Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
File:                     eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json)
Hash identifier:          p9kG+BOrXCWL+VOp6cxf5YLvlZJJtIby20pBAnbbVLw=
Subject key identifier:   83:65:2F:56:D1:D4:B6:C6:08:14:45:CF:0D:16:7E:52:16:B1:BE:6D
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Certificate issuer:       /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial:       0199FC21BE398F01C9AC3B218F900AE1CCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:33 +0000
Files and hashes:         1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: sc9X9NhnDasvFACvHEa2D1sF6x3GWrjJcbHsMxW0Bz0=)
                          2: kvDA2uJCxtsf_iJspEUKkErzpBw.roa (hash: JEVQ/faqvkDHRCLDsyE8tNxf+ZkvCVkbrXJ5aSPcJrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:be:39:8f:01:c9:ac:3b:21:8f:90:0a:e1:cc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
        Validity
            Not Before: Oct 19 11:01:33 2025 GMT
            Not After : Oct 20 11:01:33 2025 GMT
        Subject: CN=83652f56d1d4b6c6081445cf0d167e5216b1be6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:6d:f2:e9:0b:bd:9b:ff:8d:ce:21:32:a5:
                    84:f8:7c:e6:92:61:14:a4:10:9a:2d:51:bf:a7:97:
                    a4:a8:e5:03:8c:5b:6a:6e:13:3c:5c:b3:5b:8d:21:
                    ac:2e:de:25:7a:e5:6b:db:54:9f:5a:05:02:f4:29:
                    62:c1:67:b2:e5:92:c3:9f:ba:dc:f6:61:cf:ec:84:
                    f7:be:9f:ac:d1:d1:8c:31:53:02:7e:1b:43:0d:b1:
                    84:c4:4d:a8:2b:9f:2d:fc:4c:40:18:24:c2:9b:9f:
                    48:bb:c7:c3:cb:b5:3d:43:59:cd:20:2b:eb:c6:a2:
                    d2:ff:eb:a5:2c:ac:9e:b1:a1:89:8a:0c:1b:25:83:
                    6a:1a:c0:ae:3a:58:44:ab:69:b8:f9:c7:a1:78:79:
                    8f:bc:c1:f9:71:30:82:08:60:d2:61:ce:2e:bb:fe:
                    61:cd:fd:ab:91:a6:8c:4a:f1:0b:82:8d:a3:db:b9:
                    0c:4e:b6:49:9c:9f:21:e0:d4:d1:e7:54:56:d6:7e:
                    76:e1:fb:c0:8d:92:f7:7b:95:ee:41:d2:da:51:87:
                    3d:96:bd:35:76:44:30:92:ba:c8:22:16:3a:7f:23:
                    99:b0:d2:7e:b2:a8:6b:7e:6a:f3:0e:fc:3d:fe:92:
                    07:93:6c:c1:fe:a0:61:38:8c:6a:db:f1:c4:93:28:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:65:2F:56:D1:D4:B6:C6:08:14:45:CF:0D:16:7E:52:16:B1:BE:6D
            X509v3 Authority Key Identifier:
                keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:25:bc:97:54:17:25:51:60:5a:ca:35:00:ee:89:cb:af:
         bb:81:f5:1e:10:aa:95:b9:5f:bf:31:c8:58:33:58:5f:fb:65:
         9a:fe:5f:e6:bc:09:cd:36:1d:57:7b:de:ae:b7:b7:a8:0b:3a:
         40:23:25:fe:fe:63:47:42:69:9d:b5:2b:d7:c9:e9:8c:54:c0:
         89:e4:f6:30:56:fd:94:53:00:02:30:68:ba:dc:3f:10:a0:22:
         e5:19:fb:f4:aa:2b:62:98:8b:90:00:1d:57:57:03:b9:7f:27:
         21:e0:f8:fb:6d:9b:c9:59:ed:4e:65:c8:15:9c:ca:c0:64:04:
         c7:b8:69:2b:9a:48:0e:3a:d0:bd:e6:83:11:b6:84:8e:65:14:
         e8:8d:e2:28:be:b7:6e:19:75:9a:ce:64:c7:c2:53:46:6c:5c:
         c5:b1:bb:97:2e:67:fc:82:3b:8e:7f:18:b5:52:34:c8:54:a9:
         5f:c5:bf:41:e4:2b:f1:86:1c:d9:e6:cc:27:69:66:83:3a:1a:
         24:dc:7f:cb:54:f7:dd:6c:8a:10:0c:fe:61:63:04:67:91:f6:
         1d:55:bf:4d:42:f2:13:2f:c6:a5:f3:db:d3:e5:d8:4b:03:2f:
         f7:ed:52:48:1b:f3:54:7d:a2:e0:d0:63:70:5f:c7:e8:85:19:
         29:2b:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:09 2025 by rpki-client