Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File:                     zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier:          v6dnanF55PN5v2ZQYlPnPvgLimSsLvEZgDBUd0o6p+E=
Subject key identifier:   58:7B:4D:9C:F8:3A:07:DA:DC:C9:D7:42:ED:7D:BE:8B:33:57:DB:B0
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer:       /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial:       0199FBEA8EDDF41EAB994E75BBA52E075955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:17 +0000
Files and hashes:         1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
                          2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
                          3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: xWrJXgRnpVo4xuDQfks148CzNmIU3yE9atbrQxg3sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:8e:dd:f4:1e:ab:99:4e:75:bb:a5:2e:07:59:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
        Validity
            Not Before: Oct 19 10:01:17 2025 GMT
            Not After : Oct 20 10:01:17 2025 GMT
        Subject: CN=587b4d9cf83a07dadcc9d742ed7dbe8b3357dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:17:d0:03:84:c2:88:6c:5c:45:98:28:4d:
                    8c:53:74:d0:6d:ba:be:4d:97:e2:af:07:bb:f8:d0:
                    ed:bf:a8:23:63:33:01:1f:d3:d1:7a:7b:e5:45:83:
                    0d:5f:3b:f7:56:3d:09:8b:f1:7e:05:1e:4a:62:a2:
                    cc:75:21:57:62:88:35:aa:8c:5f:60:0b:0b:0b:65:
                    62:90:0c:f7:84:30:a8:9a:60:8d:32:4d:fa:d9:92:
                    d9:cc:b7:3b:87:78:78:ac:72:e4:40:da:32:55:39:
                    93:f1:2e:ab:59:3a:04:56:f1:43:e3:9f:c6:54:8d:
                    57:cc:27:54:66:cd:18:e6:c8:f0:2f:3b:4f:08:64:
                    9b:52:45:02:0d:15:d3:ea:be:c5:5c:21:38:eb:63:
                    16:17:93:32:b3:64:6d:9e:b6:3b:17:70:ee:70:1c:
                    c3:54:f1:df:8c:87:a3:07:96:7f:2e:04:91:ac:dd:
                    fe:56:1e:75:39:a9:1b:9c:2b:c8:e1:f7:07:48:b0:
                    c4:5a:fc:e3:76:81:25:8f:45:3d:b4:16:9b:d6:fa:
                    a0:6b:2d:d5:08:a1:58:e2:7c:1d:51:cc:61:6d:82:
                    3a:3c:89:40:c2:9d:43:99:1e:56:41:d0:82:70:09:
                    c0:78:21:b1:b8:8b:29:5a:97:76:eb:38:27:0a:f5:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:4D:9C:F8:3A:07:DA:DC:C9:D7:42:ED:7D:BE:8B:33:57:DB:B0
            X509v3 Authority Key Identifier:
                keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:42:09:9f:c2:ac:bc:b1:ae:11:0e:ff:ec:94:36:ed:d0:
         5d:b1:f2:99:e4:60:54:4f:5c:d6:c0:12:e8:51:f3:1b:93:03:
         65:16:78:65:13:e0:0c:e3:8c:31:1c:f6:c0:be:cf:77:13:7d:
         21:10:af:12:9f:94:3b:71:c2:8c:de:9d:8a:5d:72:93:7c:c9:
         78:88:b4:c6:d9:0d:42:d6:f9:e5:9d:11:49:f1:9b:df:31:1c:
         d8:e6:8c:df:22:db:84:4b:6d:ad:da:2a:e3:1d:ab:f5:1c:71:
         0a:88:84:7b:f0:ca:3b:72:3f:82:c1:d5:ba:f0:e5:1e:7f:5c:
         03:9d:12:54:76:1c:6f:ae:c7:6e:59:1a:5c:e3:13:64:73:34:
         8e:7f:15:4a:4f:95:65:14:8d:2c:04:1d:27:d2:1f:6c:3f:66:
         77:08:dc:42:c8:63:0a:8d:bf:cb:50:3e:98:bd:b7:c0:66:22:
         f6:d1:8f:85:8f:33:e7:26:be:98:c6:2e:cc:2c:3e:ae:3e:26:
         5f:86:52:1b:b4:77:72:94:26:b3:23:34:93:d5:49:8a:2d:39:
         2d:c2:58:a3:82:db:74:04:2b:e9:78:ce:98:ce:7e:cc:76:bb:
         69:ac:fc:f7:e6:e4:8e:9c:37:1f:1b:f9:bb:da:c9:6f:4e:f2:
         71:0f:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:59 2025 by rpki-client