Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File:                     pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier:          t9W5MC5F+Qx97WGg62kEaRWmLBr5vb49EQRhz/pOD1E=
Subject key identifier:   97:A0:25:82:31:98:D2:7E:F7:79:45:0A:92:DF:A6:A1:F8:AF:0B:B0
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer:       /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial:       0199FE7DBFA7B9914C24429C3086A53C7013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 22:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:17 +0000
Files and hashes:         1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: DydRaoekd0Ivh2pUUITxrh/V1boGWf9Epxgdz5T6V3Y=)
                          2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:bf:a7:b9:91:4c:24:42:9c:30:86:a5:3c:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
        Validity
            Not Before: Oct 19 22:01:17 2025 GMT
            Not After : Oct 20 22:01:17 2025 GMT
        Subject: CN=97a025823198d27ef779450a92dfa6a1f8af0bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:6f:b4:f1:8b:f3:a6:63:5e:4f:2b:d8:bf:
                    e9:d7:73:e7:f8:13:fb:0c:96:0f:e4:71:7f:41:6d:
                    d7:64:11:19:a3:db:e5:0a:69:6f:d5:ef:04:f2:a2:
                    17:be:6e:c6:60:8c:4c:f4:73:9f:f9:dc:24:a4:98:
                    da:3f:a6:9f:26:e0:e8:ce:29:9a:d5:45:3b:86:5d:
                    88:c7:95:e1:02:aa:e4:90:51:47:2e:50:81:ce:34:
                    13:c5:9d:54:f2:23:83:09:ed:89:3b:27:d2:d0:62:
                    c1:80:fe:e0:33:ce:64:1f:b8:f5:f5:f7:1a:07:4d:
                    7e:d7:66:db:67:3f:21:23:50:d8:76:c8:ef:2f:f7:
                    ea:c4:8c:f3:96:0c:f0:44:62:8b:b7:f5:b8:98:39:
                    b1:58:08:cb:5e:ad:49:ca:69:b1:a2:d5:24:7d:97:
                    eb:5d:71:b5:02:f2:43:14:a8:16:26:6c:9c:31:dc:
                    56:bd:25:df:68:8c:1d:bc:91:f0:6a:45:7d:66:ba:
                    86:2e:e1:64:5b:84:b8:d4:1d:f9:30:5b:2a:d6:c2:
                    7c:2d:eb:e7:28:8e:93:ff:bd:88:04:ae:96:2c:26:
                    02:49:0a:44:b1:5d:a1:72:39:2c:59:46:31:d0:ff:
                    ff:6e:42:ac:10:cc:25:c2:a2:b1:7c:04:75:1f:6b:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:25:82:31:98:D2:7E:F7:79:45:0A:92:DF:A6:A1:F8:AF:0B:B0
            X509v3 Authority Key Identifier:
                keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:10:45:b3:38:ec:53:e0:29:d4:3f:d9:69:2a:1d:19:9e:05:
         02:12:c3:a3:fc:68:64:bc:37:a8:06:16:6f:96:0b:2d:ed:8e:
         f2:d2:b8:28:2b:f8:a9:bf:bf:80:3d:a6:19:47:2d:e2:67:1f:
         5c:9f:03:69:9f:2c:16:5a:37:93:97:d5:c8:08:25:fb:cb:bc:
         f5:00:2f:83:b6:1e:e4:74:5a:a3:5b:01:a2:27:5f:21:67:9d:
         b2:54:a3:ab:11:32:4a:c6:34:e7:cd:02:26:f6:49:aa:a6:a4:
         d2:59:93:27:be:f9:8a:f7:0d:d4:e9:67:5e:5e:0c:6d:1d:c9:
         12:45:60:34:5c:ef:1a:01:a9:89:fe:91:b2:ae:46:3a:f7:df:
         ee:11:3b:10:a3:ab:e5:09:b1:0f:e8:61:b6:36:9d:7b:bf:f8:
         15:30:8a:51:cb:53:1b:20:9a:41:c1:bb:fc:0d:89:2e:a4:57:
         42:3e:47:a3:6f:21:d8:64:a9:c8:60:86:58:c5:ff:1d:c5:f3:
         0a:8b:a8:3b:18:d5:da:dc:d5:26:99:74:70:14:d5:5e:38:ac:
         d1:79:ad:5c:4c:db:71:4d:c2:21:66:5a:8a:8c:65:ef:0c:bc:
         04:dd:30:34:56:50:d4:54:0b:c0:dd:76:60:44:61:d7:09:f3:
         93:26:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:09 2025 by rpki-client