Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          UijFwqvzOpRkuC++IAv/WRmHRIfN8QSjx94/pGq/L/k=
Subject key identifier:   41:FC:66:6C:EC:E1:4B:70:03:24:7B:6C:97:E5:C5:91:1A:E2:37:2D
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       0199FC8F68D96A1FE2DF4E9959FB8DDFEF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 13:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:20 +0000
Files and hashes:         1: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (hash: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=)
                          2: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (hash: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=)
                          3: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: ixWh3fsTyazqcWvYkA1iWCvEkTq8jYvNZoJrNBLaIMg=)
                          4: a4P5Nmq1ldQpFUTXqCcYVJT2FBw.roa (hash: uK/XWq2f7Vj84yIu4J13Mqd4rpKs4ZvyhbUMCrHpfh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:68:d9:6a:1f:e2:df:4e:99:59:fb:8d:df:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Oct 19 13:01:20 2025 GMT
            Not After : Oct 20 13:01:20 2025 GMT
        Subject: CN=41fc666cece14b7003247b6c97e5c5911ae2372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:6f:ac:aa:ce:4e:29:b6:10:74:e2:bc:1a:
                    36:b0:50:20:6e:56:bc:29:1b:75:78:c7:d5:29:0b:
                    db:db:a8:e8:39:9d:96:8d:86:ae:06:d3:58:71:0b:
                    6d:c0:73:f2:3e:c0:49:31:48:56:00:39:64:6a:59:
                    e3:86:85:82:c1:6b:fe:8b:29:0b:61:e1:ff:27:e9:
                    74:4e:8f:16:42:52:72:74:32:63:d3:63:b2:6b:b6:
                    3c:7c:f1:64:90:8e:fb:b2:04:25:40:e3:e6:e5:d7:
                    70:44:2c:0e:e8:a6:fa:6a:48:1f:2d:c5:7b:9e:bd:
                    ef:05:20:d7:f9:41:0e:07:78:25:69:f5:7c:b0:e1:
                    85:8c:7d:54:b1:71:a8:db:11:dc:34:28:22:32:f4:
                    69:79:2e:a5:3f:7e:b8:dc:cd:d6:4e:8a:a3:60:53:
                    c7:2b:31:e1:79:4d:e8:2a:48:39:69:18:f9:cf:57:
                    bf:40:fb:7e:e2:78:1e:68:5c:fc:c3:e4:5e:08:c9:
                    05:a7:29:b7:28:1a:80:6c:96:6e:a5:a0:a2:e5:12:
                    a5:af:b2:bb:1a:66:6c:23:cc:15:f7:d7:59:b9:12:
                    86:78:fa:fe:f5:7a:64:4c:bc:00:ef:b4:2f:45:9c:
                    07:01:3e:88:58:cb:0b:3c:08:b4:68:79:25:42:6a:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FC:66:6C:EC:E1:4B:70:03:24:7B:6C:97:E5:C5:91:1A:E2:37:2D
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:de:45:11:ff:f0:35:e2:ab:2a:01:4c:da:fd:c2:54:76:28:
         cc:c9:99:aa:3d:51:bb:c1:e8:8b:a7:c4:d6:d1:52:be:44:44:
         d5:c8:dd:a6:37:00:73:89:09:c7:c8:c3:d5:65:74:ba:ad:97:
         2d:a8:3d:51:00:61:08:8a:da:21:5e:e8:64:6f:a5:17:51:1d:
         31:e9:31:2a:30:9e:7a:4b:65:1b:d1:b3:65:63:ab:db:30:01:
         e9:cf:8c:8d:9f:c3:ac:e7:a5:50:00:0d:1f:c3:c9:29:60:53:
         3e:11:42:98:14:05:7a:2a:6f:52:82:ba:e9:43:50:29:6b:35:
         44:d7:4c:7b:b8:01:f5:49:06:d4:10:c6:44:fd:00:45:28:07:
         3e:eb:e1:2d:f3:d6:75:f1:8d:c7:46:54:f3:cc:b7:50:b3:0d:
         f2:04:15:23:67:bf:d3:6e:42:60:d6:b5:60:16:77:02:39:b0:
         5a:3a:58:76:78:2c:be:1b:ac:fa:1e:1b:58:49:bc:3f:e7:ab:
         b3:1d:91:02:ed:0a:9f:d4:78:b7:a2:75:eb:b2:e5:6c:11:9d:
         4a:27:64:35:95:ec:3d:17:5e:16:0e:51:3f:83:78:f8:89:e1:
         44:be:7b:6f:19:ef:5f:49:24:b0:27:49:72:85:aa:41:e3:9c:
         2c:b1:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:33 2025 by rpki-client