Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File:                     F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier:          vOoUXio2tOwgGm0QnyepKHi9laTUfzvQk3B1IGBn4wg=
Subject key identifier:   C1:06:E6:AC:3E:72:F3:2C:AA:50:D2:DD:A5:F2:F9:DB:9A:D2:39:7D
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer:       /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial:       0199FC8F1D559ABC0DBCA9041AE18A808598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 13:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:01 +0000
Files and hashes:         1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: BKTO7Vq90Jt42yL7uxktMs5ImbiBzqxzbwwj/pKMvJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:1d:55:9a:bc:0d:bc:a9:04:1a:e1:8a:80:85:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
        Validity
            Not Before: Oct 19 13:01:01 2025 GMT
            Not After : Oct 20 13:01:01 2025 GMT
        Subject: CN=c106e6ac3e72f32caa50d2dda5f2f9db9ad2397d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:c2:01:a2:b1:2a:e1:d3:4c:5e:f3:72:d1:
                    3e:a9:6b:d8:0b:a7:21:cd:4b:a5:11:3f:9e:d0:36:
                    70:dd:0e:c4:e8:64:21:df:86:79:a7:c8:a0:f3:97:
                    fa:82:5d:54:3c:88:94:e2:2b:ff:f7:0e:d4:cc:65:
                    81:46:50:60:a9:ec:66:89:08:18:03:cc:49:5b:4d:
                    3c:83:0f:6c:a8:38:99:c3:24:12:6a:a9:be:42:62:
                    2e:db:dd:22:4c:29:3a:eb:a3:f8:ea:17:b6:e8:92:
                    a9:72:18:e9:06:54:9e:a6:04:55:a9:e9:34:84:fd:
                    fc:40:7f:74:5e:7c:67:a4:72:a4:17:24:cb:88:b0:
                    c2:e9:12:1b:74:9d:3e:fc:5e:16:4d:86:a8:7a:05:
                    0a:3e:8f:5e:f0:d9:9e:ea:e9:61:86:ad:0c:73:a5:
                    0a:c8:3b:20:f7:63:f7:2b:8f:b2:1f:ae:df:ac:0c:
                    9e:f5:e1:04:8e:58:02:c9:86:d9:56:37:25:d9:f9:
                    97:db:f5:b9:24:0d:a8:16:81:d4:c0:95:45:13:c9:
                    2f:42:69:43:53:d4:12:eb:25:72:75:3f:52:b1:af:
                    1c:17:87:3b:39:62:e8:9f:97:bf:51:e5:bf:cd:24:
                    6f:32:94:f1:8f:16:bb:87:3a:15:0a:95:4f:95:24:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:E6:AC:3E:72:F3:2C:AA:50:D2:DD:A5:F2:F9:DB:9A:D2:39:7D
            X509v3 Authority Key Identifier:
                keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b3:3d:84:a1:85:15:70:d9:2c:16:38:78:2e:12:52:62:b2:
         42:63:e6:c5:a6:bc:60:49:97:f8:47:ef:a6:48:08:9d:d8:fb:
         1b:b0:5c:b9:46:a0:57:94:f3:e3:ce:f4:b8:7a:bd:33:fd:00:
         93:d2:60:90:a3:14:ea:57:2f:38:66:f7:ea:63:e3:82:36:f1:
         a1:12:3b:f0:df:7c:0b:39:36:31:d0:f8:c2:4e:cb:e8:71:13:
         4b:78:fb:e8:2f:99:82:b2:af:12:3e:43:1d:d2:e7:57:f5:e0:
         25:4e:c0:bf:1d:44:5b:c5:6f:a1:ef:3a:37:a3:aa:01:ae:c7:
         c4:4b:9a:08:98:1a:ae:45:db:69:58:e0:0e:e0:e0:4c:ea:58:
         af:f4:88:5c:20:88:4b:43:62:7a:a0:4a:e8:37:a1:16:de:29:
         09:41:a3:b7:81:13:b1:d7:0b:af:c8:bd:34:b8:bb:a3:56:e4:
         c2:62:ca:20:0e:b7:1a:0f:43:fe:b9:3a:94:60:db:81:3f:9b:
         97:d8:be:0b:7c:6f:fb:59:b3:2e:d1:7b:a0:e1:46:d4:19:17:
         18:1c:14:1b:2a:d1:7b:48:aa:4c:e1:56:b6:06:20:43:55:47:
         50:79:fe:2d:01:f4:44:3b:ae:c6:8a:0e:c9:83:90:08:7b:f0:
         86:bc:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:37 2025 by rpki-client