Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File:                     FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier:          GmP7D1L5uAIVlvVTD/0MkKJJ0aOsSfi03EC6Zf/YW54=
Subject key identifier:   39:A4:02:84:4F:49:BF:3F:C0:CB:96:17:6D:39:8F:A1:B6:B6:4A:25
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer:       /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial:       0199FB7CE8FD49BF4F079F4D0060520A6F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 08:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:31 +0000
Files and hashes:         1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: LbcHvOAfa9uPiTUtpa17n+5fUV9tFA74shdTa/ufYbU=)
                          2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
                          3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e8:fd:49:bf:4f:07:9f:4d:00:60:52:0a:6f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
        Validity
            Not Before: Oct 19 08:01:31 2025 GMT
            Not After : Oct 20 08:01:31 2025 GMT
        Subject: CN=39a402844f49bf3fc0cb96176d398fa1b6b64a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:aa:93:80:a7:9e:19:f8:dc:e3:23:99:96:
                    8c:f6:65:e2:23:a2:c3:94:e2:f7:77:8c:1c:0b:f4:
                    2f:05:8c:02:51:f8:37:19:0a:fc:10:ed:c0:75:62:
                    98:24:48:0d:1f:f4:fe:83:39:54:c6:3d:6b:be:c7:
                    c1:18:0f:e2:1b:f8:d3:ec:b8:9b:d9:79:d4:ec:d6:
                    23:2f:1d:93:34:a8:2d:9f:2c:90:4b:0b:4d:e6:73:
                    f2:f6:e9:bc:67:29:24:e9:c0:ab:ab:78:90:da:dd:
                    5d:17:09:f8:ed:c6:53:0d:d9:54:68:19:cb:5a:2c:
                    37:01:53:60:83:8f:9f:c9:80:89:11:40:9a:0b:4e:
                    35:be:85:00:a2:7b:39:62:60:84:6b:d0:ab:57:e1:
                    a8:62:95:ec:b5:73:69:15:24:0b:85:bb:3a:1c:5d:
                    fe:f8:58:01:de:59:40:c2:ca:be:a1:85:06:69:0a:
                    d2:28:15:c5:f0:86:e0:ae:1b:72:53:f0:95:25:79:
                    b7:28:f5:2a:ca:98:5e:52:19:15:ec:a5:ed:fb:95:
                    2d:ee:fb:78:7c:0d:a6:a1:8a:4d:8a:fd:7c:17:4c:
                    c5:a2:ed:fa:e0:52:ae:55:d9:dd:7b:35:a5:a5:4e:
                    19:d1:b1:b4:5a:12:bb:7f:7f:6c:93:f3:40:d2:6c:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A4:02:84:4F:49:BF:3F:C0:CB:96:17:6D:39:8F:A1:B6:B6:4A:25
            X509v3 Authority Key Identifier:
                keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:46:ff:09:9a:8e:43:cd:af:14:34:eb:0b:79:13:f9:a9:81:
         8d:29:e0:3c:6f:01:8b:84:64:c4:32:cd:00:ee:df:bb:59:ae:
         d5:28:40:f7:26:c7:b8:df:de:1e:6e:38:e0:6c:94:bc:e7:af:
         0a:ac:a3:5c:38:64:2e:09:94:88:ad:8e:e1:a8:94:da:6c:15:
         76:9e:a9:1a:b7:dd:5b:c0:50:73:f1:02:fa:d3:aa:56:a0:5b:
         fe:60:07:05:4c:3b:e8:06:03:25:00:33:92:e7:81:cb:ac:25:
         83:75:63:f0:3d:7a:38:91:8c:97:02:bb:21:f7:13:ea:42:08:
         19:69:e6:37:c5:9e:34:b7:8f:27:29:39:20:20:1f:91:c3:7b:
         bc:bf:13:46:78:69:52:83:a8:c8:e7:c6:02:26:d8:75:4a:c9:
         40:11:fd:9a:fd:79:0f:92:1f:cf:a2:03:33:7f:f0:33:90:a1:
         15:42:d2:a3:18:a2:5f:89:f3:3a:53:18:13:55:8c:e6:2e:9e:
         ba:6b:83:0b:95:bc:ab:13:62:dc:5a:ff:e2:19:1a:32:2d:28:
         57:66:40:ee:ce:df:4f:fd:7c:8a:e7:73:b8:9a:cd:29:82:aa:
         fa:f2:3f:6e:30:02:6b:1e:bb:b9:5d:c6:17:5b:81:a7:79:36:
         62:9f:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:26 2025 by rpki-client