Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          WYna5cVNB2SbvR5U1KBbCWEZWwLxt8Yo5E0Xezr4ep0=
Subject key identifier:   A1:7A:84:7C:86:BA:C1:15:9F:57:65:F2:F9:F6:B5:55:9A:83:FF:D8
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       0199FAD83D6FF27CA5F20483C9A1AC658B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 05:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:39 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: bK99l0MJUXmmWHVKHMWIbKdi+V5gO5j+Hc0MVAPPQtk=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:3d:6f:f2:7c:a5:f2:04:83:c9:a1:ac:65:8b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Oct 19 05:01:39 2025 GMT
            Not After : Oct 20 05:01:39 2025 GMT
        Subject: CN=a17a847c86bac1159f5765f2f9f6b5559a83ffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:37:e2:ec:c7:3e:bb:18:a9:68:92:de:bb:
                    b8:47:71:d4:3a:f9:49:78:b6:e3:d2:08:a1:81:42:
                    a1:c3:cd:9a:f8:c5:f5:9a:c1:75:53:4f:fb:98:3a:
                    6f:05:d6:6d:6f:74:24:58:83:16:59:4f:f8:0f:4e:
                    69:2d:4f:34:e9:b4:e2:5b:a8:f1:6d:39:04:8c:b8:
                    72:b3:2d:60:38:fd:82:65:eb:e2:bb:e8:b3:ba:a0:
                    7f:f9:1d:db:79:21:13:eb:45:bf:8c:d6:cd:d9:9f:
                    d0:d2:b0:e9:fa:3b:98:15:24:fc:19:65:46:ad:8b:
                    b6:c1:ca:20:13:74:4f:36:f5:09:9e:48:8c:5a:ff:
                    ea:de:63:3e:7b:12:32:eb:74:d4:4a:dc:26:02:37:
                    c9:51:e0:c0:2d:e8:9c:e4:53:81:f2:8f:06:c2:c2:
                    00:bb:3e:01:d6:7e:11:f9:37:f9:20:31:d9:23:2d:
                    52:9e:be:d6:16:ff:b8:25:88:72:eb:0e:3b:03:f1:
                    e7:1c:7c:32:fa:03:7c:e5:30:38:1a:3a:39:fc:a0:
                    53:f2:fe:86:cf:ae:7b:17:48:44:6f:e7:3f:c6:69:
                    b7:39:2f:53:71:a9:19:8b:75:0c:84:7c:fd:cd:4d:
                    68:91:9c:cd:f0:31:bd:e1:48:5a:78:00:2d:5e:c6:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7A:84:7C:86:BA:C1:15:9F:57:65:F2:F9:F6:B5:55:9A:83:FF:D8
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:39:05:74:e4:75:14:1d:97:e1:83:b5:c0:93:b4:f0:dd:
         61:d7:de:d6:d5:03:fe:e3:58:dc:f8:28:68:24:68:6c:9b:53:
         dc:91:df:c8:0b:cf:f9:a5:b9:60:88:e4:58:79:2f:dc:be:87:
         7a:a1:9e:6f:a6:21:72:9c:90:9c:df:70:46:a7:8c:ce:be:d3:
         e1:f8:c7:80:99:59:7e:87:95:14:ef:89:b4:58:4f:a5:54:c9:
         a8:58:15:d9:2a:0e:79:28:a5:63:b5:9a:ee:c3:d1:92:15:07:
         39:15:34:2c:af:f1:1b:a6:ba:07:5f:cd:7a:90:40:56:01:f0:
         85:29:64:c7:47:7d:5e:c5:7e:c8:5d:9e:b1:6d:47:c4:07:df:
         7f:61:67:59:fc:7e:cc:d3:3f:d9:4c:72:36:d6:12:aa:07:ca:
         5d:4f:5d:d3:24:e0:27:ae:da:ed:8c:5e:9b:e1:7b:0a:9b:9c:
         ba:7e:0d:56:c9:67:e3:2c:91:e1:22:8e:96:99:d4:ee:16:28:
         ac:3f:2b:08:f1:5b:58:75:1b:1e:a3:28:a4:ac:b8:51:52:9a:
         1a:22:09:f8:68:7a:28:20:13:f3:42:e9:06:91:a1:7f:51:ff:
         ed:57:2b:01:fc:4d:fa:c7:cb:65:c7:7d:72:88:f0:ae:b8:46:
         f5:73:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client