Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
File:                     SEAyWZVCgEO12QXY0sF8MCuLNGU.mft (raw, json)
Hash identifier:          Bc8yn+4Gwf0yLhrmdh1zUy7qljfO4bTsPepu6HNcqGw=
Subject key identifier:   6E:2A:68:A4:81:16:70:4B:5C:80:CF:C4:5E:A0:FC:69:8E:57:3F:25
Authority key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Certificate issuer:       /CN=4840325995428043b5d905d8d2c17c302b8b3465
Certificate serial:       0199FDD970953C47E7CFF663C887377C3644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 19:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:49 +0000
Files and hashes:         1: SEAyWZVCgEO12QXY0sF8MCuLNGU.crl (hash: CUCqqJtCx2rJ7SQjia5XWRc7NYwD0SyY9UnfTtteM/I=)
                          2: i7O_oqy1hOvPc2P58vmTI6wRVkU.roa (hash: ySE4UK1lU4KlZ7T7JZOZsfcplexjqn6fZrZ127xQdOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:70:95:3c:47:e7:cf:f6:63:c8:87:37:7c:36:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4840325995428043b5d905d8d2c17c302b8b3465
        Validity
            Not Before: Oct 19 19:01:49 2025 GMT
            Not After : Oct 20 19:01:49 2025 GMT
        Subject: CN=6e2a68a48116704b5c80cfc45ea0fc698e573f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:55:a8:1a:25:bc:8d:0b:39:e4:20:ae:3e:
                    9f:36:00:6f:a3:a1:1c:d9:88:f9:b4:70:ec:2c:bf:
                    4a:72:3c:37:49:d8:68:3b:91:98:07:5c:2e:88:2e:
                    09:e5:7f:6e:14:77:d8:ae:b5:e3:4d:18:99:f8:6c:
                    4b:22:97:42:f9:e3:cd:7c:0c:0f:1d:bf:5d:e3:ea:
                    40:77:1c:f7:b2:9b:27:ea:2e:82:de:55:25:2b:69:
                    ac:61:75:ae:e7:f0:19:70:18:49:ed:e2:67:4b:d0:
                    45:f1:95:1d:6b:3d:83:d1:8e:55:3d:bd:18:0a:a4:
                    c2:2f:a7:ec:aa:31:25:79:af:af:e8:15:ad:1f:8c:
                    f4:27:e5:fd:74:80:22:2e:81:b1:f4:93:01:18:e2:
                    f8:1a:e5:bc:fe:be:03:95:45:1e:2e:07:d2:69:69:
                    ec:48:c0:da:59:19:de:fb:58:c2:de:2f:5b:9b:ee:
                    d5:94:56:82:f0:88:84:b5:a0:6d:08:b2:7d:57:36:
                    f8:52:34:72:3f:4e:96:fc:a2:fa:88:08:ea:b4:6c:
                    c0:1d:c0:92:23:bb:ce:16:9a:2b:b0:47:f1:f4:c0:
                    aa:47:89:c3:a3:c8:28:e0:79:52:e7:f3:c0:5c:a8:
                    c2:96:11:0e:75:4d:d3:2d:4f:5f:89:48:3c:49:b6:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2A:68:A4:81:16:70:4B:5C:80:CF:C4:5E:A0:FC:69:8E:57:3F:25
            X509v3 Authority Key Identifier:
                keyid:48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:02:1b:2d:8a:c0:cc:86:90:03:e5:9d:38:ec:be:83:21:
         8a:c5:e5:e1:aa:29:b5:91:ab:2a:26:66:10:5c:2e:75:5f:b4:
         de:5d:6e:49:72:44:95:20:5c:71:63:a1:2a:07:a7:3c:44:92:
         32:4b:f2:13:71:0a:ed:7f:3c:4c:6c:96:65:52:18:c2:a3:59:
         10:07:a4:33:ae:16:fd:1d:73:75:42:63:23:98:83:32:7a:07:
         45:9a:b0:71:26:6f:5d:cc:d4:d6:06:2d:c4:7e:1d:1d:c2:3b:
         38:8f:d6:ce:95:78:00:1c:79:0f:3e:e5:fa:96:0b:0b:ec:7b:
         23:ec:a1:82:30:cf:4e:b4:b5:ad:31:62:11:be:11:d8:c5:8b:
         ad:d8:f3:c2:dd:7b:5d:26:76:69:2e:50:5b:59:3a:b4:b7:23:
         af:85:dd:b9:47:ba:eb:48:fe:4d:e0:a5:f1:39:fe:60:15:19:
         58:a4:36:43:13:f8:57:cf:2e:cf:d2:7f:44:3a:cc:29:b8:9e:
         f8:99:91:f9:b9:7d:62:bb:81:53:de:5d:ee:43:de:67:df:b0:
         3f:e5:84:92:05:cd:4e:53:47:35:f9:32:fd:ed:71:1c:21:9c:
         63:3c:ec:e8:cd:cf:d8:38:bf:1b:a5:b3:91:a4:e9:0d:ef:54:
         30:45:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:36 2025 by rpki-client