Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File:                     ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier:          VB1y8F1ir1ymA+ksOE49B/QK2+//JQ9UfkYdXeqEaZg=
Subject key identifier:   A3:CC:D7:F5:70:8A:B3:1F:B5:7E:E4:EB:38:FD:20:81:2F:0B:8D:14
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer:       /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial:       0199FEEBB54DB05DB08EB11665C3384FE676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 00:01:24 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:24 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:24 +0000
Files and hashes:         1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: 5imDunCB2p1sslQSzaYbJr4AOGCHwFtiM0cQLrZwv4o=)
                          2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
                          3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:b5:4d:b0:5d:b0:8e:b1:16:65:c3:38:4f:e6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
        Validity
            Not Before: Oct 20 00:01:24 2025 GMT
            Not After : Oct 21 00:01:24 2025 GMT
        Subject: CN=a3ccd7f5708ab31fb57ee4eb38fd20812f0b8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:2d:ea:78:7e:ba:9e:7c:e4:1d:89:58:eb:
                    4a:c8:ab:f5:dc:a0:72:ab:87:b1:bf:9b:4e:08:07:
                    b5:c3:f3:f9:1c:97:7a:45:e0:2e:c1:fc:d1:10:e9:
                    a9:d1:cc:43:1e:c1:f4:5d:c7:1a:e0:8f:45:a1:bf:
                    a2:75:a1:fb:69:78:2d:aa:04:08:4d:a0:eb:ac:ca:
                    75:97:af:05:5f:c3:8c:48:6f:3a:e6:db:03:b3:e7:
                    fb:61:1f:db:82:67:4d:12:3c:df:1d:27:ee:9f:02:
                    f1:b3:bf:3c:ee:cb:0b:99:a5:3d:49:4c:53:be:44:
                    a9:58:6e:64:94:b9:02:89:18:48:45:39:4f:a9:55:
                    86:90:ab:26:58:1e:4b:4f:e2:04:ee:de:34:d8:31:
                    27:9b:42:55:d0:dc:58:5c:86:23:18:e5:d9:51:cf:
                    56:98:67:c5:b2:d7:9a:b5:53:dd:1e:7f:07:b8:73:
                    aa:19:79:21:ae:83:ca:36:ab:ee:3e:18:3b:29:91:
                    af:a7:58:32:9c:be:30:4c:3e:64:59:3f:9c:ed:65:
                    dc:3b:4e:3c:3d:3b:2f:89:35:82:9e:4e:b4:53:39:
                    f3:16:05:71:3c:0e:a6:31:88:05:6d:ec:24:f5:9d:
                    fd:28:58:db:f3:a8:6e:f1:17:4f:08:76:88:9a:79:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:D7:F5:70:8A:B3:1F:B5:7E:E4:EB:38:FD:20:81:2F:0B:8D:14
            X509v3 Authority Key Identifier:
                keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:08:bd:93:e7:f5:26:9f:91:ab:ec:3d:c9:eb:68:eb:1c:
         19:79:0a:30:b9:2e:00:ee:0b:dd:0b:32:3f:d0:dd:da:32:c8:
         fd:e1:63:ce:51:5f:81:59:35:02:35:6e:5e:b0:82:69:92:b1:
         41:b9:9d:b2:b7:67:55:60:01:da:d5:8e:76:37:cc:56:f9:5c:
         1a:4e:3e:05:ad:9c:df:b2:cd:d8:60:ce:c4:13:5c:4e:cf:2b:
         45:d2:39:e6:78:a2:bb:82:9e:63:ff:59:be:db:ea:fe:32:8d:
         90:78:d0:13:91:af:02:0e:51:08:4e:63:21:d7:d6:87:b2:bc:
         79:99:fb:c6:b1:1c:56:ab:5b:bd:c6:6b:6c:de:8e:cf:c3:18:
         81:6e:dc:13:1d:c8:fb:c7:44:02:1a:65:65:89:5e:f5:c1:b2:
         99:9d:e7:b2:c0:cf:90:9c:f7:fa:c9:46:fb:9c:aa:58:79:ac:
         6e:85:fe:a8:85:c2:6b:12:b0:43:36:e2:5c:7b:94:7f:84:33:
         77:d9:bb:bd:0b:73:a6:b8:9e:c9:5d:1d:ab:aa:40:21:6e:36:
         e4:6f:70:cf:17:d8:9f:cc:43:bf:8c:70:95:9a:2d:ff:5d:ca:
         14:12:85:04:7d:4d:d9:8b:57:f3:fa:d5:44:20:42:de:21:a0:
         6c:43:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:45 2025 by rpki-client