Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File:                     Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier:          5sFjR7EM3RcIZlc/OwJC2bZnKQ78AI7G+HOnoSTe/sI=
Subject key identifier:   FE:7D:10:EB:0A:F0:A6:89:0C:51:6F:A8:20:24:CB:35:08:E7:F7:97
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer:       /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial:       0199FC8F4402AAE91B26D4C486AB46BC2E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:11 +0000
Files and hashes:         1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: vBsWLsuNYyve+l1dnIZsMPlXmCFA+uN15dhbmoQMpIE=)
                          2: R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa (hash: Vcu+MbNMM/yJaD82Silul6HdyQc+gF8UimqpbdwDqq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:44:02:aa:e9:1b:26:d4:c4:86:ab:46:bc:2e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
        Validity
            Not Before: Oct 19 13:01:11 2025 GMT
            Not After : Oct 20 13:01:11 2025 GMT
        Subject: CN=fe7d10eb0af0a6890c516fa82024cb3508e7f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:64:e2:33:3f:ba:70:ae:ca:08:8b:5f:70:
                    ed:5d:c0:9a:45:f3:d6:1e:94:a0:63:2c:ed:d9:7d:
                    b5:28:3a:41:bf:19:a6:3c:5f:4c:28:f0:1e:75:c1:
                    55:a6:7a:51:73:f8:0b:a9:aa:79:52:34:23:d5:8a:
                    93:22:74:1f:7a:84:ad:14:0e:54:6a:ab:f4:31:d9:
                    d1:de:19:fa:61:bb:74:20:db:4e:34:b0:7c:70:26:
                    33:99:10:55:56:b0:f6:6a:9e:c9:3f:d5:bd:e2:cc:
                    24:65:73:08:53:32:27:eb:de:09:95:5d:19:90:b9:
                    57:3b:65:9b:3d:78:69:7f:d3:b9:d9:3b:a1:0d:5c:
                    ac:63:a1:ae:b0:bd:b5:27:11:89:32:9d:ae:3e:1b:
                    e8:c6:3b:cd:2e:22:fb:f9:26:57:71:5a:f3:b6:62:
                    77:c4:a8:14:99:19:f8:83:f9:d1:a5:e6:6f:9e:35:
                    f2:b7:57:27:ed:f0:b8:91:a5:d9:1c:2e:a3:09:05:
                    e9:39:e3:db:7b:42:32:de:15:a4:55:9c:b5:19:fc:
                    0f:f4:f1:3b:67:6f:c6:53:52:bc:05:3c:b2:ad:8f:
                    a1:33:79:42:f6:ea:d5:88:08:1e:46:34:38:95:99:
                    1d:e5:24:3c:57:58:47:9a:74:5f:f2:78:c2:52:f0:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:10:EB:0A:F0:A6:89:0C:51:6F:A8:20:24:CB:35:08:E7:F7:97
            X509v3 Authority Key Identifier:
                keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:70:24:e3:85:e1:10:78:52:f7:75:29:96:af:75:e4:62:11:
         04:c8:cc:74:cd:f0:f9:e6:ee:48:26:67:47:3a:ab:39:85:43:
         e2:8a:4f:e3:0b:89:f9:8d:eb:1c:c7:7f:ce:be:28:b7:30:f0:
         14:54:c5:cd:2d:7b:f7:8e:a5:f9:17:bd:99:7a:7b:72:a2:ac:
         4a:ec:91:78:bc:0a:72:a2:f3:f9:73:ae:85:3b:d2:06:1e:94:
         3d:8c:21:f4:7a:80:68:2f:c8:1f:3a:3f:a9:0e:da:89:41:ea:
         71:7d:58:7b:ee:2b:28:a5:b0:34:aa:53:38:57:d5:c4:e4:c9:
         e2:74:0b:fc:36:f8:f9:54:cf:f4:33:43:2e:0e:f3:05:f7:c6:
         31:2c:d7:78:92:75:fa:83:38:5a:35:4d:67:58:ef:08:0c:63:
         98:e0:ec:66:a9:5d:f0:2b:b8:0f:37:98:fa:82:e4:c0:68:49:
         6f:2f:ec:21:63:4c:da:f4:e5:3b:da:f9:9e:7f:a8:22:04:ac:
         e3:61:c5:14:68:31:39:cf:bf:f0:1d:b8:3e:e6:e8:d4:21:f0:
         69:c8:46:32:29:b7:96:a9:94:dd:31:aa:e8:12:3b:31:3b:25:
         b5:cb:1e:76:b6:f6:84:fb:d0:bc:de:e6:0c:10:f1:76:37:96:
         85:74:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:55 2025 by rpki-client