Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File:                     xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier:          37zuRXZWCABIxR55Tn8IUrVxlR7saYtIoLsVf6VY9YI=
Subject key identifier:   1C:47:9D:FF:0F:FA:38:BD:6C:CF:81:D8:73:26:6E:D6:BC:49:12:61
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       0199FDD9EB259A7BA81680AA548372B705B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number:          16F2
Signing time:             Sun 19 Oct 2025 19:02:21 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:21 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:21 +0000
Files and hashes:         1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=)
                          2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=)
                          3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=)
                          4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=)
                          5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=)
                          6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=)
                          7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=)
                          8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=)
                          9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: IyZV2ZNEv+cEIP+earm74NDLIWK6hI3+omG2strmB0A=)
                          10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:eb:25:9a:7b:a8:16:80:aa:54:83:72:b7:05:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Oct 19 19:02:21 2025 GMT
            Not After : Oct 20 19:02:21 2025 GMT
        Subject: CN=1c479dff0ffa38bd6ccf81d873266ed6bc491261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:de:9c:a2:62:1c:e0:57:fa:ed:1d:a4:b5:a2:
                    83:23:8a:55:59:41:30:be:a5:e8:52:bf:bc:fa:b3:
                    64:1e:f6:1a:b0:89:12:e8:fe:f2:be:b5:7a:31:3c:
                    e1:0e:5e:03:57:68:db:54:59:8d:98:ee:8b:c3:b3:
                    0c:bf:e6:46:29:a5:ef:3a:ff:36:5c:90:c5:1b:dd:
                    8f:03:7d:6b:67:59:c1:8a:a0:9a:35:af:ab:53:09:
                    37:8b:95:db:80:9f:02:c0:2c:fc:dd:5d:d1:a1:5e:
                    a5:1e:bc:42:14:c1:4f:54:83:cd:03:bb:27:c3:9a:
                    ae:6d:3f:cf:7e:10:9e:5d:aa:b2:8f:4f:10:7b:14:
                    5e:91:6a:a2:41:54:00:71:c9:28:e5:02:3a:cf:20:
                    06:c8:8f:c6:3c:36:94:e6:43:9c:ba:88:0d:c4:eb:
                    b8:d9:cf:f0:87:67:41:dc:5e:5c:6b:8f:9e:2c:25:
                    82:9b:77:e5:32:b0:59:d3:ab:b4:45:14:47:1e:a6:
                    7a:8b:8c:fa:b0:41:01:d9:87:70:a2:c4:25:b0:79:
                    9b:99:c1:89:1c:bb:6f:60:cc:a3:17:09:58:28:a6:
                    c8:d2:48:9e:3f:6d:df:ed:01:ce:38:08:52:b8:6d:
                    40:d7:90:fb:45:9e:cf:f6:2f:28:ef:a4:5a:6a:5f:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:9D:FF:0F:FA:38:BD:6C:CF:81:D8:73:26:6E:D6:BC:49:12:61
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:08:b5:18:4e:c6:dc:01:e9:06:64:fb:87:70:ca:3b:df:
         36:31:80:72:0f:f0:52:cd:f2:e6:f2:0a:3e:b1:45:78:9d:ce:
         4d:7e:4f:84:e8:5b:88:d3:84:5b:ff:97:49:ee:90:6d:e7:cf:
         f0:00:c6:3e:0a:ef:e7:ee:a3:a8:b1:5a:97:58:57:c8:f4:cb:
         9b:4f:35:1e:3e:8d:37:31:47:ea:45:5e:93:78:09:f0:b2:9e:
         29:97:7f:cb:66:71:39:c9:73:72:00:ca:eb:dd:9d:d0:ec:93:
         61:46:92:88:5a:90:9f:a6:f2:07:5d:86:fe:db:f2:62:2e:d1:
         e8:37:08:ca:35:bf:b3:a0:dc:0b:73:0f:79:7d:0f:a6:ea:e8:
         b6:a3:79:80:52:55:b9:70:0c:4f:1b:6e:86:19:8c:56:e6:4a:
         57:9a:7c:e0:ec:76:5f:59:0b:ca:1b:a7:f9:b8:42:fc:99:3c:
         e2:20:94:83:04:67:07:a0:c7:20:0c:03:9f:b2:83:91:06:98:
         80:5b:44:0b:7f:14:94:bf:34:28:2c:fd:f3:d3:ea:26:f0:e5:
         23:c9:15:f9:b4:ba:22:8a:2b:60:1b:5c:00:01:5a:a1:41:af:
         0f:09:57:75:78:5a:6f:d1:22:46:25:a3:28:aa:06:4a:19:1b:
         61:45:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:40 2025 by rpki-client