Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          Lqwkouob+Fuj4i4C8j6jsuAKQysCZn8uM9pp5Ry6YS8=
Subject key identifier:   8C:39:28:E1:1A:F6:7F:F6:71:0A:32:EF:D5:16:7B:2D:57:15:F1:46
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       0199FC58BD819E87A1E933CF3948284656D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:38 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: tKYgMdA0BDNiFtjmMbV5nqFMlMlq0mnoUG+HeM+P9oc=)
                          2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
                          3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
                          4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bd:81:9e:87:a1:e9:33:cf:39:48:28:46:56:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Oct 19 12:01:38 2025 GMT
            Not After : Oct 20 12:01:38 2025 GMT
        Subject: CN=8c3928e11af67ff6710a32efd5167b2d5715f146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:6e:ac:d7:cd:33:a0:04:36:2c:5d:c0:3b:
                    22:f7:b7:51:15:59:64:39:6e:16:71:ce:6d:6d:d2:
                    e6:3b:63:88:83:5c:53:ba:c1:1e:bc:88:01:af:6b:
                    bf:11:62:c6:00:24:e9:d9:23:56:3c:46:85:9f:08:
                    a8:a4:70:36:e2:e4:17:80:b7:ff:d2:0b:f7:f8:2a:
                    87:4d:1d:a0:c2:dc:80:a3:08:0e:a1:82:cb:0f:fb:
                    19:98:1c:00:d4:c2:0c:03:c2:48:1f:0a:6a:3a:00:
                    28:33:38:f7:61:e9:b9:df:38:b2:7b:ea:44:0b:11:
                    9d:62:a9:ab:c4:55:af:4e:db:04:b5:98:b4:ff:4e:
                    c1:e6:a3:c6:4e:26:e2:83:af:44:cc:5a:56:10:73:
                    ee:e1:2d:76:10:c2:ff:ae:76:3d:5a:67:a5:19:10:
                    6a:c1:4c:5d:1e:9d:0a:c2:3b:f5:42:2b:44:05:2f:
                    75:f1:89:0d:10:69:31:e2:c7:0b:0b:b5:03:6c:9a:
                    23:7e:bf:bd:5d:e7:15:c8:74:d0:5a:36:83:7d:2c:
                    1f:bf:02:40:04:13:33:0e:4e:d5:5d:df:ef:81:67:
                    d8:92:ca:ea:49:8f:ef:39:8b:f8:a7:92:9d:66:ac:
                    22:16:2c:8d:ec:b2:06:49:b7:c2:d5:12:7c:b2:f3:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:28:E1:1A:F6:7F:F6:71:0A:32:EF:D5:16:7B:2D:57:15:F1:46
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:16:19:e6:e8:3e:b8:79:e9:1f:46:c8:52:77:fc:d6:b4:a1:
         7a:08:a7:00:4f:df:57:8d:d1:1f:b3:c1:ad:b6:01:ac:77:cc:
         f2:e3:c2:7f:8a:89:fa:0c:8f:87:15:3e:b1:e8:d2:8d:b2:99:
         c4:54:4c:30:fa:48:73:53:5e:0b:4e:79:9e:d3:30:91:83:fd:
         e3:a0:9a:0a:87:c6:6e:b2:81:8d:a9:09:e2:85:86:fd:58:7d:
         4f:62:ba:57:a5:32:6e:09:a0:3c:ce:1e:bc:a7:be:c2:3a:24:
         46:28:36:dd:d4:2e:3b:cc:03:8e:de:2e:d3:f5:f7:86:fa:ac:
         37:12:79:ee:ea:8c:9f:be:c0:ea:f9:7f:98:a4:79:8e:22:0c:
         82:da:99:93:eb:c5:95:ae:73:51:1c:56:0b:85:73:1c:4c:ec:
         c9:a1:65:1a:a0:dd:b6:7f:a9:90:67:27:1b:c6:be:78:2e:a2:
         61:17:fd:71:d1:44:13:d4:99:b2:a2:32:c5:6c:95:a7:7a:9c:
         07:d4:d6:fe:bf:3c:a5:f3:32:16:55:e4:ea:8e:dd:97:3c:f1:
         ec:52:df:f9:40:03:40:60:76:31:d6:74:36:fc:ce:ac:b3:45:
         b5:da:8f:77:53:76:d1:94:29:45:6c:2e:02:26:31:b7:a0:dd:
         0b:64:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client