Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          FAi3Pm4mEW7WPIOj6Tl2cuiUi5QXZjhWz/4X40uQu/Y=
Subject key identifier:   83:9A:30:3F:7D:3C:33:52:62:66:90:9F:EE:3C:0A:66:5D:BF:6C:24
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0199FDD956340B8883592E42AB09183582F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 19:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:42 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: afE4B3TV240kcs5xOhWP7Ij231zMIBAUrk/so2UIcRc=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:56:34:0b:88:83:59:2e:42:ab:09:18:35:82:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Oct 19 19:01:42 2025 GMT
            Not After : Oct 20 19:01:42 2025 GMT
        Subject: CN=839a303f7d3c33526266909fee3c0a665dbf6c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:5f:5e:9b:90:b2:8b:7e:80:2c:d1:29:22:
                    1a:b5:d0:a8:5b:72:97:c1:78:13:58:6f:25:5a:4b:
                    24:25:d1:33:1c:a3:9a:75:cf:2b:0f:eb:ef:32:bd:
                    1d:b8:49:f7:24:28:f2:bf:e9:6e:2c:2a:ab:43:30:
                    62:15:62:55:c4:c7:61:f9:48:5f:ca:67:28:63:f1:
                    9b:16:78:92:ee:45:21:8f:23:5c:36:44:25:86:c5:
                    b4:5f:af:fe:37:6d:45:fe:38:45:66:aa:a0:f4:4c:
                    76:35:42:57:0e:31:4c:f3:7b:86:cd:49:15:3e:de:
                    aa:e6:64:fb:d6:89:84:4a:fb:69:a7:cd:55:5a:94:
                    c1:db:d4:e2:43:0b:d1:fb:da:07:b0:d0:84:a7:f1:
                    44:7b:82:5e:bf:98:d4:6e:0c:ce:49:e1:6b:41:a5:
                    f8:e3:7a:e4:e7:11:97:9a:b2:8e:f4:c4:bd:9b:0f:
                    96:89:7d:e4:99:23:1d:5e:19:cd:76:4d:cc:15:f9:
                    7a:31:fb:e6:4a:ff:75:2e:c4:5d:86:6a:64:20:27:
                    0d:68:75:3e:bf:68:3f:7b:1e:b7:3c:9a:9c:13:6e:
                    41:c3:9d:88:ec:b2:45:a9:5d:3c:e9:6e:87:d0:70:
                    51:d1:2e:ad:98:ac:5a:7c:1d:63:c5:ca:09:62:26:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:30:3F:7D:3C:33:52:62:66:90:9F:EE:3C:0A:66:5D:BF:6C:24
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:66:8f:10:44:8b:e7:05:93:01:a6:22:11:86:c8:a8:9d:10:
         99:a8:41:80:f8:c4:1e:9e:8a:20:6f:fc:e6:4f:25:c0:35:b7:
         5e:0c:6f:c1:0a:a1:b0:bd:d3:70:64:f7:a2:fb:bc:07:56:72:
         a4:1e:33:f1:f7:61:4c:02:57:89:a8:da:f9:80:33:35:c0:17:
         03:d6:56:e1:2a:1a:9c:51:37:cd:6f:2b:ae:9e:02:e1:55:8a:
         21:62:75:51:9b:78:51:fd:30:ef:f1:d3:d0:68:61:fb:6a:02:
         02:4c:a4:e1:04:49:da:de:e6:59:d4:2e:92:72:63:d6:87:74:
         47:68:9f:56:3a:09:77:25:dc:c2:36:68:65:b9:4e:91:ba:ec:
         0e:87:93:82:a3:88:7c:ab:38:db:fc:5d:87:98:e5:38:1d:59:
         45:a1:f5:2e:6f:a2:f0:e3:25:fb:ac:e5:4b:f0:ab:55:73:d6:
         20:a6:63:62:6c:ed:83:d0:e1:7c:98:2a:56:46:9e:da:20:0e:
         96:2f:00:8f:ca:11:8a:09:8d:30:e7:df:57:75:ed:48:e7:3b:
         de:e0:0d:3f:5f:bf:f8:95:b5:24:5f:85:40:a0:cd:ae:40:7b:
         d8:77:31:33:46:95:9f:49:2a:ba:fe:e1:0b:88:9a:17:92:1c:
         c9:26:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:58 2025 by rpki-client