Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
File:                     cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft (raw, json)
Hash identifier:          v1yyhHwfxhRlDMMhyU2sYyQ0aT9KEOehwmbkemL34UY=
Subject key identifier:   E3:F0:96:97:95:41:03:8E:09:6C:89:98:1C:8E:9E:06:85:6C:21:9A
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Certificate issuer:       /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial:       019A00350F5DA78EDF85B955EE7EFD206CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
Manifest number:          16EF
Signing time:             Mon 20 Oct 2025 06:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:08 +0000
Files and hashes:         1: 0A3eCrBh6zPFdv4NnTG-Oyjc7lI.roa (hash: Hpqtml2zx5yO1KtzPny+alx7D2TcQ3WX0ZxI8Mvqcow=)
                          2: 1-JbKVgC2zlrxckVHgIVlicdCoxQ.roa (hash: 3pR+BLofcLce+i07bAe+gODFuY9E/BGeWToEN758yac=)
                          3: AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa (hash: A+hTsbyaE6tTKJYIPPdu0Kx30wfj2E6e3KM/UOa3qeI=)
                          4: EQ2SVjg073b9AiDrcF41Lqz1kTU.roa (hash: JSyAOtzeo1nrBmHRc4GeDkPp+IU8dU0x0XVp4QG7ovY=)
                          5: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl (hash: I1VZ/JtxDWCJz4hts3nzJvei0fzZ7EnpsTvPxvu3s5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:0f:5d:a7:8e:df:85:b9:55:ee:7e:fd:20:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
        Validity
            Not Before: Oct 20 06:01:08 2025 GMT
            Not After : Oct 21 06:01:08 2025 GMT
        Subject: CN=e3f096979541038e096c89981c8e9e06856c219a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:03:74:3f:56:94:3a:3f:20:d9:bb:35:9a:
                    07:c2:c8:a7:10:09:ed:5a:2e:0d:86:91:49:b9:e0:
                    ac:cc:e3:69:b0:c3:16:b9:20:78:c5:60:a7:ba:00:
                    99:5a:6c:20:ec:3a:02:5c:09:ab:b5:b5:9f:f5:68:
                    26:85:b6:e1:56:30:eb:bf:21:3d:eb:99:2e:a6:5b:
                    ab:7c:4f:6b:0a:e9:5c:b1:0b:da:5f:d0:e8:11:0e:
                    96:68:65:52:57:c0:28:4d:5a:1e:1b:29:f2:f3:1b:
                    5e:e2:21:04:7f:27:28:ea:15:15:c4:0e:5a:54:c6:
                    c3:eb:56:92:51:ab:b8:4e:47:d5:57:d9:c0:c2:ab:
                    db:57:16:2d:b8:0a:a9:2d:00:68:4f:40:c9:95:b9:
                    2d:8e:05:7c:9b:2d:c3:ed:0c:f8:56:13:e1:b0:12:
                    be:7b:32:7d:dc:16:1e:1d:3e:0e:96:f9:82:12:d3:
                    a1:87:bb:35:48:34:29:55:c5:ff:b2:0d:ad:f5:44:
                    42:fc:ec:3c:98:eb:8d:e5:eb:a7:cb:96:f4:72:e5:
                    5b:e9:b0:3d:2f:af:2c:0f:da:23:5b:2c:09:f2:60:
                    32:4a:f0:1b:16:8b:65:46:c3:54:f1:7e:e6:17:cb:
                    88:b2:5e:55:d6:10:fb:02:ad:96:08:6a:5d:98:10:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:96:97:95:41:03:8E:09:6C:89:98:1C:8E:9E:06:85:6C:21:9A
            X509v3 Authority Key Identifier:
                keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fc:9f:61:46:cf:80:25:a4:56:1c:8a:fd:da:5d:f0:28:4b:
         b2:54:69:95:98:a6:ee:71:83:55:b3:05:9b:2a:50:6f:2d:e1:
         69:2b:f2:29:f1:90:e2:89:08:ed:69:40:0f:3e:2d:dc:15:a9:
         50:ed:ea:e5:b4:3e:b6:f1:67:7f:d3:40:e4:80:9c:34:f8:2b:
         d7:47:89:9a:f6:15:48:af:26:5a:c4:a7:92:28:91:f3:74:b3:
         4a:3f:c0:c8:1b:2b:0b:55:64:b1:46:59:3d:3f:9b:23:76:50:
         b4:f4:46:2b:b5:2d:bb:dc:70:64:ae:d7:51:6c:ce:54:8b:eb:
         61:c8:68:d0:db:c9:93:c3:4e:81:89:9e:8c:04:0f:ee:c2:48:
         6e:bf:d4:2f:9c:8b:f2:c5:44:c9:61:57:c4:11:3d:a6:1c:b8:
         93:aa:27:c0:3b:d7:37:8e:e2:64:b1:ee:42:f5:9f:6f:99:80:
         6c:75:aa:10:d0:c0:56:7a:50:da:38:25:15:f6:bb:ce:e3:ab:
         9a:1b:92:0f:5b:8b:d9:b6:04:72:09:de:57:f8:1a:86:8e:ed:
         75:8c:3b:1b:ee:5f:cc:1d:bd:6a:22:cc:81:b1:ae:ed:e4:bf:
         26:91:a1:22:96:3a:49:8e:40:a6:54:c8:54:d1:35:07:bd:8f:
         c0:89:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:15 2025 by rpki-client