Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          T+o5oS4HGZOje3pR1/99zDoXPqzFOrKek8DIkrlH8Ks=
Subject key identifier:   AF:DF:11:F6:5E:D0:BE:98:3F:3E:9C:1E:DF:B5:91:FB:BA:A4:18:1E
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       0199FBEBFD1EE976FAA715575AC55C2BCE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:02:50 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:50 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:50 +0000
Files and hashes:         1: 6Rwi5WxIjLb63K0eJqe1EvEuxDc.roa (hash: r7Wc6Mt/nHycECkDV3tNY4uy3f9xC1QAnYnLvp1ogpU=)
                          2: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: /xjg1HdsawqXDCqaX60LBgJgvE4IGklxUapG6PDuOv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:fd:1e:e9:76:fa:a7:15:57:5a:c5:5c:2b:ce:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Oct 19 10:02:50 2025 GMT
            Not After : Oct 20 10:02:50 2025 GMT
        Subject: CN=afdf11f65ed0be983f3e9c1edfb591fbbaa4181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:dd:58:09:dd:dd:8a:e5:9e:71:74:13:92:
                    cc:7d:1a:81:52:84:70:0c:df:12:1b:3a:ac:61:0f:
                    c7:2a:29:03:21:53:9f:11:96:d5:ee:e1:15:63:9b:
                    12:3b:08:b8:d1:66:c2:cf:ee:15:c0:bb:ba:17:66:
                    d7:cc:a4:20:e5:53:03:15:74:a0:35:03:1a:95:cc:
                    4a:18:c2:07:d7:d5:e4:10:57:47:10:b6:24:86:3d:
                    69:c4:8d:0e:4a:42:a6:9c:33:47:33:49:c7:d1:aa:
                    28:20:37:7e:97:65:8d:f1:f5:e6:c2:e7:1c:e6:99:
                    59:d5:fd:a8:a2:31:39:76:16:93:2b:78:6c:77:39:
                    66:f1:40:cb:dc:18:b2:63:e6:03:13:32:b8:81:4d:
                    a2:9e:e1:50:28:e7:84:b6:92:ad:8c:b3:66:37:a7:
                    e0:73:a3:b8:2a:02:7d:db:64:25:a8:8a:a8:64:21:
                    93:8a:0d:ec:30:5d:eb:3e:25:00:f3:b4:aa:95:68:
                    52:42:c3:50:4b:f5:ad:2b:ba:06:73:fc:a1:bb:e4:
                    5b:a9:02:1c:24:8c:db:05:15:9d:57:bf:2d:eb:ab:
                    b5:e6:2b:2b:52:58:ad:10:ce:8e:a3:2c:18:56:0b:
                    05:28:93:5e:ce:9a:ed:bc:70:a7:0e:c8:38:31:be:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DF:11:F6:5E:D0:BE:98:3F:3E:9C:1E:DF:B5:91:FB:BA:A4:18:1E
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:e6:8b:65:a3:ba:96:16:cd:1c:76:92:a7:a5:c8:2e:af:
         26:d1:f5:80:1b:d1:a6:7b:6d:61:08:5b:78:21:6a:72:60:be:
         06:0f:c0:b7:a9:5a:0c:0c:b6:32:6f:2f:0b:7a:7f:37:6d:21:
         c4:f5:0f:aa:42:87:c3:24:b2:46:65:80:b6:06:97:ba:f6:e8:
         5a:ed:19:a6:9e:8b:18:66:43:dd:b9:7d:37:87:f8:00:7c:77:
         13:46:7c:0a:69:d7:e0:80:f8:e2:ec:19:46:b1:16:a0:3b:de:
         c5:2b:4e:94:02:98:56:02:81:3f:63:57:75:dd:5d:4d:b3:3d:
         82:7a:8d:21:15:41:7e:c9:c8:ea:a0:62:6c:bf:17:83:3b:b8:
         c5:1e:62:eb:20:4b:54:16:b5:ab:d7:b0:9d:ce:47:9d:4f:bf:
         07:38:5d:14:06:86:4e:00:be:8d:e9:28:8f:51:9e:7e:7a:6d:
         89:4d:5f:d1:e5:dc:de:7e:75:ff:c7:dd:ef:38:4e:4f:02:6f:
         a8:5b:ca:c3:57:d7:4c:64:8a:da:40:4d:d3:e8:f1:24:68:8a:
         ae:74:86:ad:74:85:da:38:9f:1c:a5:09:77:48:c6:85:33:f4:
         39:85:de:a2:fb:19:1b:7e:2d:57:6c:a0:26:63:16:a7:97:01:
         2d:9c:45:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:45 2025 by rpki-client