Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          Gp7Qh1vZnEwTJXEYl4mSJXg3AwDt+xr1GG2UVAS29Pw=
Subject key identifier:   D1:F9:94:97:4E:AE:CE:7B:03:67:BF:A0:32:E2:82:BD:6B:2F:BD:29
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       0199FCC60F827991000DC13D40FACC0BE7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 14:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:02 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: g3tHk1A88e4tOxCipUGaPDrtcq+PwmQLgXPNFWpuUu8=)
                          2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:0f:82:79:91:00:0d:c1:3d:40:fa:cc:0b:e7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Oct 19 14:01:02 2025 GMT
            Not After : Oct 20 14:01:02 2025 GMT
        Subject: CN=d1f994974eaece7b0367bfa032e282bd6b2fbd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:a9:13:9a:4d:fb:67:cc:2c:ff:f0:2a:87:
                    db:17:6e:7a:be:42:ca:b3:96:08:67:87:4e:3d:03:
                    6a:30:48:aa:4e:ff:77:98:1b:96:13:26:d5:81:35:
                    81:47:e1:1a:46:28:fb:cd:83:34:11:3a:85:22:ea:
                    63:bc:bc:83:5b:89:0c:a9:0c:f0:90:7c:d5:d7:27:
                    2b:4a:fc:19:71:9b:17:ea:2f:7d:8e:25:fc:41:c9:
                    8e:9b:d7:ca:41:05:45:ab:8f:9a:e7:1b:99:fb:72:
                    32:57:1c:7b:20:75:0d:58:fa:dc:9b:61:57:6a:88:
                    39:f0:2b:a3:b4:03:d2:e9:cc:10:46:79:b4:5e:6d:
                    12:56:f1:97:1e:ea:a3:ca:cc:ae:1a:a1:37:98:17:
                    25:8e:5c:22:d3:11:a8:00:c0:b2:99:66:4f:1d:ff:
                    eb:17:5a:7b:8a:eb:99:98:ce:79:fd:f6:06:98:89:
                    07:6d:94:98:f2:e0:22:f0:1d:f0:04:a4:4c:a9:d5:
                    08:eb:68:c6:89:8f:18:56:ed:8a:18:4d:a2:3f:4f:
                    9e:18:32:cf:15:e8:57:4c:d4:bd:99:f1:29:e9:92:
                    36:aa:ef:ef:2b:d1:bd:ad:66:9c:63:c6:41:c9:a8:
                    f9:f3:d1:93:86:b4:28:44:bd:b0:99:01:13:e8:2c:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:94:97:4E:AE:CE:7B:03:67:BF:A0:32:E2:82:BD:6B:2F:BD:29
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:7d:8e:09:d1:05:f6:b0:87:a2:e7:c8:b7:a9:8f:8f:70:
         45:f6:4b:b7:57:da:3c:0b:56:a6:1a:9a:e2:30:81:6b:2e:b1:
         ce:5a:9b:b2:66:6e:cf:d4:b7:df:42:a6:19:0e:f4:53:bf:2e:
         2b:53:8e:b1:49:13:57:76:19:05:ee:73:d6:9a:1b:53:f7:53:
         32:49:c6:a2:37:2e:9e:45:31:ec:88:6a:dc:04:5f:9b:7f:08:
         8c:11:be:ea:92:53:ff:b2:4c:1b:1c:f8:1c:95:ed:b8:d2:33:
         80:3e:21:0a:7c:36:21:37:91:94:31:7f:c7:7e:f2:1c:38:5e:
         9a:09:19:e6:db:7e:8a:e0:b4:1c:56:78:fb:be:d0:42:8d:e8:
         3f:02:d8:3c:12:c6:53:5e:db:0c:dc:29:43:f1:72:05:45:9b:
         c6:2f:db:c1:44:9b:5f:6a:35:15:5a:37:8b:5a:4e:11:87:0f:
         93:74:e6:b6:5c:9a:58:dc:9f:b5:2c:23:4c:b6:82:e6:18:92:
         c9:48:59:db:0d:a2:24:66:b2:83:61:92:6b:63:08:c6:33:92:
         df:ec:f2:26:20:df:e0:77:c3:d1:1e:e1:b9:0a:5e:71:11:d1:
         97:b0:11:37:42:ae:1a:5c:1f:af:57:87:09:c4:96:97:5b:91:
         6b:ae:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:27 2025 by rpki-client