Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          jghUvUaLEH0Mf12nBzsA8snqpN9FhprsKyyV0e+YHLs=
Subject key identifier:   91:5B:15:70:E5:04:9C:3E:32:5E:E0:C2:07:A6:A8:8B:22:35:B0:74
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       0199FBEA9FEB2D767B8F92996F1B49E4EB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=)
                          2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: qkeEzXoop2LgHDdziJB49rUrkVG9c40F8LA94bfqTfk=)
                          3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
                          4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=)
                          5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)
                          6: pt0lS1m3NLfN-ZlG6LR_u92_6So.roa (hash: 5VENDpQR+7VNnLE+YBum+RFRq29jqQtAdKpAJMhSuxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:9f:eb:2d:76:7b:8f:92:99:6f:1b:49:e4:eb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=915b1570e5049c3e325ee0c207a6a88b2235b074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:94:11:82:66:19:67:78:53:1b:8a:13:27:
                    c5:39:56:83:4d:24:ca:5b:4e:10:7e:b4:53:24:1b:
                    1c:19:9c:d4:40:71:b6:07:d9:93:7b:22:a9:aa:20:
                    19:df:c0:a7:c9:e4:d5:d3:13:00:04:d7:67:27:e6:
                    10:7d:be:32:be:d3:4d:b1:26:e0:78:73:3f:41:22:
                    dc:8e:59:5a:bf:86:d9:6b:e9:f0:ec:6f:ec:50:de:
                    9b:fa:7a:ca:97:a3:97:86:bd:14:34:e2:e5:81:10:
                    29:25:65:08:af:54:40:f9:ba:28:2a:82:15:4b:13:
                    df:e3:df:76:b6:b9:ff:a0:11:9b:e1:84:89:fe:c1:
                    8c:df:69:be:e3:02:64:08:77:51:39:b2:f5:a8:37:
                    e5:d2:d1:64:19:c1:91:f9:13:e7:b9:e5:ca:d5:ca:
                    65:42:79:fb:64:d5:ae:df:ab:c1:44:8d:8a:0a:90:
                    7f:0b:ab:68:b2:15:b9:20:fe:4e:82:23:8e:95:2e:
                    31:6f:77:32:ef:fe:60:2e:8b:c7:a6:a4:93:52:4e:
                    dc:e5:fd:b4:c2:11:e6:2f:98:fb:57:68:36:f7:b9:
                    85:fb:73:9f:2b:87:d6:64:81:a4:ad:ae:1e:ca:d3:
                    30:8f:1b:93:85:da:cf:ce:76:86:99:9a:e3:fd:19:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5B:15:70:E5:04:9C:3E:32:5E:E0:C2:07:A6:A8:8B:22:35:B0:74
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:46:93:ce:56:69:90:9f:6e:25:ac:d1:9b:28:51:3e:7c:
         1a:b5:4e:81:38:50:f5:3a:41:48:5e:ce:6e:df:f3:9a:e1:f4:
         cc:be:c4:c8:8d:a7:09:1c:52:fa:9c:6b:76:b9:19:8c:a7:dd:
         25:43:7d:0a:0a:95:c9:a5:be:13:f7:8d:c0:ce:e9:60:46:4a:
         a3:f1:95:8e:a1:b8:d0:c8:7d:0f:23:65:79:1a:70:c6:db:a1:
         3e:13:09:a7:6b:c7:84:c7:97:03:27:9f:16:5b:9f:69:4a:87:
         2e:7a:af:a3:2c:c3:be:e1:6f:b2:a4:a7:c3:2f:4c:19:5b:72:
         33:f9:cb:0d:f3:13:49:5c:59:ad:0b:3d:4a:7f:b6:2a:1e:97:
         e7:12:09:d5:02:9b:02:c6:8d:d8:7e:e5:64:6b:b8:d9:61:5b:
         ed:48:12:74:0e:da:64:48:70:a8:43:75:ee:42:0b:a7:bd:f8:
         6d:3f:0c:00:d7:f7:43:a2:39:c8:8d:25:be:56:3e:b1:3d:a4:
         9d:2b:f7:aa:a4:e0:9d:89:52:f1:6b:f9:5c:e8:ca:a3:cf:de:
         3c:44:a6:dd:5c:29:b8:8f:5c:74:29:18:77:a0:f7:a3:41:bc:
         de:76:4a:29:ee:b1:fe:bb:8c:1a:f3:27:70:89:73:db:27:32:
         9b:2b:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:57 2025 by rpki-client