Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          aiP3gJ7jKqEG261DVsbprLVXm4W9ye1XT8VHYLqj6TI=
Subject key identifier:   96:0E:B0:F8:01:3F:13:B3:3F:B0:FD:20:F2:35:0B:6C:E8:38:E0:90
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       0199FC586B99DF3D91AA7BF925A602B6CB56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 12:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:17 +0000
Files and hashes:         1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
                          2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
                          3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: vohz+0USMqplPtOh2x6Ug31G1qAcQu3gFPECybvPM9o=)
                          5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:6b:99:df:3d:91:aa:7b:f9:25:a6:02:b6:cb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Oct 19 12:01:17 2025 GMT
            Not After : Oct 20 12:01:17 2025 GMT
        Subject: CN=960eb0f8013f13b33fb0fd20f2350b6ce838e090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:09:2b:17:11:08:99:56:0b:ca:22:f5:53:
                    49:23:7e:3e:29:e3:47:4b:d5:6b:60:0d:27:22:a9:
                    c6:6f:06:a2:8b:97:be:5d:80:a9:29:d3:ab:78:3a:
                    09:29:10:92:87:52:1d:b0:4c:f9:2f:c5:05:c2:73:
                    4c:c5:0f:55:52:18:88:2a:07:58:f0:ed:7f:25:3a:
                    7c:78:56:dc:5a:c1:79:b0:a9:41:d9:a2:92:6b:ab:
                    43:f0:ed:29:8c:ac:77:66:a3:4f:85:ae:d8:da:aa:
                    13:e0:de:c2:7e:cf:4a:0d:80:ac:0b:8d:3f:5c:3f:
                    38:a8:41:f3:e8:4a:88:76:fc:41:0c:ea:20:da:7a:
                    ab:17:d5:7a:8c:de:03:c2:9b:5f:92:17:b8:d1:af:
                    67:5d:75:22:71:dc:ee:32:cd:3c:e6:ef:00:0f:3a:
                    9d:d9:0c:f6:61:d3:db:2d:35:50:d2:cf:c0:24:77:
                    bf:ba:a4:e4:c5:04:4e:a5:e9:dd:e7:fb:0b:1c:fa:
                    af:1f:3c:9d:2c:c2:22:23:08:8c:0c:76:03:ff:f7:
                    f0:60:44:7a:95:39:df:fa:59:6e:44:2c:a3:84:3f:
                    c9:f1:16:81:2d:1b:1c:4f:be:d5:1f:20:b2:72:ba:
                    e3:50:e3:f1:83:d7:34:d6:69:d8:d4:b1:77:96:ff:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0E:B0:F8:01:3F:13:B3:3F:B0:FD:20:F2:35:0B:6C:E8:38:E0:90
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:36:c0:6c:dd:79:81:73:b4:a0:54:1c:17:fb:27:62:06:b2:
         db:50:1e:db:90:20:d8:b5:3d:3c:d6:5d:3f:7e:2d:89:05:3c:
         02:11:f9:65:61:15:2d:29:be:23:9d:95:a6:3a:93:7c:83:cd:
         44:57:fd:35:ff:d8:e0:1f:aa:bd:5d:ce:a3:5d:13:a6:37:51:
         5d:b1:9a:9d:c1:49:0e:70:4b:41:93:df:d9:0e:2f:9c:bf:5f:
         aa:4c:90:15:57:51:54:51:95:97:b9:b6:af:a0:79:b1:be:3c:
         4d:35:64:1c:1f:42:13:44:12:8b:96:af:71:4f:55:cf:6d:1b:
         15:2e:9b:7a:5d:9a:85:51:ca:58:fc:0d:ab:0d:5c:e9:27:32:
         0a:6e:02:7b:4a:72:5d:6f:24:24:31:fc:24:28:4b:e0:26:77:
         f6:03:c0:c1:99:0e:61:be:88:47:68:1c:ab:0d:19:a8:f4:e4:
         ff:12:ca:2b:d9:61:b9:90:49:a4:17:a3:65:1f:ee:c0:46:07:
         a8:a7:45:86:a1:38:5d:dd:d0:4c:df:16:a2:9a:60:ea:f0:38:
         64:82:be:cc:ae:db:ce:04:d6:f3:bf:4a:9e:16:5c:40:26:6d:
         e6:28:b5:e2:ab:09:ab:ce:f6:5c:a2:3a:50:11:a1:f9:2e:08:
         67:8f:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:47 2025 by rpki-client