Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          s6yqPtVUVPDG2XoBHAIKRnAqHAjJPVlFI3+6go4P9XU=
Subject key identifier:   6C:AD:0B:96:16:77:9A:1D:04:7B:56:B4:7F:B1:FD:94:DE:4B:85:75
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       0199FC58C2BB89F5CBCD48D5D7489EFE1D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          1486
Signing time:             Sun 19 Oct 2025 12:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:39 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: RitMOEzhY+zqT2iV49vRs4wqNPgaDE3WxJ22i6pDERg=)
                          2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:c2:bb:89:f5:cb:cd:48:d5:d7:48:9e:fe:1d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Oct 19 12:01:39 2025 GMT
            Not After : Oct 20 12:01:39 2025 GMT
        Subject: CN=6cad0b9616779a1d047b56b47fb1fd94de4b8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:59:1f:ef:b5:7d:f2:7b:3e:e4:95:6d:1b:
                    11:2c:ff:a1:b0:3e:de:5d:bc:ba:5b:a9:ea:77:86:
                    53:27:2f:fe:62:07:8b:f0:d7:5f:9c:40:c6:8e:ab:
                    19:e1:3d:61:80:5e:12:ef:f5:a4:fb:bc:6a:65:ef:
                    3f:d7:dc:ed:36:bb:43:6d:3a:e3:68:90:fe:63:54:
                    30:f5:38:55:3f:4e:50:7e:bf:98:32:a8:63:bc:c0:
                    d4:03:06:59:e4:d8:7c:a4:4e:70:1a:1f:c3:c5:c6:
                    2e:e7:08:6a:2c:a7:04:45:d8:e9:fd:99:72:6a:5f:
                    ca:8a:ff:e9:28:4d:a2:7d:68:27:e0:4a:5f:ff:14:
                    1c:78:49:bb:a2:3b:49:a3:4f:fb:d1:66:1a:95:42:
                    b5:c6:e7:c8:6c:2f:25:90:45:7f:54:05:0a:da:fb:
                    60:96:e4:1c:cc:5e:f3:4b:06:cb:3e:aa:df:81:3b:
                    ed:33:29:2b:ca:33:b6:3a:ff:5a:f9:c0:6c:1b:50:
                    84:d7:d1:04:a5:f4:62:90:d3:b2:79:4f:51:e1:e9:
                    85:6e:c1:f0:0e:19:76:c5:43:17:9d:08:1c:05:88:
                    c4:be:bb:d0:a9:6f:2f:fb:17:aa:4f:ff:b7:02:f5:
                    d8:ae:37:b6:fc:ae:7a:bf:74:8b:ec:74:9e:81:50:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AD:0B:96:16:77:9A:1D:04:7B:56:B4:7F:B1:FD:94:DE:4B:85:75
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:6b:33:e2:9c:da:69:c2:af:38:44:bb:9d:7b:e9:3e:81:
         46:b6:fb:c5:ca:8a:8a:98:d3:54:27:0f:fb:36:ed:e4:e0:5c:
         1d:5f:7a:af:f8:13:d2:48:78:89:5a:59:b1:1f:47:be:3d:0c:
         bd:49:4a:66:cb:87:0c:ff:84:6a:54:06:49:34:83:6e:e2:0c:
         9f:e9:cc:9b:8a:1e:b5:22:45:1f:c1:f4:31:9f:fe:9a:55:17:
         10:e9:33:55:a2:01:d2:9a:80:5a:57:1c:a9:e9:08:75:c3:75:
         02:47:42:da:38:62:a5:79:4d:9a:ec:59:8e:b9:f6:e5:4d:78:
         00:36:a5:42:5e:5c:3e:30:34:14:1b:d9:ca:30:af:62:bc:c0:
         5b:46:33:99:6a:b3:ba:1d:1d:fa:9f:69:0b:96:18:05:6a:74:
         3b:71:04:e1:f6:45:de:de:09:8f:68:b0:52:9b:00:f0:49:12:
         39:e1:5e:af:f5:72:16:eb:27:5a:86:89:74:be:0b:2e:dc:ef:
         b9:59:a0:c3:2c:34:4a:55:d5:1a:78:03:d1:73:d1:36:ca:ba:
         b6:ae:da:12:2b:29:e3:bf:00:49:be:40:87:a5:97:f3:f4:39:
         66:c8:c7:3f:5d:65:09:60:ef:9d:33:46:4e:2f:ec:ac:3b:13:
         eb:d1:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:55 2025 by rpki-client