Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          R1R+Yw3R/5cS7pE5yqwFua0rz8H3mJFfcazQD23P9UU=
Subject key identifier:   36:CE:1A:AE:1C:0C:D1:41:9F:36:B4:89:2B:5A:F4:33:27:C7:FF:64
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       0199FF230E47F0F1124D190E4AF5B5FEC946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 01:01:51 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:51 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:51 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: RRW2PwJPbHVxyV7vIrOYXQLyNbg7jVrfH5UNlt/TQws=)
                          2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:23:0e:47:f0:f1:12:4d:19:0e:4a:f5:b5:fe:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Oct 20 01:01:51 2025 GMT
            Not After : Oct 21 01:01:51 2025 GMT
        Subject: CN=36ce1aae1c0cd1419f36b4892b5af43327c7ff64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:4a:64:67:6c:a6:7e:ee:c9:c7:5f:e8:e0:
                    2c:98:bd:15:8d:d6:da:cf:c3:d4:cc:ba:16:cb:1e:
                    4d:6d:7f:1a:31:56:d5:d6:41:9a:2f:6c:2c:80:9b:
                    95:4f:85:7c:07:f3:b5:24:71:84:1f:bf:4f:d4:61:
                    30:d6:68:e4:83:3e:d7:d1:e1:e9:e5:d8:8f:67:52:
                    b1:7d:18:fb:2b:19:f1:75:ce:19:5a:21:3d:66:0d:
                    14:1d:ff:84:b0:8d:55:fd:b7:ae:e8:9c:4f:77:de:
                    f0:a0:b4:52:d0:84:17:ba:fa:53:f6:86:1e:18:02:
                    7a:58:97:92:7c:6f:08:aa:4f:01:f4:2f:10:4a:bb:
                    49:d7:7e:00:ed:4a:8a:31:76:22:a6:27:27:96:34:
                    e0:c4:d7:82:0f:d7:42:df:2c:d7:fa:59:c1:ff:0e:
                    d0:96:b1:4d:68:36:07:20:2f:1e:dd:5e:4d:99:81:
                    e6:16:b0:41:d8:b3:2e:a1:a8:ae:c5:6f:30:bc:58:
                    81:9c:3e:58:7f:af:a1:68:67:2c:2c:a3:3f:59:c0:
                    0e:bc:9d:06:79:0a:9d:86:3c:60:2f:07:41:6b:c5:
                    5c:96:d6:5b:b0:4a:b8:e4:d3:2c:24:66:60:cf:a8:
                    cb:0e:47:f7:94:f6:67:08:76:94:3a:99:2b:3d:4e:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:1A:AE:1C:0C:D1:41:9F:36:B4:89:2B:5A:F4:33:27:C7:FF:64
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:71:19:f9:6d:ba:98:e8:dd:db:58:8a:e1:5e:6a:56:d0:aa:
         e5:af:a0:1d:cf:5a:28:37:02:a2:61:6a:90:11:54:37:2f:03:
         b9:6a:3f:c5:87:f7:b8:30:60:48:a9:44:78:30:f5:dd:70:81:
         3c:f4:b1:e4:f5:56:af:20:d2:43:ee:4a:fe:95:8b:40:5e:47:
         af:20:14:ad:ef:3e:3e:3a:2f:97:d2:01:21:52:ce:5a:03:67:
         d7:b1:ba:a4:86:e3:e6:b2:f9:b1:c4:d9:67:9b:65:dc:ce:0a:
         bb:db:fb:ed:ca:71:53:6f:30:9b:1e:e1:26:19:14:35:ea:25:
         59:3f:81:b2:11:ae:68:2f:17:a6:16:39:5e:4f:f7:c4:75:f5:
         8a:fb:b5:e5:50:f8:6d:13:54:28:d3:1c:1b:f7:88:11:f0:a5:
         98:d4:e5:2c:8c:c1:42:0d:c1:36:be:67:53:b3:c9:7f:a3:4b:
         b0:7a:7b:b7:31:95:0a:d0:73:f8:63:61:08:f9:95:e3:f6:fa:
         ca:8f:62:10:a2:9f:df:55:04:18:27:8c:79:32:a9:b7:5c:72:
         48:82:74:bb:71:9e:ee:46:29:ab:89:ae:37:86:d6:8b:a2:2f:
         5a:9f:62:a1:e5:31:19:75:41:78:af:9d:9e:6e:b9:f5:14:64:
         7d:fd:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:48 2025 by rpki-client