Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File:                     aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier:          v3UkYu/SNJ13LYLRn5FCx9GZ7mfVvJEikI6U0t0IntM=
Subject key identifier:   1E:6E:B8:68:09:F0:68:1D:1E:A6:48:DD:A9:22:4D:40:27:8D:B4:50
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer:       /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial:       0199FE46B1A7B356CB0D41F6601D4F0306E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 21:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:09 +0000
Files and hashes:         1: Atkr4h8_-iWKS-lQ1C-yvRl84ME.roa (hash: 2T7HRH5eHvmAemXfiDHO7EMODqi7SWlhFBBbiZ8y44c=)
                          2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: ctCGeoXC9EztppSQnqw89M7lu04BAII7Q+eXxovNUyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:b1:a7:b3:56:cb:0d:41:f6:60:1d:4f:03:06:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
        Validity
            Not Before: Oct 19 21:01:09 2025 GMT
            Not After : Oct 20 21:01:09 2025 GMT
        Subject: CN=1e6eb86809f0681d1ea648dda9224d40278db450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:f7:48:7d:23:d5:73:35:f1:fc:94:f0:53:
                    63:c2:a4:a8:d3:0f:e7:9b:6e:f2:f7:d9:c8:40:11:
                    a9:f5:be:08:39:ee:55:94:70:0b:6d:a7:ec:9c:be:
                    bf:05:df:f0:6f:97:0b:f8:45:bf:8b:a0:c0:84:a0:
                    3b:55:e0:3a:c7:68:c6:64:e9:3c:b2:9c:37:28:fd:
                    84:0a:2b:d7:93:fd:a5:9c:15:4e:19:fa:b6:2e:cd:
                    f9:19:b0:90:c9:38:02:5b:5f:04:de:01:f2:1c:c8:
                    72:69:f0:a7:61:e0:dd:a4:b2:10:d1:ec:fe:ac:ff:
                    1b:89:7c:32:b8:be:5a:15:c3:67:0a:4c:39:99:e7:
                    8b:68:f1:38:bd:c8:60:b2:6f:08:57:67:e4:09:f8:
                    fe:73:6a:29:6f:a3:87:a1:71:46:ad:a1:53:1a:17:
                    36:81:f1:7f:01:07:a0:2b:e5:37:0e:e4:cf:57:2b:
                    4a:72:47:dc:43:4c:71:83:6b:f4:b5:4b:e0:31:78:
                    d5:25:6f:8d:7a:db:09:35:36:50:8f:59:09:37:25:
                    0a:2f:14:d3:02:e8:b4:da:dd:d3:58:1c:09:09:7f:
                    84:b1:e1:59:b0:fb:93:54:30:75:f5:6e:81:73:ba:
                    fc:9b:fc:03:92:90:bc:01:a7:9b:10:79:ea:76:82:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6E:B8:68:09:F0:68:1D:1E:A6:48:DD:A9:22:4D:40:27:8D:B4:50
            X509v3 Authority Key Identifier:
                keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:ee:c7:75:55:c4:2e:b4:04:14:77:3a:c3:a3:96:0d:ee:
         da:b1:d3:0e:d9:ab:34:73:8e:b0:38:6b:47:8b:2c:86:be:ba:
         f1:10:b2:8c:2b:4e:f3:cf:a1:39:39:37:01:3c:e5:fb:a7:01:
         cd:3e:0b:80:46:95:7c:98:2c:de:38:eb:58:5c:bb:db:ac:b7:
         58:b6:ad:43:a0:c0:4d:3d:f4:d6:95:bb:b2:6a:6f:e4:d9:d3:
         bc:93:6c:b6:35:bd:13:98:bd:9b:29:65:66:4b:0f:ae:f2:a6:
         ee:88:ce:99:d9:61:8b:26:26:53:22:1c:aa:ad:7e:f4:3a:f5:
         10:b3:07:6c:df:a9:79:ec:c7:f2:26:47:c1:6c:e4:09:9b:1f:
         f3:b9:85:eb:f3:bc:58:4b:eb:a1:a4:85:c8:02:23:28:d7:a6:
         56:58:28:4e:cf:5c:30:2a:fc:91:29:9f:6d:0e:66:7a:7f:8b:
         34:e1:42:bf:95:24:62:a7:0e:ac:c2:4a:2c:7d:32:59:ca:f2:
         0e:9a:03:f1:73:1e:be:c9:1b:f6:dd:d7:bc:77:36:b4:f5:d9:
         52:1d:d1:8c:5d:09:ad:89:ac:3a:4e:49:d2:5d:8d:b1:2b:71:
         2c:f0:9e:3c:ff:15:40:a6:8e:57:da:bb:b2:70:97:c6:b5:e2:
         d4:88:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:35 2025 by rpki-client