Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          feV7bdalVEWp/taBqVlBmysOuVTNC2uRbNF5aUQbJ7Y=
Subject key identifier:   63:02:CF:B7:2D:ED:45:47:94:3F:A4:64:9B:03:01:F1:F1:90:FB:A2
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       0199FC2143982AF29B2E8ACAD2A69AF375C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 11:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:02 +0000
Files and hashes:         1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=)
                          2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
                          3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: O9tSeJLlk9dneyDvN9qkHCW/CFFo7qi5wUpfWeL5tt8=)
                          4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=)
                          5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=)
                          6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=)
                          7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=)
                          8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=)
                          9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=)
                          10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:43:98:2a:f2:9b:2e:8a:ca:d2:a6:9a:f3:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Oct 19 11:01:02 2025 GMT
            Not After : Oct 20 11:01:02 2025 GMT
        Subject: CN=6302cfb72ded4547943fa4649b0301f1f190fba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:a7:84:b1:14:19:13:03:42:d1:2e:c2:0e:
                    5a:3a:4a:4f:c3:36:3a:a6:ba:5e:72:14:76:eb:9b:
                    28:a4:0f:c4:7d:80:26:e1:83:4e:d2:71:f4:61:9f:
                    5d:01:01:d7:95:c9:d0:08:87:b5:ab:dc:d6:98:9f:
                    1f:ac:81:5f:6e:d5:7b:97:2e:78:f2:27:68:3f:01:
                    2e:90:45:b5:79:a9:ea:09:a8:46:a9:78:a1:0d:78:
                    91:8a:ce:fe:a8:eb:19:08:d6:4a:78:90:2e:92:20:
                    be:6f:95:37:07:ec:fd:88:e9:a7:3b:0f:eb:a2:0b:
                    26:0d:66:0c:6e:d3:c9:ff:4e:29:4f:39:51:5d:f0:
                    fc:1e:2d:23:f8:77:b4:b1:28:e4:b8:8c:e8:94:88:
                    48:22:4c:00:2f:1c:20:db:e8:6f:7b:82:89:f5:16:
                    6d:0b:37:fb:4a:08:2b:3f:8e:6f:25:8a:31:54:28:
                    47:00:8b:df:f6:3b:2d:ff:1c:6c:4f:aa:41:3b:4e:
                    1e:c3:1f:4c:e8:ff:e9:d8:c3:f8:34:66:8d:f7:75:
                    31:f8:06:91:5d:72:d2:5a:12:15:fb:c1:12:fc:5d:
                    3d:88:16:bc:f2:0b:a3:51:16:93:07:bd:f3:16:cb:
                    b1:4f:d0:29:c7:8e:5a:47:b6:1d:68:f0:ca:66:a7:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:CF:B7:2D:ED:45:47:94:3F:A4:64:9B:03:01:F1:F1:90:FB:A2
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:b8:07:a1:12:90:e6:38:3c:d9:a8:47:35:09:c2:c7:63:
         bd:53:eb:fc:23:9f:ee:18:89:24:69:7e:05:3f:7d:6d:b6:33:
         4b:6c:28:33:ad:5b:b3:96:a8:00:8e:a3:16:59:c8:97:c3:24:
         be:78:70:b0:65:34:e6:3e:53:1e:bb:b7:d0:51:8f:4c:f4:e1:
         8e:26:14:3d:f6:81:33:27:76:d5:83:2d:be:a4:d2:7d:11:4e:
         98:44:22:7e:55:29:97:02:74:3a:03:df:26:39:37:1d:2a:4e:
         9e:c3:22:6c:84:99:18:be:a3:f6:15:93:9d:2a:c0:7f:50:a7:
         bb:ff:7e:5d:05:73:b6:64:31:58:42:fd:ac:66:18:e8:24:39:
         e1:d8:3e:13:af:e9:72:2e:b4:7f:7c:44:88:3a:2f:35:bf:e6:
         0e:07:d3:86:e0:dc:94:e3:18:2f:81:d7:ed:18:06:1d:be:7b:
         43:d0:da:1b:e6:48:eb:be:2c:e6:a9:d8:a5:18:e3:e1:53:03:
         a2:ab:34:86:78:2d:4b:f4:19:a9:19:d0:59:26:1f:2e:5b:82:
         17:ef:80:1a:0c:9e:98:e8:3d:3e:cd:ad:ed:72:75:f6:72:d7:
         23:84:0e:87:1a:48:d9:54:24:e2:d0:93:97:84:42:c5:27:c6:
         e9:56:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:12 2025 by rpki-client