Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File:                     dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier:          f37dbDBVuLP6llfPnO5YSPhk2OQXIp4h5/cEp15uEX0=
Subject key identifier:   F4:09:A5:D1:E7:BF:49:32:DF:24:A6:B8:AA:AA:BA:5F:80:CE:68:15
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer:       /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial:       0199FEB4B9364342301E40334E81B22B7535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number:          16A6
Signing time:             Sun 19 Oct 2025 23:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:20 +0000
Files and hashes:         1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=)
                          2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: A1kMxRk0ALNel65d4Son8eF4FXrpsD9K3pP88yba9k4=)
                          3: hyarknq8b7RuIBM-YBqseStGpbs.roa (hash: Q8UycgtcBXykUE11/kKCtnDO8tk0NFq+ACIXZD0W+5A=)
                          4: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:b9:36:43:42:30:1e:40:33:4e:81:b2:2b:75:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Validity
            Not Before: Oct 19 23:01:20 2025 GMT
            Not After : Oct 20 23:01:20 2025 GMT
        Subject: CN=f409a5d1e7bf4932df24a6b8aaaaba5f80ce6815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:53:f0:2f:48:ff:33:82:68:89:e2:91:97:
                    67:48:f5:14:0a:3e:ff:02:52:d2:1b:49:db:10:13:
                    59:ca:24:2a:90:7f:c5:d9:e6:f9:9e:f8:13:84:34:
                    9c:83:73:2e:00:62:cd:34:6b:0e:76:23:53:d5:2e:
                    de:1f:7c:f2:65:ad:17:1f:e8:77:9a:aa:00:12:d9:
                    bb:e9:ef:12:ef:65:63:b6:5f:ef:46:a7:b5:08:77:
                    7c:7f:b3:2e:ab:4b:ff:b8:b4:4a:b6:0a:81:f6:b1:
                    55:ad:62:52:57:2f:db:aa:4f:cc:46:58:54:85:9d:
                    db:fd:96:19:36:dc:32:39:8a:7c:38:58:a7:6d:33:
                    bb:f1:27:6e:72:19:c4:24:e5:f2:a7:45:00:18:7e:
                    ba:1e:64:ae:27:35:22:78:2c:e9:28:e1:c5:ef:93:
                    b4:a7:ce:22:f4:04:8d:51:7c:51:39:90:5e:53:b3:
                    74:78:42:6a:96:11:40:87:ff:21:fa:f4:07:81:bf:
                    78:d2:91:1b:18:d6:aa:d2:a3:3c:e9:ae:5c:3b:43:
                    f5:3d:e7:27:f6:a5:50:ec:a7:9e:33:a9:2e:7a:1b:
                    63:e9:bc:80:e9:88:89:2a:1a:47:86:5c:2e:a5:6d:
                    dc:98:25:ec:c7:5d:f7:86:8f:28:95:6a:7b:4a:34:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:09:A5:D1:E7:BF:49:32:DF:24:A6:B8:AA:AA:BA:5F:80:CE:68:15
            X509v3 Authority Key Identifier:
                keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:d7:2c:be:0e:57:7d:90:80:9f:40:2d:be:d5:b8:51:8a:
         b2:b9:3f:9e:26:c9:48:e4:0e:75:b7:31:c6:8e:c9:3f:2a:13:
         a8:57:3b:6b:3c:03:4c:ae:cb:ab:44:e2:e0:7c:92:54:a1:3d:
         c1:6d:37:d4:64:b8:9b:3c:6c:df:11:6d:79:1b:ef:71:38:77:
         20:cc:d8:b5:65:db:74:7e:2d:a1:13:9d:c3:17:c1:2d:7b:81:
         13:04:2b:78:c4:e2:22:88:16:16:6e:c8:8d:af:31:89:a4:ee:
         60:33:82:bc:4d:9c:77:cd:5d:e4:99:69:02:04:2f:97:38:a3:
         48:ce:d6:32:fb:2c:65:80:bb:df:69:ed:d8:f6:36:7e:3b:71:
         4c:13:86:4e:ad:66:15:c7:44:2a:c9:e6:a8:c3:bf:ee:bb:61:
         64:f5:e4:f1:3c:8b:da:79:57:28:b7:5b:cc:2e:0c:09:38:a9:
         d0:10:51:d5:38:29:78:58:f6:2b:23:cd:e1:a9:e1:8c:cb:bf:
         86:47:a9:a3:1b:41:cd:01:d7:c9:2b:ff:a8:4a:71:c0:b9:5d:
         61:67:18:83:a5:40:bd:cf:66:39:3d:a5:fb:4c:dd:d6:4d:51:
         e2:d7:14:68:1d:57:3d:24:22:f9:12:8d:be:4f:b2:81:33:2c:
         f6:07:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:06 2025 by rpki-client