Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          WWnQkXrWB/UopeMtWxq+GfoiyhXfgG+FqhR4TJFjXm0=
Subject key identifier:   51:FB:52:71:D1:9B:8C:18:C0:28:FC:90:16:E3:11:40:0C:E6:EF:97
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       0199FC583E54A5CAA7F82DD1787AAF93DD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 12:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:05 +0000
Files and hashes:         1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: FDxnjZMy7Ej6GmM00mbJTDdICRVA9QfI1WkStgiZVhw=)
                          2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
                          3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:3e:54:a5:ca:a7:f8:2d:d1:78:7a:af:93:dd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Oct 19 12:01:05 2025 GMT
            Not After : Oct 20 12:01:05 2025 GMT
        Subject: CN=51fb5271d19b8c18c028fc9016e311400ce6ef97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:d4:f0:70:f9:0b:77:53:ec:d9:a1:45:27:
                    85:94:b6:0d:a4:30:af:72:d2:32:d6:99:be:64:62:
                    a9:9f:30:aa:9c:d4:88:96:8d:33:e2:c4:54:31:aa:
                    8a:2f:6a:ca:0f:48:44:77:aa:33:69:cd:d3:20:d7:
                    fd:92:cb:df:a6:7e:29:98:b8:a9:58:fd:9b:d9:f5:
                    68:d9:b9:6d:72:2b:f7:ee:75:1b:40:fc:1e:0f:eb:
                    a2:61:d9:27:6e:8a:d7:fc:56:0f:a9:f5:e5:b9:f2:
                    2f:43:48:27:bd:f3:c8:f1:70:05:a9:a4:c5:d9:92:
                    80:35:d4:32:28:81:d9:24:10:76:eb:06:08:7c:2a:
                    a7:1d:d2:bd:b1:e7:c9:0c:0e:8e:c8:a0:3a:3f:15:
                    8b:f3:b1:22:f3:19:3e:14:d5:8e:24:ee:55:10:33:
                    06:22:26:87:48:23:cc:d5:c1:dd:fd:36:13:21:7b:
                    3e:98:93:ca:04:cd:16:81:98:7c:b3:f0:f6:f5:43:
                    25:e6:23:8b:c9:01:d4:dd:7d:9d:2c:a2:42:f6:38:
                    c2:23:7d:fa:6c:82:16:25:9c:18:d4:10:82:a6:07:
                    67:2e:c4:24:9d:47:c7:aa:78:2a:04:78:e3:ef:03:
                    2c:3d:27:93:55:83:05:a0:94:81:57:11:83:0b:02:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FB:52:71:D1:9B:8C:18:C0:28:FC:90:16:E3:11:40:0C:E6:EF:97
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:eb:d9:d2:df:87:58:e1:37:4e:cf:d6:6a:3c:b8:b3:28:
         a9:50:83:11:dc:96:de:77:8b:21:fd:2f:a6:82:17:37:ce:de:
         8d:0f:a1:54:bb:25:be:4a:1e:c0:eb:41:c1:7d:35:dd:c2:db:
         99:02:ed:e6:95:f3:a5:02:77:3e:e7:6d:e3:c6:c8:2e:5a:30:
         e7:f5:bf:e7:2a:c4:f8:95:10:0f:10:9a:7d:cb:bf:52:0a:5d:
         83:b8:e0:91:8e:f1:7a:fb:41:9e:d0:bc:9b:f2:ac:a7:b5:82:
         14:e2:e6:ef:dc:e2:0e:78:34:56:f7:36:a4:a2:96:eb:17:3c:
         46:d2:dd:44:a6:11:ec:60:9c:db:c3:7f:f9:88:d8:40:5a:48:
         39:52:7f:d1:91:83:cd:0e:05:97:05:ad:93:13:fa:cd:48:09:
         51:c4:40:32:87:b8:33:8e:5d:ca:99:06:e1:f3:75:1e:70:10:
         e1:0b:65:f6:80:fa:ad:97:51:7a:f3:99:a2:9e:66:7c:3d:60:
         b2:4c:f0:ff:48:ec:eb:41:2e:5f:ec:01:b4:85:10:a5:70:aa:
         cb:3b:b3:13:5e:a7:cb:18:27:eb:fa:e9:c6:f8:76:b3:03:16:
         d6:ed:c9:74:ce:67:52:68:81:02:6a:b5:a1:9f:cf:90:16:50:
         3f:e8:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:33 2025 by rpki-client