Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File:                     60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier:          aVFtDxL3U8fUlhDiTT6zy7AmBcXAFTOEJFLxa4hFix0=
Subject key identifier:   DA:C8:94:F2:C5:AD:30:83:C1:7F:FE:B5:B0:B7:D0:6A:88:39:89:14
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer:       /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial:       0199FB0F41CB7B7E8DBC07C698A03208421D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 06:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:45 +0000
Files and hashes:         1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: /+hBomY8+RoAZv7UY/I5elDklBtROoJpoYeteHoVcuE=)
                          2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:41:cb:7b:7e:8d:bc:07:c6:98:a0:32:08:42:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
        Validity
            Not Before: Oct 19 06:01:45 2025 GMT
            Not After : Oct 20 06:01:45 2025 GMT
        Subject: CN=dac894f2c5ad3083c17ffeb5b0b7d06a88398914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:39:4f:3f:98:55:59:a7:d2:d1:24:d4:50:6c:
                    9e:da:c1:b8:fe:ba:5c:44:7d:ec:21:a0:e2:95:d5:
                    91:34:09:83:fd:f3:20:a5:4b:ac:4b:93:86:c2:f0:
                    1e:da:8b:e7:ee:88:c6:25:d2:c3:6e:62:2f:5d:81:
                    8b:70:01:d9:29:8b:dd:8d:20:93:c2:97:07:a1:be:
                    fa:ff:e5:09:c9:48:cc:db:f6:78:4f:75:01:9c:3d:
                    b5:e1:3a:4d:4f:56:8d:a5:8c:6c:85:fd:d0:96:6c:
                    d6:1e:95:a0:37:0d:d9:d4:d5:1f:3f:c4:75:98:4f:
                    42:c9:b0:31:2b:be:5f:c0:d8:c9:7a:12:d3:cb:e6:
                    eb:6a:c3:86:e5:e3:e1:48:38:de:12:a5:83:6b:d0:
                    8f:e6:23:13:f3:cc:17:7d:ff:4f:50:ed:fc:b0:c0:
                    d0:1f:f0:38:29:54:8e:c2:6c:96:40:c7:43:4a:f1:
                    76:a8:5a:f9:ca:ed:62:ed:3c:0d:27:d0:7e:37:a2:
                    b2:60:31:93:ca:97:fc:11:59:9e:0e:35:01:0a:1b:
                    ea:1b:cf:9b:e0:8d:d3:20:3e:9c:c3:55:87:54:b3:
                    ef:f1:da:17:08:fb:f5:1e:01:b5:50:38:9a:ee:0f:
                    3a:d6:83:67:9f:d1:63:71:d4:fd:52:e8:9f:e1:68:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:94:F2:C5:AD:30:83:C1:7F:FE:B5:B0:B7:D0:6A:88:39:89:14
            X509v3 Authority Key Identifier:
                keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:49:60:91:01:30:71:ee:2c:cf:d0:43:c0:6e:a8:d0:da:76:
         da:18:2d:67:9f:da:98:e4:59:dd:b6:3b:f3:16:f6:3c:f5:22:
         3e:1f:ce:7d:19:2d:12:7b:bf:57:f2:fd:09:61:e4:a2:30:a9:
         3e:d2:b1:21:20:55:f4:79:c3:c0:80:48:af:4f:94:31:7b:f2:
         a3:c1:9e:03:92:4c:ce:7e:4e:b6:ee:91:0a:a3:30:b6:0e:c8:
         5f:01:c1:81:32:28:1b:b4:b8:82:9f:8f:39:92:ed:4a:d8:8a:
         29:14:58:aa:b9:f5:1d:d4:50:c8:f9:22:3d:74:62:7b:5d:05:
         c5:95:fe:a2:db:a3:e0:2e:74:e3:ce:06:f6:6d:03:f3:5f:78:
         b9:58:c6:b2:05:c0:33:e0:51:e3:da:eb:91:4a:c6:1b:d5:29:
         2d:eb:fc:59:09:9b:b4:3e:37:e3:01:35:ce:81:b9:b8:ce:3a:
         c1:75:24:98:0f:88:da:4e:46:f4:65:0f:58:78:2f:b0:7d:35:
         ea:0e:b8:8e:72:30:3a:22:cb:c5:d4:e5:30:3d:2d:ae:32:07:
         58:72:2b:29:2f:38:f6:19:c5:63:f2:2a:72:bd:0a:1c:48:fc:
         80:c3:6e:7c:65:a4:8b:9d:09:da:60:61:64:b6:e6:70:8e:44:
         e3:82:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:07 2025 by rpki-client