Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          yfCWHpeNQYMBXVWhlH20wCcpJzo3O77KEmdflbvkI88=
Subject key identifier:   5A:27:EB:20:D0:C1:71:5A:40:4A:66:AC:3F:47:F4:4B:B6:B1:24:6C
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       0199FE7D977645B42532C0A7EFF7FC33CED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 22:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:07 +0000
Files and hashes:         1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: vFfD083bVdpCYeCi3uxyZA0KCHtSg/PeK0AgP0LK8Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:97:76:45:b4:25:32:c0:a7:ef:f7:fc:33:ce:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Oct 19 22:01:07 2025 GMT
            Not After : Oct 20 22:01:07 2025 GMT
        Subject: CN=5a27eb20d0c1715a404a66ac3f47f44bb6b1246c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:36:5e:63:89:29:1c:ac:b6:cc:1a:86:67:
                    a2:87:8a:cc:a9:7f:49:a2:9b:86:1f:d0:ff:31:8f:
                    63:cd:96:1e:16:ce:5c:91:e0:f4:2e:ba:81:ea:59:
                    b3:58:f5:6c:ff:8b:cc:86:d5:c1:6a:49:f0:8f:69:
                    cc:1d:a2:53:b4:34:80:22:5e:d0:19:26:01:f0:ee:
                    39:21:8a:af:9b:99:82:f7:80:4f:ef:49:86:f0:2b:
                    e3:90:ff:87:ee:78:2b:65:12:24:1c:ae:6e:04:ee:
                    9e:35:70:f1:88:00:6d:16:ce:a9:c3:76:52:34:77:
                    70:e2:d4:39:28:75:f3:56:7d:89:68:09:7d:27:41:
                    cb:fc:3a:3f:c5:dc:90:8a:01:cd:47:d6:3d:40:d5:
                    c3:62:d7:87:c4:89:de:b2:13:47:b2:fb:16:be:d4:
                    8e:7e:35:e9:13:57:97:a2:46:26:9f:ba:7b:35:a2:
                    af:56:42:ff:e4:c7:e3:8f:df:c5:62:7a:da:4c:5f:
                    99:5b:db:d5:f6:d7:39:58:a7:ef:bc:15:71:7f:13:
                    ba:cb:7a:af:d2:bd:c5:e4:eb:8b:fe:e8:37:f1:7b:
                    04:89:d3:80:11:3c:d2:90:a9:67:1c:25:94:0f:a3:
                    86:66:72:05:93:a8:97:87:e3:27:3d:40:7e:24:35:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:EB:20:D0:C1:71:5A:40:4A:66:AC:3F:47:F4:4B:B6:B1:24:6C
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:17:0a:95:8c:7b:47:7e:a7:f1:68:8a:6a:7b:40:48:88:d7:
         c3:8a:53:3f:55:44:96:17:6b:1f:f7:0b:2a:36:40:d9:ce:e3:
         90:e9:27:5c:aa:a2:f4:18:be:85:bc:92:49:fe:e6:9a:54:e5:
         85:1e:2a:ec:0a:c5:e2:a3:66:4d:1c:d4:8d:17:5d:1f:81:f0:
         0c:36:b9:4b:d5:55:4a:86:ef:0b:de:5e:25:e3:a1:cb:47:b6:
         cd:72:52:9a:40:50:f7:9e:ea:2e:7e:b5:d2:5b:2b:e4:7e:fb:
         9f:13:16:be:17:2d:c4:b2:e0:5c:4c:51:05:df:48:6a:f8:ce:
         0e:8b:66:af:98:e3:ac:4c:ac:21:b9:48:52:01:4b:29:89:d6:
         d2:29:a7:8b:38:33:54:c0:b0:c7:91:af:1b:5e:b7:23:b8:55:
         1b:9d:63:50:c4:e8:53:30:53:cd:88:45:23:1b:ba:8d:90:ef:
         67:a6:49:a8:07:19:23:d7:cb:4a:d2:ce:73:6d:b2:a7:00:5a:
         22:9f:60:ac:df:5c:2e:1c:0e:0c:75:25:92:57:3f:a4:d1:cd:
         80:f2:e7:d2:c8:c5:e3:00:84:f5:c2:b9:82:cf:4e:c4:e4:94:
         8c:df:bd:76:7f:90:18:4e:60:b8:a8:98:00:91:7f:4e:d8:c3:
         95:43:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:15:31 2025 by rpki-client