Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          u4si4H1Xl51po5e49FfKrsvrRkVlGysKSczrJ2GPbr0=
Subject key identifier:   C9:C2:D7:DE:95:62:0B:1B:DF:03:30:44:41:AC:33:C2:24:A2:0A:56
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       0199FD6AF466CDB59528DC24F9037FD713AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 17:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:08 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: BaoqeIuNd2XJrlRQwDEfruDyu+5EW5PZz2aznKczKsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:f4:66:cd:b5:95:28:dc:24:f9:03:7f:d7:13:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Oct 19 17:01:08 2025 GMT
            Not After : Oct 20 17:01:08 2025 GMT
        Subject: CN=c9c2d7de95620b1bdf03304441ac33c224a20a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:1f:4f:b4:47:e3:18:f7:35:01:8f:c3:5c:
                    6c:11:72:ff:bf:3b:7e:a3:ce:ef:85:3a:02:15:07:
                    32:df:84:f7:ff:84:22:5f:0c:a2:9a:c5:b7:71:a6:
                    f6:02:38:99:fc:7b:1c:9e:7d:d8:c6:4a:7b:09:45:
                    7e:19:bd:b5:95:d8:9f:54:2c:53:d1:b0:76:97:00:
                    c8:d1:27:6d:5a:ed:d8:17:59:9d:ec:1e:8f:41:33:
                    63:42:9a:ca:87:7a:7b:f4:de:7b:65:ed:cb:73:82:
                    02:83:0e:67:96:a9:6b:84:ef:71:fd:7a:95:10:bb:
                    fc:99:70:25:2d:03:36:8f:2b:87:74:07:44:b7:0e:
                    a9:8b:75:7f:ef:a9:8f:5c:f4:2e:09:d6:02:fb:b0:
                    3d:03:a1:4e:9c:b9:c0:35:38:c3:bc:a1:2e:b1:4f:
                    d0:2e:59:87:22:ed:2e:aa:ea:06:80:41:06:75:b6:
                    57:54:7d:d0:ab:f9:93:1e:3b:2d:0f:9f:39:01:4d:
                    eb:1f:bb:a1:7d:df:0e:8f:fc:ae:2b:0d:8c:77:8d:
                    29:a5:7b:72:0b:4b:fa:cc:d3:7a:88:0a:78:f9:bf:
                    7f:b1:69:db:d2:42:41:58:98:2a:a2:24:18:e7:c0:
                    74:ad:96:27:52:f1:f2:92:33:75:31:5f:43:80:9f:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:D7:DE:95:62:0B:1B:DF:03:30:44:41:AC:33:C2:24:A2:0A:56
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:15:aa:9f:cf:8f:59:c2:0d:89:2e:f8:da:58:9b:25:be:7f:
         10:d4:68:d5:ba:db:6e:9c:ab:6d:a3:a9:cc:9b:7b:af:12:1c:
         b0:ac:df:4c:f0:2c:a5:59:1d:99:e1:57:89:8f:24:cb:a3:04:
         55:17:39:d6:e2:85:31:57:31:2c:1a:4d:f4:fb:04:d7:f7:97:
         c2:b3:6d:a9:9c:ce:92:d8:85:09:0f:46:ed:60:9e:38:14:6e:
         e3:21:47:b1:ae:10:7f:74:31:6a:d8:41:2e:41:06:4a:a1:69:
         7e:68:e4:29:c5:b2:89:17:b5:97:3d:93:3e:49:3b:b5:69:cb:
         1a:53:3d:1b:c5:03:36:7f:0b:68:86:57:12:f0:c8:71:c4:a8:
         5e:91:5e:67:6d:de:1a:2f:b9:c0:3a:43:1c:df:bd:92:de:db:
         83:c0:0a:b9:ed:80:a4:27:ab:85:3b:7e:a9:c0:dc:ad:6d:24:
         ff:19:79:2f:2e:15:b9:ad:0f:a1:64:e2:0e:39:03:c8:6d:a3:
         97:2e:7f:aa:16:f7:d6:c9:b6:00:4e:5d:c3:ea:80:7f:50:f4:
         b2:d8:b3:49:71:43:b8:80:41:49:3c:e8:df:e0:5f:5d:1c:93:
         44:85:19:c2:1e:77:73:c8:f0:2f:1c:4e:d0:66:9b:80:2f:19:
         6a:11:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:28 2025 by rpki-client