Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          YKo0XwzRpVNWUbACrenOGwO5IxqEC5ltdUIbXkaS1Zg=
Subject key identifier:   31:9B:A2:9B:A4:DD:FE:D1:1F:77:D0:DB:BF:EE:97:94:AC:75:DD:2C
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       0199FC8F14A79BB3F29DE2F9F1D8E84ADD9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 13:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 13:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 13:00:59 +0000
Files and hashes:         1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
                          2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: aruwcQwRG64KrXoLemxihS6sA2DuGKznjHQw3KTVbeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:14:a7:9b:b3:f2:9d:e2:f9:f1:d8:e8:4a:dd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Oct 19 13:00:59 2025 GMT
            Not After : Oct 20 13:00:59 2025 GMT
        Subject: CN=319ba29ba4ddfed11f77d0dbbfee9794ac75dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:2f:d7:15:05:91:dc:dc:65:2a:8f:08:cc:
                    8c:0c:9e:73:d6:8f:a1:dd:e1:f8:81:b8:fb:72:30:
                    4f:bf:16:ce:ae:2e:c7:97:85:e8:ac:4c:86:01:42:
                    51:9f:ff:9b:99:6f:c4:94:e8:e1:f7:73:ca:49:8f:
                    98:b7:30:16:1d:90:9d:96:91:2f:25:2b:60:26:a6:
                    f4:61:d0:11:c4:b3:cc:c8:be:e3:52:16:99:8a:fd:
                    7c:94:16:16:ff:f4:15:93:c4:38:e2:9e:2d:c8:84:
                    56:f7:2a:dd:3f:74:11:fe:5d:aa:16:90:a5:69:be:
                    de:92:83:67:8d:a5:bb:28:83:97:36:a5:ed:6c:2e:
                    df:e7:c3:67:7b:2a:f2:d6:90:58:8b:8a:55:3a:55:
                    03:23:55:8b:a8:ca:11:54:4a:79:7e:b9:93:73:22:
                    23:d2:56:9e:d3:a4:22:11:cf:9c:c7:fd:8d:9c:0e:
                    dc:87:75:3a:db:8e:d6:65:38:58:5d:5b:b8:d4:2a:
                    93:63:11:01:29:7a:26:f6:4a:61:d9:50:63:75:58:
                    8d:51:75:6d:16:c8:7c:75:f8:9d:2e:ab:6e:c4:57:
                    86:60:8c:23:fe:9a:19:11:bb:9a:10:51:25:5d:cb:
                    1b:bf:8d:fb:6a:a5:f0:8a:7e:82:25:88:c9:fa:51:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9B:A2:9B:A4:DD:FE:D1:1F:77:D0:DB:BF:EE:97:94:AC:75:DD:2C
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:b9:88:58:68:50:4a:81:77:2b:f4:e7:40:dd:8b:9e:cc:
         22:9c:de:cf:26:47:c5:08:eb:42:e0:06:4f:db:4f:6b:fb:65:
         65:dd:6d:92:68:27:29:f6:72:2b:92:04:30:1c:ce:36:ee:18:
         48:ee:25:9e:f3:1c:52:6b:e4:0b:ad:df:49:37:da:aa:db:d3:
         b6:83:bf:64:58:75:bc:3d:f2:1d:d5:94:85:e3:e8:a0:b4:8a:
         27:b2:8d:70:58:6b:e6:ea:98:5f:96:ac:92:c5:63:49:f9:bb:
         16:46:28:52:fc:2f:ae:c1:c3:99:b5:ed:d5:21:0b:81:2b:c0:
         40:25:e7:55:c2:55:f0:0e:72:65:4a:7a:f8:83:7e:d8:c9:21:
         3f:72:cb:a5:1e:74:da:7f:a9:4e:94:e5:0d:51:9e:38:3a:09:
         70:93:c6:b8:74:52:db:67:a3:54:4b:80:9c:0a:97:d6:42:f1:
         6a:ef:ac:6b:8d:3c:01:69:dc:22:fb:d1:32:f9:86:5c:07:d3:
         b7:d1:5d:30:b7:5b:e9:a0:f2:9f:df:42:e1:22:d2:73:60:c9:
         00:da:a6:72:98:83:49:00:e3:24:c6:a6:b3:7f:9a:d4:45:6e:
         fb:7d:4e:7a:12:c4:60:e8:4b:5f:dc:18:aa:b3:12:c6:a2:1a:
         2c:b1:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:00 2025 by rpki-client