Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File:                     debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier:          jymoE2D1zfgGecsJ8A/+n1LJs1YfsdNfF6Ay99pvD2A=
Subject key identifier:   AC:AF:29:07:67:71:99:74:F7:C8:2B:42:7C:83:FB:8C:9F:79:80:14
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer:       /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial:       0199FC589718E015239080F1FFE1FC67FC1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:28 +0000
Files and hashes:         1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
                          2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: ZZEy3em3vNEtWx/hr0X1PUMSqsdFoqTIOPJiid37LzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:97:18:e0:15:23:90:80:f1:ff:e1:fc:67:fc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
        Validity
            Not Before: Oct 19 12:01:28 2025 GMT
            Not After : Oct 20 12:01:28 2025 GMT
        Subject: CN=acaf290767719974f7c82b427c83fb8c9f798014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:37:3f:71:6d:82:0e:61:98:9a:9c:f1:72:
                    7a:bb:17:b8:a1:62:be:4a:09:e0:7e:71:a6:35:e1:
                    8f:27:12:c6:5c:6a:64:c0:d4:de:4c:52:57:18:ae:
                    d3:6f:df:f4:a2:3b:2e:95:c3:34:d4:5f:e3:ab:e0:
                    63:a3:64:c6:46:c4:a7:11:76:86:51:2d:61:96:2f:
                    a6:9e:22:32:15:de:8b:8d:8c:82:f2:ba:72:07:4d:
                    06:80:ae:f2:ad:23:7e:36:db:8a:d1:dc:a4:c7:9d:
                    49:35:7f:7e:13:55:23:0d:8d:a4:ad:fb:49:a4:3e:
                    55:b5:8b:02:41:77:1d:c8:e6:01:46:89:ce:e6:82:
                    1b:1f:18:46:7d:55:e0:1d:ff:a1:b2:1a:e1:fb:14:
                    b6:9f:5d:b8:a2:4c:1c:a9:5f:8a:9c:3a:bd:33:44:
                    3e:f5:9b:32:57:41:22:f5:b9:b6:cb:8e:2d:40:1e:
                    bc:26:ba:e5:1c:14:f6:13:93:85:b0:d7:ab:26:6d:
                    39:0d:50:05:e8:48:e2:f0:3a:d5:05:80:ea:b6:d8:
                    97:f2:36:76:62:24:61:7a:fc:72:ba:c0:34:d4:88:
                    26:da:e9:b1:a8:29:44:e4:10:ba:2c:f1:4b:3c:79:
                    d0:14:df:e8:25:ad:bf:c7:17:db:99:71:3c:de:87:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:29:07:67:71:99:74:F7:C8:2B:42:7C:83:FB:8C:9F:79:80:14
            X509v3 Authority Key Identifier:
                keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:29:46:7c:a7:b3:ef:cb:8b:24:f4:1c:66:4d:61:ee:5c:
         31:ad:72:9a:37:7c:25:ea:7e:c0:9d:df:ee:13:b1:5c:4a:a7:
         f0:0c:85:94:8c:94:12:d8:57:ee:48:02:8b:0a:06:4a:bb:f3:
         ee:6c:d1:77:df:ef:8f:9a:74:3b:bc:55:0e:a2:08:ed:32:50:
         a9:0a:b9:af:e9:b8:be:7c:cd:d1:98:d5:ca:d7:85:73:18:b8:
         5d:96:95:35:1c:6f:c3:af:86:78:5a:fb:42:23:5b:84:01:69:
         7f:7e:74:b3:2c:25:2b:7b:98:b8:8f:00:15:6e:5f:2a:db:e7:
         23:c5:ac:4f:6a:f8:13:c1:23:47:ea:ef:3f:20:7c:fe:cf:a0:
         c6:26:d7:5d:84:c0:e7:fb:c9:2c:6f:05:ea:00:aa:d2:b1:b4:
         e6:2f:a2:35:f0:77:d3:87:95:b8:bd:8c:a2:f6:e1:05:cf:03:
         79:ba:73:b7:cc:b5:3b:a8:20:67:4a:e5:8d:92:7b:10:2c:38:
         5d:5b:62:c4:c0:96:6e:b4:af:23:a6:3a:e1:a8:7c:4f:15:52:
         ea:49:1e:9e:63:68:ee:06:3a:21:e5:c9:2c:55:99:6d:3c:f1:
         26:de:0d:00:3d:b1:f6:8f:36:dd:1e:b0:68:4f:92:37:61:f8:
         90:a1:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:51 2025 by rpki-client