Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
File:                     ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json)
Hash identifier:          jlCbnklWkBSmW9E1K/CjDZGjEDUZPIK5UlfP1uV58G4=
Subject key identifier:   38:E6:FB:B7:ED:FA:D2:4F:F1:A4:17:B5:8F:C5:CB:3D:AA:69:27:D2
Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
Certificate issuer:       /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Certificate serial:       0199FBEC0C8B5124BBE2331532F46B3821B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:02:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:54 +0000
Files and hashes:         1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: H8au4xlE6ZvwN0jAzIJVCzgl8E9SujzAIU0jw5bGUb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:0c:8b:51:24:bb:e2:33:15:32:f4:6b:38:21:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
        Validity
            Not Before: Oct 19 10:02:54 2025 GMT
            Not After : Oct 20 10:02:54 2025 GMT
        Subject: CN=38e6fbb7edfad24ff1a417b58fc5cb3daa6927d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:89:77:bd:e9:2e:d9:ba:73:f8:e5:92:f2:
                    f0:5c:41:2e:d4:43:72:98:24:b4:9c:71:67:bf:3f:
                    80:ec:b3:fc:4a:57:9d:12:b8:1d:68:f0:96:02:7e:
                    b3:74:70:86:36:27:84:7e:d1:46:83:4e:0e:b0:3c:
                    10:6a:e8:e9:48:d6:7f:23:28:ec:0a:c0:71:1c:f2:
                    ea:63:20:3d:7d:d9:cd:9f:44:bd:24:70:06:20:fe:
                    a2:49:84:ac:0c:12:46:b6:26:76:92:89:1c:e3:31:
                    34:e1:45:2e:04:83:c3:8e:42:21:55:e2:0e:87:1c:
                    02:b1:12:9d:b3:9b:7e:39:27:3f:46:22:a3:b0:38:
                    61:06:2a:29:0b:7e:aa:1f:a4:1a:18:65:49:06:24:
                    59:3c:b7:99:ef:3e:63:88:dc:ba:ce:98:1e:84:3d:
                    54:c3:99:50:e1:a8:9d:94:4e:17:d5:a1:b0:dc:3e:
                    cd:04:0c:fb:19:2f:5f:d5:ed:80:bc:5d:d1:55:e4:
                    48:fc:95:a1:cf:cb:60:cc:81:9e:dd:06:0f:f0:f2:
                    d1:31:df:52:5c:7e:6a:69:cc:57:4d:05:bb:f0:db:
                    3d:9a:a3:54:31:1a:ee:e5:b9:a9:1f:6e:b7:0f:79:
                    33:0a:e9:54:e5:b3:a0:a7:3e:29:42:41:20:ad:14:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:FB:B7:ED:FA:D2:4F:F1:A4:17:B5:8F:C5:CB:3D:AA:69:27:D2
            X509v3 Authority Key Identifier:
                keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:62:7c:38:9c:3b:fe:70:94:a4:17:07:9e:d8:ea:7f:5b:
         6a:da:de:f8:6c:1c:f9:97:d6:4a:9b:6a:87:05:ed:4d:5c:39:
         28:a0:d8:00:35:16:0f:c2:ea:c5:ad:43:2c:0b:b3:e7:91:5a:
         f4:a7:93:aa:ee:94:81:72:38:48:01:6e:5d:8e:d3:cb:61:94:
         de:6e:3c:d9:fb:d9:15:6a:d9:9b:8a:f2:47:ac:32:f9:65:1c:
         08:15:ad:62:e2:1a:c1:f6:7e:98:c7:0a:eb:c5:d2:1c:48:13:
         a8:fc:aa:b4:a8:0a:25:f1:8f:ff:5b:f9:16:cd:85:f2:c0:f2:
         75:5d:05:8f:aa:b4:ad:91:c9:31:df:14:b0:67:b7:76:e9:b5:
         b5:2c:c5:8f:44:ba:29:62:3b:3a:76:d4:d9:76:fa:bc:02:fc:
         53:d2:b1:a7:ac:8f:05:f3:2e:2b:4c:50:b3:42:b7:12:61:69:
         c1:ca:fd:86:6b:ca:bf:d6:60:fb:5d:48:ee:ac:50:d7:ff:8c:
         64:6e:e7:ab:ab:68:e5:75:49:17:cf:75:0a:ab:09:05:37:fe:
         45:8b:75:f5:b2:ef:70:c4:80:72:ca:8d:85:2d:82:38:96:3a:
         2f:ef:f8:3d:10:7e:8d:64:59:80:57:b2:94:5f:d9:5b:4a:75:
         14:7b:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:58 2025 by rpki-client