d:f7:60:91:3f:2f:af:2f:20:25:49:73:54:0d:
                    65:a8:7c:67:35:da:75:5d:9a:0c:e1:9e:e4:c7:65:
                    4d:80:02:b6:3d:c7:d6:b6:47:e8:fa:2e:67:5d:91:
                    68:12:cc:25:82:5a:e5:4e:01:32:8f:8a:ae:88:2a:
                    8c:48:0a:a3:c5:e7:95:ee:68:bc:3f:f2:d2:5d:2a:
                    f4:6d:03:c1:79:68:5b:79:99:7d:9b:a5:9b:09:d6:
                    72:af:54:d7:02:89:8c:52:8e:83:97:31:2b:e0:ad:
                    27:84:f1:cf:b7:b6:12:c3:82:cb:4c:ca:85:2a:85:
                    fe:df:0c:98:52:c7:85:97:40:4a:77:52:3b:d7:ab:
                    9f:8b:63:18:91:08:db:a4:f3:26:2d:58:a5:a5:2c:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:D8:4C:45:C9:80:2A:B4:B4:50:2C:79:0E:9F:E4:85:1B:F1:8F
            X509v3 Authority Key Identifier:
                keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:69:28:b2:4a:5e:e9:6b:a4:03:40:f7:b9:09:5c:22:69:3e:
         82:1e:e0:ab:cc:93:77:4c:8d:25:c5:16:51:7b:b6:a0:03:81:
         1b:12:74:9e:02:5e:76:0e:ee:f2:be:21:b5:e3:d2:d5:00:2c:
         c1:58:c6:ef:65:5a:e1:bd:2d:90:2f:b4:69:50:fd:8b:1c:5a:
         6e:c7:2d:66:0b:2d:0e:8d:b0:55:aa:1a:bd:54:d5:0b:f3:98:
         a7:8a:9f:ee:a1:0d:e3:43:ed:a6:d1:b0:62:a5:e6:c1:7e:ac:
         94:d9:95:6b:40:b8:bd:ed:81:04:92:a3:f7:69:c3:34:c2:90:
         a6:11:66:e0:58:a1:d6:3d:af:db:91:c8:70:79:b9:59:09:bd:
         d5:9e:09:6d:bf:1e:03:d1:c2:6a:a1:5d:5a:a7:c1:69:de:58:
         ab:44:73:82:14:cb:cf:e1:25:e0:8a:b8:1d:c4:e5:e0:3e:68:
         a4:19:73:de:5a:0a:01:9e:55:52:9d:b4:29:e0:c7:a0:c6:e7:
         01:2e:14:bc:c4:0c:fc:38:ac:0d:09:1c:d7:5c:78:e8:c0:04:
         5d:ae:ee:ee:7f:18:8c:1a:bc:7c:04:73:b9:66:b9:b1:00:1a:
         fa:0e:b7:86:3a:a0:be:ce:2f:6d:e4:2d:ae:71:24:84:8f:06:
         b9:9e:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:38 2025 by rpki-client