Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          mV4nWgGhGlq4Qjfz+V4yTjEgNLA53yZ47KBjCh60lYU=
Subject key identifier:   09:F4:92:E1:9B:02:33:7D:90:82:D1:3A:DB:B2:D5:97:BD:0F:82:06
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       0199FAD7BB8F8065FACCEB95FE0611223BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 05:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:06 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: pRrF55XcyuCCutjz7E+4UtwbFmjQ9+g8c2jSmKONi/8=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:bb:8f:80:65:fa:cc:eb:95:fe:06:11:22:3b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Oct 19 05:01:06 2025 GMT
            Not After : Oct 20 05:01:06 2025 GMT
        Subject: CN=09f492e19b02337d9082d13adbb2d597bd0f8206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:24:b6:62:2d:0b:10:26:a9:73:53:9d:c6:
                    18:fd:d3:5a:a3:21:83:1c:4c:7f:b6:a0:d2:59:cc:
                    98:47:ea:5a:f6:c5:d0:d2:59:78:4a:57:8b:09:1e:
                    55:6e:ea:a7:0e:03:36:01:ea:03:36:99:1f:58:99:
                    cd:f3:c0:75:49:fb:d3:a6:4e:5c:35:34:a2:8e:13:
                    8b:19:3a:cf:6b:8b:73:04:2c:70:ac:f8:29:ec:0b:
                    f5:7b:c9:87:1d:ea:12:a5:6c:65:f0:dc:30:62:41:
                    29:62:1c:11:43:fe:aa:1c:2c:05:a6:b8:7f:6a:c1:
                    e5:8d:bd:f9:1d:0e:62:3a:e2:8d:e3:50:5a:c7:09:
                    2e:86:cf:81:aa:ff:69:76:6a:2c:33:a6:32:de:53:
                    80:5a:06:8f:a1:bc:42:ab:76:61:37:1b:bc:eb:6f:
                    ee:ac:3f:21:c3:53:b0:c9:1b:bc:5a:ba:53:8d:f0:
                    b9:23:d7:9e:65:ca:43:c2:69:b8:e6:b1:69:09:a4:
                    36:f2:10:d0:40:02:a5:15:c2:f7:5c:05:10:95:16:
                    e8:4c:c6:5c:7b:67:df:d7:f3:11:c4:7d:aa:84:c6:
                    74:44:aa:20:83:42:eb:e5:80:8e:34:c8:16:b7:2e:
                    ab:ac:6d:d2:0b:c1:85:58:92:b4:ee:58:62:a8:fb:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:92:E1:9B:02:33:7D:90:82:D1:3A:DB:B2:D5:97:BD:0F:82:06
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:e2:21:e8:24:53:0f:ea:25:e8:25:08:41:90:d7:24:e9:
         dc:df:b8:c6:86:0f:9e:26:ff:ce:67:3f:a2:ec:9f:06:0f:74:
         fd:d5:ea:76:99:44:e3:fd:d3:1e:65:40:d4:95:7d:ba:5f:3e:
         8b:df:8a:4a:55:e2:2f:c5:eb:34:41:2b:55:6f:c5:7e:b6:49:
         ab:ab:60:37:9e:09:2e:7b:4b:7b:bf:68:f7:1b:39:b4:a4:79:
         89:05:a3:f0:91:98:5c:df:4b:6b:06:22:24:0f:02:44:6e:cc:
         56:28:a8:3c:27:4f:83:2f:01:8c:e9:58:be:85:f6:5a:f3:d1:
         fe:95:d3:42:aa:d1:96:ad:03:a5:d0:51:e7:a0:f9:d6:44:03:
         64:15:c2:cd:07:d0:b9:40:c6:2b:d4:3a:ca:24:78:19:19:55:
         b0:96:29:3b:c7:ff:3d:51:08:26:bc:ba:9f:2c:11:54:a8:6d:
         b8:87:ef:5a:3c:8f:42:d4:16:f4:46:ee:06:78:d0:b0:07:01:
         d2:bd:0a:73:da:43:17:ab:ad:fb:46:b2:7a:28:74:2c:3b:35:
         e0:d9:67:59:81:2c:14:d6:1f:09:3a:21:08:1f:55:c3:4b:f3:
         ae:ff:79:d6:03:a7:32:06:cd:74:a9:a3:8f:b3:de:54:4b:96:
         63:57:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client