Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          2cQh7YdWHpEwY+mywNr8IC4GqbpVCrxsqdX/CDcRirI=
Subject key identifier:   4C:C1:3A:39:AD:75:7D:5A:3B:CC:2E:11:BB:F4:25:91:05:CA:17:D4
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       0199FC21CB30488BCCCDC8E053DB5864BB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:36 +0000
Files and hashes:         1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: UJ/uoM0MWTX4RiU5Ah9l4xyNWgmWO9Bc9JjTokfQwHo=)
                          2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:cb:30:48:8b:cc:cd:c8:e0:53:db:58:64:bb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Oct 19 11:01:36 2025 GMT
            Not After : Oct 20 11:01:36 2025 GMT
        Subject: CN=4cc13a39ad757d5a3bcc2e11bbf4259105ca17d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:4f:5e:15:1e:1c:64:7b:fa:85:fe:51:e7:
                    46:53:3a:87:b9:ba:47:36:08:45:97:57:a4:88:b6:
                    e3:86:b7:5a:5a:88:5a:8f:fe:a7:eb:35:a8:af:88:
                    1a:01:3f:0d:4d:90:86:11:77:eb:f7:2d:c3:d3:16:
                    00:c5:50:df:fd:78:2e:2a:96:14:20:07:12:c1:fc:
                    5a:82:1a:8a:ff:c1:62:4a:5b:3a:d7:5f:06:bc:bf:
                    ed:46:54:22:3b:3d:ac:46:43:73:92:c7:00:54:9d:
                    78:2b:ed:26:4a:73:50:82:e6:9b:0d:b6:08:0d:ad:
                    3c:a2:1b:a3:43:f1:06:80:88:72:88:04:59:a1:1d:
                    93:71:e1:aa:55:be:a7:29:9c:0f:04:05:39:69:c5:
                    bc:0e:a8:66:6b:e8:3c:2c:81:79:ed:c3:be:e9:96:
                    7a:9e:7b:ca:97:f3:e1:0b:30:b2:97:bc:3c:26:f3:
                    cb:ad:5a:4e:64:89:6f:ea:05:e2:02:38:7c:46:30:
                    1c:54:2c:16:29:97:58:5b:77:34:13:45:2f:37:7f:
                    57:f1:ef:79:38:c4:42:8c:2f:50:38:3a:0c:e6:21:
                    67:08:6b:df:57:58:e1:35:5d:65:01:ae:75:c3:3c:
                    a2:b6:64:dc:ee:c4:a5:4d:f8:d0:fc:08:b8:1b:a5:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:3A:39:AD:75:7D:5A:3B:CC:2E:11:BB:F4:25:91:05:CA:17:D4
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:6f:ed:36:f9:4d:20:a4:3a:9b:b2:3e:9d:8b:2c:d1:7f:
         7f:23:e2:86:3c:c9:41:d2:ca:47:61:f3:38:f0:c6:8d:93:41:
         d3:b4:5b:f9:74:83:76:ad:fd:01:04:d0:8f:33:36:01:57:d9:
         cb:1d:04:47:c4:26:6f:61:5f:d1:20:db:5b:c7:9b:65:11:29:
         bc:de:65:4b:c5:8f:4b:29:86:06:5a:cc:37:55:e1:28:b3:14:
         e6:dd:e3:fa:84:83:81:be:a1:6b:85:62:f7:de:49:73:71:b6:
         e7:d6:c7:db:a5:2a:ea:08:46:49:5b:c2:3b:04:63:0c:88:10:
         f1:b4:db:52:6e:c3:5f:c2:ff:da:1c:3e:20:b7:12:3e:4d:0b:
         94:47:d3:08:91:08:20:7a:bb:22:6d:b5:f3:25:ec:7b:2e:24:
         70:0c:50:28:e7:9d:3e:12:14:27:53:62:d3:9f:0c:5a:b2:f0:
         24:ab:b6:58:48:76:23:2a:0d:a7:9f:90:04:4e:da:10:c9:f1:
         a7:e6:85:b3:46:25:5d:5a:13:67:9a:93:c1:ab:73:17:98:d1:
         86:c7:4e:0a:de:08:11:ab:c0:20:c6:13:6c:cc:df:9d:06:44:
         56:b1:fb:d4:f2:40:b7:c4:09:79:62:e2:84:11:ea:0e:e2:76:
         d3:2d:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:27 2025 by rpki-client