Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File:                     ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier:          bBoewPZm9xjFNB5fop+sDZI6WBC+eUejiX/SZrJfwlU=
Subject key identifier:   C1:1A:06:35:4E:FB:EA:F3:91:9C:AF:93:9C:A8:09:A1:B4:54:F1:A7
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer:       /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial:       0199FE106170FA4A5A9ECC88C7009C2D6BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number:          16FC
Signing time:             Sun 19 Oct 2025 20:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:50 +0000
Files and hashes:         1: 2G_wfY-wtHrrh5fIlt2oTgfjyRk.roa (hash: Z3ThrbWDvPG2omkuECARA3Z0eG/8QMV8+rwPhMcjF+s=)
                          2: EnEl3j-w99KIdI5ENTznDqsZ0QU.roa (hash: 0+nihLinw/HlHretYAxdAaVQ3wWi8vaKXQiqmIpaJxw=)
                          3: XcxcS9ldQu6VQrsTPyt-_lfXPao.roa (hash: 2Sl1d/YMvIvosyAajy76CYNHHCqrobuGrcDX5gv9Jos=)
                          4: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: W63iVnRLJ/2dprwfy78LbQ9fATMsLmnx8JWiWeo2T+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:61:70:fa:4a:5a:9e:cc:88:c7:00:9c:2d:6b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
        Validity
            Not Before: Oct 19 20:01:50 2025 GMT
            Not After : Oct 20 20:01:50 2025 GMT
        Subject: CN=c11a06354efbeaf3919caf939ca809a1b454f1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:76:bb:e4:40:fb:20:b0:01:d3:dd:b3:0e:
                    3e:49:04:ac:2c:7f:4f:3e:ba:23:d3:a8:cd:bd:47:
                    04:c0:63:ec:60:d6:a8:81:3d:9f:20:5a:f3:27:e1:
                    12:61:e5:d3:b1:55:f1:56:c1:a6:ed:cf:dd:64:bc:
                    db:7f:00:10:b4:0b:e5:3c:86:e0:1d:f7:ec:97:9c:
                    f1:fb:e9:70:ef:cb:02:70:54:ca:c2:82:0d:2b:a2:
                    45:6e:ae:3e:b2:f0:25:62:85:6f:5a:9b:82:55:a2:
                    20:fe:e4:00:e2:16:a3:e4:a9:22:4e:ce:d5:66:dd:
                    c9:f6:29:b4:1a:12:19:bf:8a:ce:f6:dc:11:89:f2:
                    3e:ec:82:b1:cc:9e:cc:0c:01:c7:2c:97:9f:4d:2d:
                    73:dd:6a:03:90:1e:a7:a8:72:b9:f6:0b:d0:3f:9a:
                    ba:7a:81:7c:c0:d6:2f:28:a0:eb:ca:1e:64:6b:66:
                    4a:03:2f:1e:74:b1:21:74:68:77:5c:31:76:2f:ca:
                    33:44:28:f9:a6:63:31:cf:df:b0:5b:ac:70:07:1a:
                    08:ab:39:3e:e0:cb:ed:26:da:0e:2b:18:96:81:3c:
                    ef:7c:a1:ab:7f:12:2e:da:3a:45:a1:fd:b6:2b:92:
                    e5:e6:a7:d1:20:e2:4c:85:be:10:a2:05:37:0e:42:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:06:35:4E:FB:EA:F3:91:9C:AF:93:9C:A8:09:A1:B4:54:F1:A7
            X509v3 Authority Key Identifier:
                keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:d9:a6:71:22:67:ad:3e:fa:87:3e:b4:dc:18:f1:96:da:
         8a:33:0c:ac:e7:bb:18:d6:43:59:86:32:9f:f2:40:8b:03:3a:
         68:ba:5a:43:70:a6:e1:0a:55:8b:96:dc:e8:57:12:fd:89:ef:
         8e:76:1f:6a:3c:06:48:f6:2e:38:8a:f2:bc:da:6d:2f:49:0e:
         8e:86:ff:4f:c5:e1:26:a7:d6:b4:f1:d7:dd:a6:5c:d8:df:2d:
         d2:46:e3:22:b7:af:69:83:57:03:2a:84:e2:2d:b4:0a:a6:7a:
         7f:43:57:b8:82:8c:df:e9:dd:ab:b5:ad:1b:c3:ca:10:4b:bc:
         97:2a:dc:c3:c3:f9:3f:ac:a0:fc:c3:b3:f3:bd:46:23:b4:bb:
         37:91:1b:da:fd:37:9f:dc:d0:57:6b:d2:0b:f2:b8:aa:15:f5:
         64:26:e1:c0:ae:ee:9d:9d:51:12:bc:a8:f0:4e:c7:76:d5:d3:
         b5:41:ef:1d:f9:c7:22:8a:2e:1f:10:3d:72:c5:ac:9a:2f:dc:
         f6:39:ec:32:dc:ee:cf:d4:bd:c1:e3:68:2b:f6:01:d5:66:78:
         b6:2e:aa:94:42:2c:7b:84:a1:0e:23:f3:0b:f6:ed:96:39:ec:
         ee:9d:22:60:42:e4:23:38:a3:6a:93:27:08:fb:ac:21:a1:a6:
         14:f3:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:11 2025 by rpki-client