Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File:                     pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier:          dGRQXFQ2hnsm1kykNtE6hYvHnFGZ2IGRFRb/6wgOEDg=
Subject key identifier:   01:90:03:7D:90:07:6D:5B:39:BB:C0:CC:9F:97:C6:39:D8:CB:A3:5E
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer:       /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial:       0199FF59545B1EAB92775C8B70F820A369C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 02:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:08 +0000
Files and hashes:         1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
                          2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: vREkTjgiZUktHvHDWA2zQyfddP8PbWF1SU7EGL4dvYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:54:5b:1e:ab:92:77:5c:8b:70:f8:20:a3:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
        Validity
            Not Before: Oct 20 02:01:08 2025 GMT
            Not After : Oct 21 02:01:08 2025 GMT
        Subject: CN=0190037d90076d5b39bbc0cc9f97c639d8cba35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:c6:25:f0:fd:1c:5a:27:6b:68:a5:06:01:
                    4c:a1:82:31:06:7f:51:e1:f3:1a:de:8b:d2:8d:d1:
                    72:17:54:15:3d:39:17:e8:4a:77:83:a6:63:a3:4c:
                    0f:52:ca:f4:33:ae:df:b6:58:e6:8f:fd:d9:56:42:
                    66:7f:68:29:ac:fe:4f:75:71:0c:a7:5f:9d:ad:60:
                    88:34:65:c7:0f:89:5b:6f:56:88:5e:f7:fe:b6:f9:
                    b0:c0:f5:16:2e:0b:a3:28:0e:b2:fa:e3:ae:6a:c0:
                    c5:da:b4:bd:99:85:54:6d:4b:63:f1:af:c8:e4:ee:
                    1c:db:ac:85:33:2a:60:18:c4:de:73:8b:04:48:c0:
                    07:89:e4:e1:c1:45:0b:b4:12:83:90:9e:e3:97:a8:
                    47:7a:fb:04:5c:68:a1:af:16:d2:80:10:27:e9:bb:
                    16:40:5a:c2:0b:67:7c:6a:b5:66:55:bd:01:88:39:
                    41:9c:74:16:a5:fc:f5:22:29:4b:3c:0f:80:43:12:
                    e4:b1:3f:93:16:33:46:3b:51:d2:bd:93:fe:5c:6f:
                    4f:f5:57:5f:4a:1b:9a:68:17:c6:61:27:df:31:a7:
                    77:40:e8:ce:17:31:75:f6:a2:89:d0:59:b2:74:93:
                    5b:a9:61:50:25:57:77:19:67:04:71:b6:ea:5c:31:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:03:7D:90:07:6D:5B:39:BB:C0:CC:9F:97:C6:39:D8:CB:A3:5E
            X509v3 Authority Key Identifier:
                keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:8d:fa:2e:70:49:1d:18:57:b0:6a:3c:7f:9c:00:c9:d2:cd:
         31:76:d4:82:a1:52:2e:8c:28:5c:3f:22:ab:f7:b4:de:95:03:
         54:b4:6e:0f:34:f3:96:ea:0f:cc:74:0d:ca:e8:5c:30:39:bc:
         b2:71:6f:d6:e0:97:4c:81:aa:67:f4:66:b3:ed:06:a2:0e:90:
         5f:5c:02:85:d7:bd:4c:25:bf:5a:2f:10:72:08:f3:04:06:c6:
         af:09:9e:04:40:29:87:dc:d0:cd:85:02:6c:31:f8:1e:9e:19:
         1a:30:ca:3a:37:93:74:2c:32:2c:23:64:8c:95:dd:2e:34:5e:
         42:80:e8:d8:7e:98:6e:f5:2d:3f:40:00:28:df:21:6f:90:04:
         45:08:7c:be:3e:62:a2:86:36:24:0e:e4:29:d9:5c:bb:29:5e:
         40:a6:a2:ce:f2:37:a6:2e:45:32:45:58:62:72:71:e6:69:40:
         46:c5:f7:50:16:63:bc:46:3f:5b:55:6a:d1:46:00:ea:8a:28:
         29:bd:e3:23:df:2f:cf:2b:7d:20:38:e3:31:08:f9:22:7c:69:
         ce:d3:56:2f:48:97:6b:04:e8:03:1a:ea:ea:2b:34:fb:d3:c2:
         c8:33:a0:ff:d2:d5:ed:9c:4d:55:52:cb:28:e0:b5:ab:50:a6:
         d3:78:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:08 2025 by rpki-client