Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File:                     Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier:          vxQbeBtVmgTMxPtManoM2eNUGD7JTigzxPs3gCnb1fI=
Subject key identifier:   43:C0:E1:7D:82:72:4A:4C:23:46:6F:10:81:A7:3E:F7:28:BD:87:76
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer:       /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial:       0199FB7CA2E9509AB05D4F6E3AF123236639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 08:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:13 +0000
Files and hashes:         1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
                          2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: QwNwqeopvxjwdYHVlOugV1TayMZsAg71t5pDaw+1neI=)
                          3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a2:e9:50:9a:b0:5d:4f:6e:3a:f1:23:23:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
        Validity
            Not Before: Oct 19 08:01:13 2025 GMT
            Not After : Oct 20 08:01:13 2025 GMT
        Subject: CN=43c0e17d82724a4c23466f1081a73ef728bd8776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:74:79:c3:1b:52:cb:44:da:92:bd:f9:35:
                    01:b7:6b:a6:5b:0a:99:64:4d:a6:4a:3c:e9:e0:50:
                    39:42:40:d0:32:a8:48:21:75:eb:52:14:ad:6c:d0:
                    a8:92:5c:3e:e2:e0:6b:3c:77:bc:01:d7:de:25:bc:
                    ac:f1:25:0f:d6:32:ed:90:82:8c:b5:7b:95:e7:33:
                    26:97:4d:34:6f:d1:cb:e6:28:d0:ba:b4:b8:db:a9:
                    6d:e3:d1:a2:f5:02:36:56:f2:48:04:35:d7:be:b8:
                    8b:0a:e9:ec:00:1e:da:52:7b:da:3d:f0:98:e3:69:
                    3c:0f:3b:f1:e0:43:8c:2f:65:49:6d:37:b8:dc:01:
                    28:f2:96:40:d8:fa:8c:64:be:76:8f:96:c9:1c:ef:
                    23:f9:3f:1b:8a:40:03:2c:f2:46:33:8f:9f:92:85:
                    d8:68:71:75:de:36:f2:14:cd:72:84:ec:68:7c:a7:
                    e7:a4:d4:66:15:4f:56:ca:9b:c1:8e:d2:48:2d:61:
                    2c:cc:a7:da:34:b2:aa:86:de:ca:9d:bd:18:30:d4:
                    03:74:88:ed:d0:f6:7f:79:ac:35:c2:45:fd:af:ed:
                    2a:c6:89:b2:47:1e:38:fa:1a:bf:b3:8e:c3:dc:28:
                    c2:97:5f:09:28:8d:9a:7d:84:41:6d:de:c4:d8:67:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C0:E1:7D:82:72:4A:4C:23:46:6F:10:81:A7:3E:F7:28:BD:87:76
            X509v3 Authority Key Identifier:
                keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:4f:95:e6:07:9c:c6:fd:01:13:95:5d:20:78:23:d1:5d:
         c0:a3:bf:97:97:e2:68:ad:60:b3:eb:c1:0f:56:36:dc:78:65:
         0b:ad:48:c6:a3:85:6c:01:4b:05:67:64:ea:a6:fd:76:e0:da:
         b8:a1:8a:17:dc:85:e3:6b:52:15:41:bc:39:f0:3e:32:66:48:
         96:8d:51:bf:37:e3:1b:04:18:28:30:5b:b8:07:1a:c4:b6:6f:
         ed:44:c3:d8:7b:26:b6:bd:37:20:a0:dd:23:28:e3:94:d9:3f:
         90:99:b8:ca:87:30:12:fd:b7:3d:d0:27:f3:fd:d3:28:a1:79:
         b9:58:00:ec:55:0f:75:e9:01:51:66:55:ab:f2:38:72:c0:09:
         38:e7:28:2d:24:64:fd:a6:73:16:21:78:00:96:92:12:a2:6a:
         1a:a5:6e:53:2c:24:0d:cb:8e:1f:02:81:75:21:b4:af:77:58:
         4f:bb:b1:d6:a4:4c:5a:00:7e:b6:67:cf:3c:66:c9:a4:dd:4b:
         ae:86:40:c7:18:65:9a:88:35:05:c3:83:04:b8:ca:30:08:7b:
         5a:06:85:24:d8:47:cb:36:09:a9:ab:0b:4b:f8:63:83:f2:8b:
         3c:c9:bc:e2:18:2f:2e:59:89:1c:b1:6c:67:ba:1a:ee:df:ff:
         40:01:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:28 2025 by rpki-client