Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File:                     IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier:          vgE6mTi8NvUrHgQZG6Zgk9pVb8Z5LxBnRwswS1MeuDg=
Subject key identifier:   76:61:59:A1:99:4A:87:45:65:D4:43:AE:89:68:AC:C8:BD:04:93:CA
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer:       /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial:       0199FC21A46259C4C7AB69F96022BE0E231E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number:          0616
Signing time:             Sun 19 Oct 2025 11:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:27 +0000
Files and hashes:         1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: VHSTZPZgwzsjzdUXrbmRB+OuoJkm8mB4PyqIi6ZEf9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a4:62:59:c4:c7:ab:69:f9:60:22:be:0e:23:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
        Validity
            Not Before: Oct 19 11:01:27 2025 GMT
            Not After : Oct 20 11:01:27 2025 GMT
        Subject: CN=766159a1994a874565d443ae8968acc8bd0493ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:b1:9f:26:c1:a4:96:33:70:72:7f:b3:f8:
                    e6:94:c9:ea:85:26:21:e9:5b:c5:06:d4:e4:d9:8f:
                    86:1c:c5:8e:46:ae:1e:54:4f:d3:ed:32:fa:07:75:
                    a0:29:e4:26:7a:58:5b:23:7b:13:d6:c7:57:2c:9e:
                    6e:b4:81:98:e3:54:71:ef:6c:09:89:5d:39:ab:24:
                    63:12:0f:04:a8:9d:59:ea:30:4b:4f:aa:47:fc:60:
                    6d:fd:21:d2:2f:2a:39:ea:af:9c:73:d1:c6:a6:21:
                    ce:d3:c8:3c:54:de:8f:92:2f:28:12:2d:34:66:ea:
                    32:72:ca:87:df:02:81:a2:bb:96:8e:24:c4:49:c2:
                    0b:50:b9:92:35:f9:6a:b7:c7:5c:3e:a4:a8:72:8a:
                    1d:2d:5d:04:2f:75:bf:89:c9:b5:a2:03:e7:7a:30:
                    ec:94:c0:7e:cc:4b:10:4c:bc:1c:8c:93:76:35:47:
                    71:8e:d6:c1:22:b5:fb:00:df:e5:f6:af:81:58:a1:
                    e4:49:43:86:d3:58:78:81:44:55:35:4f:bb:00:68:
                    c4:0c:ec:bd:ef:8e:e7:25:a8:94:f7:b3:81:84:16:
                    23:c4:8a:94:6a:79:61:3c:d7:ad:62:97:25:01:51:
                    eb:09:93:99:99:73:16:5d:e1:38:95:f0:4b:ec:0a:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:59:A1:99:4A:87:45:65:D4:43:AE:89:68:AC:C8:BD:04:93:CA
            X509v3 Authority Key Identifier:
                keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:87:fc:ba:6f:f3:56:75:76:31:0f:fa:96:b9:4e:f3:15:
         55:ad:01:17:08:72:8f:76:6b:60:cc:dd:77:eb:ba:6b:82:e8:
         02:d8:17:c1:89:14:b1:6d:48:b6:b3:18:70:a2:da:55:4a:00:
         a7:25:f2:f9:43:ea:62:b2:8a:d1:c1:5b:42:94:23:07:a7:32:
         d4:db:98:c4:ec:6b:a9:44:44:31:1d:46:08:8b:39:d8:ab:94:
         17:d8:9a:54:60:d2:26:35:5c:9c:07:71:57:9d:24:09:dc:27:
         8b:9e:70:5c:8d:e2:40:c3:8a:7e:1e:58:b3:02:2c:4b:2a:3c:
         c7:3a:d8:35:c7:09:e5:bd:1a:25:60:90:68:6a:37:56:c8:59:
         b3:12:8a:d5:a6:b2:61:c6:ba:5f:ce:7f:2c:0c:2b:14:e6:4b:
         52:be:90:f4:a7:14:36:a2:06:49:a1:20:93:cc:15:52:6e:5a:
         e4:24:37:be:7b:bd:4f:69:80:76:44:59:7c:e5:01:c5:13:52:
         0f:1c:4c:d4:f7:76:9c:0d:45:f5:c1:45:d1:6b:1e:b3:d4:c2:
         b3:d2:50:ec:7e:52:9e:60:bc:c6:6e:61:f0:a0:db:90:04:41:
         5c:a6:5b:77:a6:17:d4:23:5a:5d:b1:ca:e8:32:2f:01:f8:a9:
         93:75:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:53 2025 by rpki-client