Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          VAliUehK+PwyeHtXWck9VevVOkZEFPCYGdpOX1iEBfc=
Subject key identifier:   CA:8F:F6:34:F6:B4:D0:AA:0A:FF:17:3F:CE:3D:09:AF:04:42:D3:EE
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       0199FE46AB2B4E8225E5A60AFD97AF91FF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          16EF
Signing time:             Sun 19 Oct 2025 21:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:08 +0000
Files and hashes:         1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
                          2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
                          3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
                          4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: fGn9JyeKiR5SBMMEXDCXfkmts0b1/56CUzy0jjiyV/I=)
                          5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
                          6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:ab:2b:4e:82:25:e5:a6:0a:fd:97:af:91:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Oct 19 21:01:08 2025 GMT
            Not After : Oct 20 21:01:08 2025 GMT
        Subject: CN=ca8ff634f6b4d0aa0aff173fce3d09af0442d3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:47:ab:e2:46:2c:44:00:08:00:dc:73:bc:
                    5e:dd:76:d5:5c:55:bd:5f:36:1e:7b:02:7e:52:66:
                    4c:d6:d3:f5:f8:b7:11:fb:03:f4:bb:c9:61:3f:51:
                    4a:b2:3e:06:32:b2:28:64:50:d9:eb:db:43:fd:39:
                    ce:fd:d3:42:6a:68:6e:86:3a:d2:d9:38:fe:b3:0c:
                    11:6d:03:0b:1a:f5:c7:8b:02:84:9e:c0:4d:3e:e2:
                    de:0d:80:a7:eb:cf:af:e5:ae:0b:90:20:68:20:26:
                    7d:d7:30:fa:fc:a0:07:39:93:0f:8e:8b:fa:e3:f2:
                    fd:6a:5d:51:c5:b6:92:1e:9c:ea:46:da:c4:6a:63:
                    b0:01:8b:6e:68:85:5e:92:68:c1:4e:c0:8f:ae:5b:
                    4c:be:71:1a:d0:7b:9e:7b:de:e4:fa:6a:8a:7a:4c:
                    15:e0:31:d3:5a:77:52:1d:e2:6d:b9:ae:f1:1b:ec:
                    49:ce:fc:85:ea:38:79:aa:22:a9:e3:ab:70:d0:0a:
                    03:0e:41:43:17:fd:78:bd:91:da:ad:94:cf:4b:8f:
                    60:20:47:90:1e:c5:6e:c3:dd:61:d1:72:3b:d9:d6:
                    ba:c0:87:16:b2:9d:13:dc:83:78:13:c4:2d:0a:b2:
                    fe:ab:85:bb:d9:5c:fd:60:94:3a:ba:c3:b2:48:05:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:F6:34:F6:B4:D0:AA:0A:FF:17:3F:CE:3D:09:AF:04:42:D3:EE
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:fe:77:b9:4f:02:b1:7f:b2:98:69:f6:a7:7f:bc:2f:b6:
         cb:49:6f:58:b4:81:59:7b:bb:56:42:76:b2:ce:7e:69:0e:8d:
         4d:df:fd:eb:c2:47:d5:81:4b:79:c4:9f:78:71:90:d4:d3:93:
         36:60:ed:dc:ff:da:54:24:a7:fb:8f:38:dc:e4:7e:f8:b9:9e:
         ab:5d:a2:5f:b5:ff:ef:a5:ed:d8:69:6d:ce:00:83:c2:de:38:
         1c:b1:88:d9:2c:dd:d8:4b:58:37:0c:2b:42:d0:11:66:e6:a4:
         05:34:2b:23:f3:ff:2b:d7:ab:2c:77:57:eb:8d:ab:d4:fa:62:
         51:b0:90:c5:0f:62:a5:8f:65:0e:27:f3:fc:06:a6:14:2c:9a:
         e8:71:04:04:8c:50:3c:72:83:12:14:e5:21:f7:15:99:c9:ef:
         96:d3:38:cd:16:4d:d1:cf:44:f4:cf:d6:bb:11:3e:84:71:45:
         2a:81:e1:4d:ab:fa:2d:2e:67:98:26:ea:9c:9f:9c:58:18:39:
         7b:19:77:1c:6a:b1:54:4c:3a:eb:e5:e7:02:6e:24:16:1f:9c:
         40:13:14:40:a5:1e:4b:79:ef:10:9d:cb:c7:e8:c1:cf:28:33:
         f5:53:d4:e5:e0:28:14:b5:85:9f:ca:b7:e6:12:92:7c:ef:87:
         ae:5b:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:05 2025 by rpki-client