Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          sOAt4gr8iI+jS5ai3CzX3HEJEYKha5R3Cgtt0auF0Ek=
Subject key identifier:   64:96:21:A8:1B:27:8A:52:EE:C4:B2:6C:89:03:17:B1:4B:F2:45:49
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       019A006C3BB6A16DDF8CFF8D77EB281716E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          16E8
Signing time:             Mon 20 Oct 2025 07:01:24 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:24 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:24 +0000
Files and hashes:         1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
                          2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
                          3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
                          4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
                          5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: WJBHEn/aXfZH8lrn5MMxfcTVOt79tdbrydLddhG7nqI=)
                          6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
                          7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
                          8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:3b:b6:a1:6d:df:8c:ff:8d:77:eb:28:17:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Oct 20 07:01:24 2025 GMT
            Not After : Oct 21 07:01:24 2025 GMT
        Subject: CN=649621a81b278a52eec4b26c890317b14bf24549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:8b:19:df:ef:fc:2d:4c:2d:23:50:7b:74:
                    27:24:31:38:45:17:2b:bd:5d:52:89:0c:0a:6c:8c:
                    1a:b0:11:a1:bf:90:d3:d7:19:9c:3a:ad:89:a8:64:
                    9a:31:9e:b6:9a:61:32:9b:71:77:5d:2f:ce:28:6a:
                    7b:9f:70:07:74:6a:70:ca:c1:7f:bc:21:dc:97:ad:
                    54:3f:cf:51:a4:d0:b7:89:c0:86:85:e6:37:3a:01:
                    99:16:30:6b:9f:be:0a:40:c0:2d:43:06:dc:fd:17:
                    22:b3:0e:b7:73:4c:8e:be:c1:64:28:e9:23:17:0c:
                    c6:b2:5d:33:ae:11:4d:75:85:51:9e:19:6f:6b:76:
                    a8:e3:30:0c:df:9f:1f:cf:57:f5:bc:65:15:01:88:
                    c3:b8:fd:df:ad:b8:ec:4e:82:ac:1a:c6:42:13:0f:
                    02:80:e9:91:f5:89:2d:bb:60:63:f5:70:4f:cc:ca:
                    70:2a:10:4f:e9:37:c2:24:61:5a:5f:e1:34:e2:e7:
                    b8:8c:14:77:c7:72:b3:27:19:13:1a:3f:9b:c4:1b:
                    d5:ae:05:97:e8:ff:4f:ac:3e:ff:16:59:84:1c:a8:
                    c0:90:13:76:ba:20:9d:e8:38:3e:ea:18:be:f1:2a:
                    c9:c3:b6:68:f0:bc:35:29:75:11:c0:b8:55:3d:99:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:21:A8:1B:27:8A:52:EE:C4:B2:6C:89:03:17:B1:4B:F2:45:49
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:e7:07:fa:e7:b8:5c:03:a0:72:ff:e5:70:69:40:b8:40:c6:
         87:18:c4:83:88:35:8b:d3:82:25:3e:be:14:a8:d1:d5:16:8d:
         f3:3f:64:be:c2:0f:67:89:b9:fe:93:c4:b3:b0:75:2b:e2:da:
         56:de:09:e4:48:fc:5a:5a:3c:23:d4:b3:3c:5a:f7:2e:79:87:
         06:92:44:87:2d:f5:c8:5a:80:85:e2:47:34:07:39:89:3d:c1:
         9f:f6:c9:e9:28:0e:78:c8:98:8d:16:da:31:e0:6d:2c:ea:19:
         0d:35:e5:cc:71:35:2a:c6:56:a1:29:66:1d:9e:ad:1d:46:4d:
         47:91:ad:93:d3:82:2b:f0:12:02:6e:81:e0:2d:31:e8:61:fd:
         eb:31:42:e5:2a:4d:16:e8:f5:93:72:16:33:3a:67:9d:b8:7f:
         ae:87:2c:b2:f6:87:6a:c1:07:4e:06:3a:7a:80:02:3f:3d:c3:
         33:ed:7b:12:ba:b2:11:5a:2a:1d:80:60:e9:cd:2c:3b:09:e9:
         8e:25:8d:5a:d5:4a:c3:3e:c8:08:7b:a5:be:e2:19:e9:23:b8:
         8d:10:a4:58:14:95:5d:c6:70:c2:e0:11:39:4b:15:33:e9:cb:
         da:af:c6:12:e2:a7:01:36:76:be:ad:49:cf:93:70:73:e1:34:
         33:1f:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:16 2025 by rpki-client