Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File:                     DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier:          q/tEE+g9MykX+rNyRszMzAzAe9gsRL62qkO321PHxRc=
Subject key identifier:   DB:4A:C3:37:F1:90:BA:7A:48:FF:71:5D:C2:E9:A3:ED:F8:37:21:F3
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer:       /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial:       0199FC217CB1BC6E1C42C6059108D26BEA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:16 +0000
Files and hashes:         1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: YJ+NOdTKTTTjQrWBs9/fh83zp+VIDnFUjBEkhh4S5A4=)
                          2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7c:b1:bc:6e:1c:42:c6:05:91:08:d2:6b:ea:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
        Validity
            Not Before: Oct 19 11:01:16 2025 GMT
            Not After : Oct 20 11:01:16 2025 GMT
        Subject: CN=db4ac337f190ba7a48ff715dc2e9a3edf83721f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:3c:4e:e3:fd:96:bd:86:09:09:b4:c0:71:
                    e7:17:b4:a7:c6:16:10:14:8f:03:04:f7:da:0d:f0:
                    94:ba:69:3f:a9:82:00:0c:0b:19:61:d8:65:3a:fa:
                    d6:3d:b6:38:69:50:42:ab:dd:91:af:3b:80:84:2a:
                    0b:e4:8a:68:66:32:85:9f:6b:47:e3:98:95:e6:19:
                    4b:5e:ba:7d:3c:23:4f:d7:d0:07:fd:58:73:69:82:
                    a3:41:09:19:d9:e1:c4:80:6c:fe:77:a5:dd:66:50:
                    8c:cf:30:f0:7a:ad:55:8b:50:e2:19:f2:71:cc:dd:
                    37:1d:9e:ec:d1:43:90:7e:2a:d1:65:98:7e:40:91:
                    ad:d6:80:f0:b7:23:66:0d:b2:97:96:07:d2:43:6f:
                    3d:d8:c3:cd:02:1e:a3:99:8f:ea:3c:4a:7d:0c:b5:
                    e5:7f:86:97:4a:c2:43:e3:e7:84:9d:1a:d2:c3:ed:
                    bc:65:3d:ea:6e:92:00:7a:02:13:b1:95:68:e3:38:
                    4f:48:d3:b1:56:1a:5a:38:db:92:19:e1:d4:b3:1b:
                    4c:c4:d6:88:64:d7:b1:20:81:46:87:98:cc:56:32:
                    ee:09:70:35:db:d8:3f:99:06:e3:7c:4f:41:2e:5a:
                    15:a8:f0:5d:bd:9a:1f:10:20:94:40:93:5a:57:43:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4A:C3:37:F1:90:BA:7A:48:FF:71:5D:C2:E9:A3:ED:F8:37:21:F3
            X509v3 Authority Key Identifier:
                keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:5c:18:52:f4:28:73:26:6e:8f:15:62:92:3d:e8:2d:f6:
         5c:ab:ea:68:69:89:8c:b5:81:62:a4:43:d8:9a:0c:84:9e:65:
         dd:f2:91:95:4b:04:ad:02:a9:1a:bf:af:b3:c4:71:b0:d6:79:
         fb:36:49:6c:e5:8c:40:9f:d0:a5:e7:d0:e0:ff:75:ef:1a:85:
         3d:6c:19:ae:0d:37:de:81:c5:21:be:31:5c:cc:8f:4d:65:50:
         bd:8f:65:c9:4a:ec:8a:49:03:60:8e:93:80:f9:3c:26:2a:3f:
         0d:b4:f7:87:1e:0b:f1:30:d1:63:e9:fa:ec:1a:c1:23:7c:9a:
         9b:43:e8:54:a5:3d:33:da:e0:6f:03:6f:13:59:bf:70:22:21:
         9d:f1:f2:48:78:7f:9c:59:00:c1:a1:ce:f2:03:e7:37:5c:59:
         6c:1c:0d:59:92:2f:62:61:03:19:8c:54:d3:5d:04:2e:8b:9d:
         4c:24:e5:43:09:55:8d:ef:e6:ab:59:82:4f:15:18:7c:39:7d:
         74:98:dd:cb:c6:2a:03:84:93:52:a5:e8:63:ab:91:1a:b3:02:
         d6:29:f9:57:27:69:cc:5d:58:c5:bc:28:b1:e0:3d:bf:aa:bb:
         86:37:ed:a8:67:29:9e:27:7e:1c:5a:55:d5:e8:fb:7c:ee:d4:
         65:fe:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:05 2025 by rpki-client