Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File:                     DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier:          OaCZCPHgXtQHttyZbe8znjTR4HQLOZidAaEuR0HtRWg=
Subject key identifier:   89:E2:5A:47:F3:FB:05:7C:4F:9D:33:D8:53:2B:60:CA:B3:DC:05:98
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer:       /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial:       0199FB7C9A0A9B3FA64392A8E8D8242F6649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:11 +0000
Files and hashes:         1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: oKaxqhJH8xPWsO6h8akQd9uBk90OhVNxBoIg44QoFYs=)
                          2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
                          3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9a:0a:9b:3f:a6:43:92:a8:e8:d8:24:2f:66:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
        Validity
            Not Before: Oct 19 08:01:11 2025 GMT
            Not After : Oct 20 08:01:11 2025 GMT
        Subject: CN=89e25a47f3fb057c4f9d33d8532b60cab3dc0598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:52:d9:8f:0f:b7:7a:d4:ce:7e:f5:3f:2b:
                    94:4d:a9:f9:0a:85:3b:6f:68:56:2e:2d:ba:c2:77:
                    48:2c:e2:aa:ae:ae:c2:39:00:b0:bf:27:df:24:32:
                    90:bc:59:1f:d4:6f:68:5d:0f:63:22:5a:8b:c7:df:
                    4c:b1:33:47:be:58:4a:a5:1d:21:db:26:ff:25:e4:
                    1a:74:22:a8:56:a2:e7:82:c3:59:a3:03:de:1a:60:
                    ae:72:86:c5:1e:99:95:05:4d:d7:8f:45:cd:73:d4:
                    9c:d3:09:73:fd:71:ae:83:98:f6:69:8c:f8:6b:d8:
                    10:91:0f:8d:d1:bb:6b:80:62:4f:c7:fc:7a:38:ea:
                    af:93:d8:ee:ee:e3:0e:4a:aa:de:4a:b9:77:6f:58:
                    13:1a:36:80:10:bb:dc:4c:74:a8:99:3f:93:c8:da:
                    1a:86:b6:f7:be:52:95:50:15:24:7b:17:e4:be:e9:
                    12:e7:43:f0:ab:01:49:61:bb:ba:46:7b:5e:c7:b5:
                    e3:82:d1:84:92:34:d8:11:3c:f8:5c:9c:47:89:37:
                    08:82:8f:ac:2c:1f:ec:45:a9:68:40:29:39:42:74:
                    9b:02:89:62:b7:cf:3a:28:5a:b1:ec:73:8f:cc:3f:
                    97:19:50:54:0b:cb:1e:a1:16:64:67:d8:13:1c:cf:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E2:5A:47:F3:FB:05:7C:4F:9D:33:D8:53:2B:60:CA:B3:DC:05:98
            X509v3 Authority Key Identifier:
                keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:91:f3:2d:fa:91:42:fd:20:a8:66:77:05:cc:05:3a:39:
         1d:a2:ae:b2:42:22:06:63:11:b5:83:b3:f7:ae:2d:c9:3a:dc:
         65:eb:39:00:68:2e:6e:4b:17:60:34:37:d2:63:4e:dc:72:23:
         58:6f:67:65:48:fe:a2:3a:7a:f8:9b:24:f2:14:22:87:ac:df:
         20:36:30:f8:e8:fe:b6:c0:1e:4a:75:cd:21:c3:59:43:48:bb:
         ea:36:78:61:6c:60:58:96:29:a8:f8:c2:bd:eb:8e:69:80:4e:
         9b:62:5e:03:2a:c3:eb:29:87:63:18:4b:8d:84:fe:f5:c8:90:
         3f:7f:4d:ce:2d:82:af:21:00:d2:d7:53:ce:77:25:b5:0a:12:
         bc:02:a1:09:f8:64:20:1c:03:ec:ce:8c:47:12:25:3f:db:bc:
         f1:34:39:d1:34:49:72:3f:af:d7:53:3a:dc:05:6c:f0:9a:b0:
         f0:15:14:11:48:ee:a0:21:1e:7d:14:78:10:fd:33:ab:30:67:
         1f:e6:31:23:67:ec:8c:fc:54:cc:ad:63:fe:e6:b1:61:a7:78:
         50:38:6d:51:ba:3f:f2:be:8f:ab:21:ad:b2:6f:fc:cc:87:be:
         b7:54:28:f4:dc:93:b7:b7:bc:9e:2c:e0:57:32:3e:cf:47:19:
         88:c8:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:04 2025 by rpki-client