Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          LNeUyTOHaAPHPRc1xTDkPvSJDaE9oTljP4vA1YC9Abo=
Subject key identifier:   8A:95:5A:94:56:84:30:87:CF:61:B2:05:34:D2:D5:DC:01:D6:5E:CE
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       0199FB462ABA41A6D986FAA7D06F2EFB8D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 07:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:43 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: tyqnzg9NueEhJXQWLs76kx0Q/aQesP0HUrVJyqsGndY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:2a:ba:41:a6:d9:86:fa:a7:d0:6f:2e:fb:8d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Oct 19 07:01:43 2025 GMT
            Not After : Oct 20 07:01:43 2025 GMT
        Subject: CN=8a955a9456843087cf61b20534d2d5dc01d65ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:e9:ad:14:1a:fa:6d:d0:8c:fb:95:58:fa:
                    f0:3d:b5:0d:27:6f:ac:60:67:58:0c:54:6a:79:d5:
                    24:93:08:4f:d9:38:2a:9f:e3:e3:b7:8e:cb:ae:b3:
                    8e:7d:c1:1d:82:35:a1:19:58:ca:98:75:f7:67:d1:
                    52:4c:1a:f0:84:0a:89:68:92:4b:3f:77:b8:1e:55:
                    8e:32:e3:3f:6f:59:e0:0a:eb:80:dd:c1:ef:d0:cd:
                    f6:25:54:b4:4b:a3:75:63:fb:14:85:82:cf:4d:64:
                    cf:c8:e5:9e:25:be:d1:b5:16:c2:80:a3:3a:9b:70:
                    01:f2:de:f8:7a:ab:a5:f7:b3:c6:a8:2f:a4:91:3e:
                    07:7c:53:10:ec:88:d6:75:2c:24:9e:d2:ad:7d:38:
                    cb:84:83:66:97:b8:34:28:ac:1d:d8:c0:97:5e:18:
                    54:f9:b1:0e:89:8b:19:28:98:04:d5:56:1d:03:ac:
                    32:37:5a:15:2f:d6:6f:6d:35:2a:97:43:0e:73:cf:
                    1e:eb:8c:be:f3:96:f3:d7:6f:a5:16:8b:58:b5:0a:
                    fe:e1:ae:33:13:af:f4:87:81:1e:4f:cc:f4:1c:52:
                    4d:df:ea:81:0c:b8:1e:16:37:8d:33:9a:a3:4b:83:
                    d8:80:56:13:dc:71:7b:22:c7:65:8d:78:1c:d4:ae:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:5A:94:56:84:30:87:CF:61:B2:05:34:D2:D5:DC:01:D6:5E:CE
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:d0:bd:59:a0:2d:c9:b5:b7:7a:b4:d5:f4:1a:ce:fc:8d:
         ce:cb:bd:23:97:41:7b:81:01:b9:25:ff:bc:bc:4b:10:b8:4d:
         7f:63:51:56:66:76:8e:a1:01:13:d7:6c:b7:f9:0e:95:a1:a7:
         72:c6:b9:fb:66:2d:31:d5:27:2b:11:5b:5b:ef:9f:00:d3:27:
         c4:5f:fc:1d:d9:73:ac:81:4d:90:e8:81:b5:7d:fd:b3:1b:61:
         73:0e:3a:33:4a:c8:18:88:45:e6:50:8f:f1:eb:f5:65:94:93:
         c7:a2:83:0d:d6:ec:df:56:d1:72:49:ec:9a:ff:87:36:fd:f2:
         49:1c:d0:e7:7e:90:9e:d2:36:5d:2f:91:6e:f3:a0:06:c8:b8:
         73:f5:20:47:64:b8:fb:01:a0:d7:5f:5f:27:cb:ba:a2:b6:11:
         72:66:ec:00:00:ab:b3:ce:8c:1d:3c:34:f7:2b:16:9c:86:bc:
         be:fd:30:0b:fb:39:f7:7f:6c:72:68:02:2d:fa:20:f8:34:88:
         f9:51:a3:71:2d:3a:4d:e5:77:d1:7e:1b:35:18:5d:02:9c:bf:
         17:fe:85:d5:7d:95:34:27:e4:06:80:aa:06:d0:98:49:a1:4e:
         12:dd:e1:3b:2c:bc:d0:a6:3b:bf:8e:17:8a:6c:1a:b9:25:e3:
         5d:43:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:17 2025 by rpki-client