Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File:                     n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier:          xGvAnwwNDJd5qF1b/EvuK+1X4tU10ubM+LYa9Xu9Sk8=
Subject key identifier:   E8:C1:4D:C7:26:72:EC:32:15:53:C8:63:A2:88:5C:EA:2D:C8:92:3D
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       0199FCC6C8CAFB824FD73E856A68E91DEA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 14:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:49 +0000
Files and hashes:         1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=)
                          2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=)
                          3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
                          4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: HRtqrKwfbW4lhOiCKlaq5kG+GMUXXWQZKBfkkyqgomE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:c8:ca:fb:82:4f:d7:3e:85:6a:68:e9:1d:ea:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Oct 19 14:01:49 2025 GMT
            Not After : Oct 20 14:01:49 2025 GMT
        Subject: CN=e8c14dc72672ec321553c863a2885cea2dc8923d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:e0:db:91:47:24:b3:dc:ad:47:d1:bb:16:
                    23:64:c6:71:62:59:33:28:b4:34:02:a3:d6:e9:d1:
                    54:7c:12:33:84:6f:72:56:a6:14:63:24:c5:e9:48:
                    56:3e:0e:a2:dd:9c:ff:ca:2b:d3:e0:0d:86:eb:f1:
                    20:5c:4d:47:0b:44:3f:1f:1a:c7:da:ca:c4:57:19:
                    e5:0f:8d:ed:d2:fe:34:25:33:23:4d:2c:13:87:f6:
                    cd:cd:34:02:8b:87:9e:2a:d3:63:ef:44:b4:64:21:
                    1d:5e:ac:66:d9:09:ee:56:f0:1e:df:c4:d2:c1:11:
                    2c:2d:cb:56:f6:b9:37:eb:e0:46:eb:be:b9:51:7b:
                    29:fe:18:8b:d2:50:61:f0:93:db:f8:53:4a:0f:8e:
                    76:13:e6:2c:42:17:2e:89:3d:61:a7:da:d2:51:17:
                    cd:07:7e:84:27:e4:11:70:98:f1:f7:06:a3:43:b7:
                    66:ae:9d:12:4a:f1:84:ea:91:14:b9:a0:4b:17:ed:
                    4c:c0:1b:fd:1d:a7:d9:2c:dd:49:90:7c:b2:73:c5:
                    f3:0a:0e:0d:21:5f:18:09:fd:3d:5d:f8:d7:0a:fc:
                    4a:78:ad:d7:a1:17:c3:94:64:69:1c:f3:64:1c:b5:
                    98:05:0f:d5:e9:1e:85:63:c3:52:8b:58:e7:e9:90:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:4D:C7:26:72:EC:32:15:53:C8:63:A2:88:5C:EA:2D:C8:92:3D
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:e2:4f:8d:d4:c7:ae:61:bc:68:f8:9f:54:40:ea:f4:a1:
         db:c1:0f:da:c3:8a:e7:e2:50:f9:a6:56:77:81:de:76:40:aa:
         b5:56:ac:cd:e7:b1:08:d8:8e:13:9b:69:84:96:9a:c0:56:f0:
         c1:29:07:bd:16:80:91:47:6e:10:9a:59:8b:21:ac:81:91:15:
         ec:56:17:2c:4b:c0:bc:dc:47:31:ff:05:ef:e6:98:2a:c4:2f:
         08:d3:41:67:81:4b:db:08:c3:22:f6:0f:bc:d9:02:85:3d:5b:
         74:fa:21:a1:66:a4:77:02:e5:8b:68:ff:dd:3e:f2:95:78:cc:
         05:3b:93:c3:a3:3e:0e:22:68:07:4c:12:5d:13:7e:d1:f8:e3:
         2a:6c:35:62:14:0a:76:06:79:9e:a9:42:c1:c3:7f:1b:fe:44:
         6b:79:d4:2b:3e:64:54:a4:f8:f3:1f:6a:ba:bd:97:43:c0:87:
         a2:6e:01:33:d2:64:98:a7:dd:9c:87:3c:c3:c9:eb:e6:36:33:
         38:91:d0:30:05:f6:80:2c:32:8f:dc:15:4a:f2:ef:81:66:a1:
         46:82:c8:6b:c0:2a:f7:8c:fa:11:fb:c9:c3:23:e4:75:3b:aa:
         a8:30:7f:ae:9f:bc:ec:b9:c3:9c:41:23:d4:b4:bc:42:f9:c0:
         92:0d:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:13 2025 by rpki-client