Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          DLGOJNSGcMRHv4sjgjiMY4ghu/UkbTRAARgGUII1q6Q=
Subject key identifier:   88:1F:AA:24:2D:56:BA:9C:AA:86:01:63:0E:4B:E2:96:0F:54:8A:CA
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       0199FB0EBE1F6066CABF7939B473EE4424D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 06:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:11 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: jOB7SFs50d43NlDuM5gwPLRcI+Cnskg6CZpUipcUDE4=)
                          2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:be:1f:60:66:ca:bf:79:39:b4:73:ee:44:24:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Oct 19 06:01:11 2025 GMT
            Not After : Oct 20 06:01:11 2025 GMT
        Subject: CN=881faa242d56ba9caa8601630e4be2960f548aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:2e:6e:d7:b0:c5:33:75:07:27:3d:ab:96:
                    3c:77:69:84:1a:05:36:12:76:5d:ac:47:0a:05:40:
                    22:8c:39:62:14:7a:dd:d8:23:f9:0c:92:bf:86:fe:
                    e5:0c:56:f2:8e:6d:4b:2c:15:b1:82:1e:59:a5:ce:
                    f6:07:18:6c:2d:37:bf:87:af:8e:26:1d:de:70:9c:
                    db:ed:48:15:0c:e5:b9:c7:86:6e:36:a9:90:3f:1b:
                    aa:cb:f0:b6:c5:8b:4b:d5:fa:11:00:22:82:51:15:
                    50:68:39:10:94:2e:4d:ba:4f:da:9e:b7:42:fa:69:
                    24:a7:f9:3c:f6:f4:73:d1:06:d3:2e:f7:14:f3:9c:
                    4f:e4:50:f7:8b:17:15:7e:c6:02:df:fd:ad:4d:39:
                    dd:43:f1:a3:6f:b7:8b:a1:4d:5c:7b:6b:cc:14:5e:
                    db:34:45:f4:65:bf:70:01:64:20:4d:bb:5f:f1:8d:
                    48:d3:3d:c3:13:60:db:b0:a8:20:4e:ad:bb:21:14:
                    6b:8c:c4:9e:ed:75:b8:fb:0a:47:f8:f9:a3:c7:43:
                    9a:16:91:93:37:64:dd:2f:e4:db:aa:35:47:eb:f3:
                    b6:07:b9:17:3e:87:d6:fb:e5:a1:2f:ca:61:24:c1:
                    91:f4:d0:33:7d:c1:43:b8:49:6b:5b:e2:d3:01:a1:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:AA:24:2D:56:BA:9C:AA:86:01:63:0E:4B:E2:96:0F:54:8A:CA
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:74:84:22:45:15:14:9e:4d:8b:28:54:cc:4b:a4:86:a4:
         ed:60:72:36:d1:da:38:0c:bc:88:92:9d:50:70:c7:e7:e1:f5:
         72:1e:47:7f:a3:42:66:c4:c8:45:cd:bb:6d:73:fb:be:83:4e:
         60:11:96:2a:c5:1e:14:e8:af:3a:e0:3a:29:b9:d9:52:d9:f9:
         7c:4a:d3:8a:41:cf:1e:92:52:81:44:86:c0:03:7c:59:78:86:
         b2:fe:65:df:ff:13:e6:4d:65:20:80:43:21:a9:9e:1f:0e:96:
         10:ce:9d:ac:0f:75:0f:6c:c6:f6:e7:4a:58:ec:a0:80:b1:9f:
         d5:45:e7:0a:e8:de:2c:5d:cf:e7:ab:a4:3b:48:56:1b:34:22:
         c6:f1:b9:25:d7:cc:96:ce:a6:be:64:50:f1:16:c7:45:77:6f:
         39:ba:67:38:ac:e7:97:3f:66:ef:90:24:94:c4:67:4a:a3:24:
         50:c2:de:9e:f1:7f:e8:0c:f7:d7:b8:5b:1f:1d:26:36:b6:a2:
         0d:ed:c3:36:68:b6:77:72:f9:7b:1d:cf:c9:7c:50:5a:03:ec:
         52:aa:0e:9f:d7:fc:86:4a:41:f0:4f:8f:5f:bf:6f:e7:c6:69:
         66:59:81:04:97:6e:2a:e6:af:74:10:e4:07:36:73:5f:30:99:
         35:a1:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:00 2025 by rpki-client