Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File:                     FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier:          VCgZD2Ns1ibGjPPJ1RHKwRMNXPGTgP9hBqi0TBrMxvg=
Subject key identifier:   BA:77:0E:1F:94:35:40:97:7A:20:59:81:10:FB:E9:38:0D:A6:9B:83
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer:       /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial:       0199FBEBC6F22FE4CAF607906EFCF94279D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 10:02:37 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:37 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:37 +0000
Files and hashes:         1: 8AgLpzaDL0h1dumVlt3QNUC0b8g.roa (hash: dFMCTzeLz+/t3jrKpnjSyGNljO948X6d0ELCXJMhuAE=)
                          2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
                          3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: JreD/Xe2ZQcMEO083yzSXpQdbggjduhl18sk1Oy0b6g=)
                          4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c6:f2:2f:e4:ca:f6:07:90:6e:fc:f9:42:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
        Validity
            Not Before: Oct 19 10:02:37 2025 GMT
            Not After : Oct 20 10:02:37 2025 GMT
        Subject: CN=ba770e1f943540977a20598110fbe9380da69b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:39:75:23:45:8d:97:78:0f:8f:99:6b:66:
                    a8:30:61:92:53:51:c7:09:48:24:04:fa:74:04:cd:
                    66:d1:e2:16:f7:84:a0:6a:4c:6c:c9:24:4d:13:82:
                    96:85:1f:13:bb:c7:8c:f7:59:20:bd:f9:18:f1:ab:
                    e0:dc:e9:50:6a:70:92:94:61:12:d6:8a:e2:61:ae:
                    04:d9:1f:59:b2:d7:d7:e9:2d:35:8f:ec:f8:e5:36:
                    53:23:a7:c7:42:4d:58:31:c4:95:10:b3:40:b1:69:
                    9d:72:21:10:21:5f:6a:dc:01:8b:67:5c:45:70:3a:
                    61:22:22:73:3e:8f:19:ab:8a:3f:4a:3d:3d:7e:48:
                    60:a5:0f:66:c5:44:4e:90:53:6a:df:86:a1:60:cb:
                    32:58:21:80:c3:be:fb:41:10:5d:83:9b:c8:c8:9e:
                    3d:fe:c5:c6:49:ae:57:dd:61:ed:59:88:a4:96:4e:
                    ee:a9:a1:52:50:58:35:45:63:58:57:f7:59:02:37:
                    c0:89:d2:0d:a5:bc:97:26:54:7d:d6:45:a8:0d:48:
                    80:7a:d3:fc:01:fe:7e:5a:15:37:fb:f0:a8:4d:af:
                    a9:88:a3:2e:05:7b:00:f0:39:b2:a7:30:57:68:80:
                    1a:ee:7b:cc:be:ec:dd:a3:94:7c:1b:eb:38:4b:d7:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:0E:1F:94:35:40:97:7A:20:59:81:10:FB:E9:38:0D:A6:9B:83
            X509v3 Authority Key Identifier:
                keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:39:de:5c:90:db:99:ef:df:90:03:3c:eb:e0:4b:7c:67:
         4e:f0:92:b4:b0:40:5b:0b:c7:2a:8d:5f:f5:dd:86:48:78:5f:
         e1:d3:2a:fa:e9:e0:6a:ca:3a:57:78:86:8d:fb:88:3e:85:97:
         42:e7:cc:e0:60:d4:3f:d4:0f:8f:b4:68:ab:06:50:0d:99:34:
         82:83:64:9e:f8:ce:72:50:a0:eb:85:9b:b9:d7:e3:b9:b4:35:
         1b:8f:6d:52:11:6b:6a:16:e7:45:57:b1:b5:5b:44:50:05:5a:
         fe:2c:c8:da:6c:4b:b3:c9:13:0f:de:b2:ad:4d:f1:2e:64:84:
         77:cd:aa:77:53:5e:16:19:b2:fc:7b:10:ec:80:b3:93:c0:c6:
         3c:2d:ae:84:76:4b:bc:58:8e:6f:0b:54:f7:60:49:90:6a:99:
         b1:14:e6:56:4e:3d:8e:a2:75:28:8a:8d:fc:b2:86:f7:d1:a5:
         b1:7f:80:b4:df:db:2d:3b:c6:50:3b:f0:b3:3e:53:54:b8:0a:
         e0:ce:4a:8a:d6:d5:a6:c4:48:35:c8:98:26:4b:17:70:c6:ae:
         37:55:c4:f9:0e:a8:46:d0:58:8d:a4:d9:4b:60:44:e9:1b:d6:
         23:8d:79:fd:70:bd:f7:be:d1:2e:af:cc:de:b9:68:06:0c:d3:
         78:06:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:53 2025 by rpki-client