Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File:                     1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier:          Kkr/yqbmZj+jXzgvIhSeIcq0s0kzMzIO0uD3HTJCxGY=
Subject key identifier:   16:BC:2C:E0:E2:2B:45:7E:7F:7C:0E:E2:32:F7:E7:0A:D6:97:7A:CC
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer:       /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial:       0199FD6B5537BE2A76467AE258ADE16158E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number:          064E
Signing time:             Sun 19 Oct 2025 17:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:33 +0000
Files and hashes:         1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: vMAiDb36hm6JIic2tzjKEaZV/0YJSlCn80K9DAJsR/M=)
                          2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:55:37:be:2a:76:46:7a:e2:58:ad:e1:61:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
        Validity
            Not Before: Oct 19 17:01:33 2025 GMT
            Not After : Oct 20 17:01:33 2025 GMT
        Subject: CN=16bc2ce0e22b457e7f7c0ee232f7e70ad6977acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:bd:02:4f:19:7a:0c:c8:43:9c:97:5a:b6:
                    2f:f6:ef:e3:4f:fd:5b:39:48:2e:9c:1f:e3:93:ed:
                    4f:5b:92:54:67:5e:e0:ae:a9:c4:94:97:9a:7d:44:
                    55:37:d1:b6:d9:6c:09:e2:da:cc:2c:63:0f:e8:58:
                    f3:f4:53:9d:48:e9:1a:dc:c0:66:19:ed:c3:d8:7e:
                    c6:9d:a6:bd:cb:ac:e2:19:78:66:a7:6e:77:81:ad:
                    1b:ce:94:85:4b:da:d7:e9:dc:9e:d2:9d:1a:80:b6:
                    0b:14:2c:27:bb:9f:f7:33:89:c8:ae:66:20:8b:f1:
                    b8:43:a8:6b:18:47:d5:a9:e0:0b:b2:95:cd:1a:17:
                    51:06:df:c2:08:17:18:d7:4c:14:4b:e8:d4:54:b6:
                    5c:ef:de:d1:30:ab:7e:81:9c:8e:9b:85:e5:fb:6e:
                    41:72:80:4d:ce:d2:44:53:20:dc:90:23:59:bc:ac:
                    da:a4:aa:9c:9b:46:64:15:26:f9:68:90:39:da:91:
                    c0:9a:fb:cc:3e:97:a5:a9:0c:88:2b:d1:c6:2f:b6:
                    4a:32:1a:4f:49:1e:70:ba:82:5c:df:29:23:9b:ec:
                    77:6c:da:5d:72:e4:b7:63:7e:d6:b8:4f:50:6e:4b:
                    6e:e5:e2:dc:32:d4:4e:18:8b:6b:b0:ed:88:ef:3e:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BC:2C:E0:E2:2B:45:7E:7F:7C:0E:E2:32:F7:E7:0A:D6:97:7A:CC
            X509v3 Authority Key Identifier:
                keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:d7:dc:2d:3e:25:b6:43:65:20:e0:f3:d2:aa:c6:bb:4d:
         e8:f5:10:0f:86:5c:cf:63:62:03:6c:42:e7:d5:5f:8b:64:1e:
         bf:0b:e8:92:69:aa:41:96:a5:75:e6:dd:7c:b1:bf:6f:ff:1a:
         02:16:8d:15:5d:c6:97:98:c5:6c:aa:ff:2b:48:b1:76:d2:57:
         24:b2:98:92:3f:49:28:57:95:7e:9d:bd:e6:0d:bc:14:a6:ee:
         6d:db:82:ab:58:e5:14:14:8a:c9:4e:47:89:5d:88:02:82:9f:
         34:a3:7a:17:7e:fb:b1:ec:18:ad:69:5b:44:c2:4c:35:17:35:
         ae:e5:54:f8:70:94:1e:d5:b4:2c:a0:6f:bd:4e:57:bb:42:d4:
         4c:b0:38:db:90:a6:64:fa:fc:7c:ce:d4:e5:55:ba:94:17:87:
         15:27:03:00:35:66:06:d9:eb:b9:2e:18:ca:59:f0:07:89:ca:
         d0:c5:02:e1:22:20:c8:56:49:b3:f9:07:31:95:57:4d:2a:31:
         fb:c8:9d:fe:ba:22:e2:ad:69:e1:ed:e6:b8:76:cb:58:0f:91:
         eb:40:42:6c:1a:9a:bb:0b:32:9f:43:17:38:dc:2e:f9:f8:e3:
         fe:fd:87:00:01:7e:59:35:ed:34:f8:dd:ac:42:d8:74:72:59:
         e3:d8:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:11 2025 by rpki-client