Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File:                     ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier:          Nu8Wwj/SACT6WhvzrDnB50w8Qw20EgD9zxn8atWqPKc=
Subject key identifier:   F5:1B:87:1E:CB:90:B4:E0:88:AF:EC:85:CF:F5:84:6A:B5:C1:57:84
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer:       /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial:       0199FC585F73A0D06A15A2E49B88D2520286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:13 +0000
Files and hashes:         1: EaL6Ix0Eou0QDLjCzFWl0ew8laY.roa (hash: yuhNShNhzz/MaGAXuOUPcECRlpw6IKQvZBq5XeXjSxM=)
                          2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
                          3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
                          4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: 3MWE0CUOp3eKS+lkmq0dCI3DoK5PFOAyxuyX1BuEHqA=)
                          5: xmPH32QYxN9sQH_6cI7fXoqHUEs.roa (hash: 1zn6wk2gZUPdlnR+sqdNWEYJ3GwxThzty4kNMpAjtSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:5f:73:a0:d0:6a:15:a2:e4:9b:88:d2:52:02:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
        Validity
            Not Before: Oct 19 12:01:13 2025 GMT
            Not After : Oct 20 12:01:13 2025 GMT
        Subject: CN=f51b871ecb90b4e088afec85cff5846ab5c15784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:a8:99:db:ab:c4:4d:23:a5:fc:d4:44:3d:
                    8c:2f:59:d2:7a:e5:cc:b3:f8:1a:11:7e:b9:b0:47:
                    2a:96:8d:51:c6:fe:ae:5f:e9:f3:8b:ef:80:7f:a1:
                    ba:bf:d2:ca:c0:bd:bc:a0:f5:6a:62:f2:c4:f5:1f:
                    db:b5:86:1d:b0:01:6e:8f:3a:96:81:cc:9f:00:64:
                    4a:34:57:00:27:7f:f3:5f:ed:1a:22:1a:71:07:b3:
                    67:49:a0:7e:dd:ec:bb:00:ef:bd:2c:3e:63:7f:59:
                    b7:2e:72:08:22:8a:d6:6e:46:1f:05:81:07:00:78:
                    30:03:d1:43:7b:24:c8:75:f7:a0:79:3e:43:cd:2a:
                    16:7b:d6:2c:8f:96:5b:d4:00:0b:03:8e:24:0d:7e:
                    90:a5:de:56:ee:56:28:9a:25:db:86:1a:cb:9d:1f:
                    f9:24:b6:2a:fb:af:68:20:8e:49:d9:34:94:50:aa:
                    14:4e:af:e5:f6:e0:84:65:64:d7:10:88:53:f8:f4:
                    07:ad:05:91:f8:a9:6e:fc:6c:f9:ec:1e:8e:aa:1c:
                    a4:cb:a0:e3:f1:72:9e:c2:b5:9f:f0:8c:31:54:66:
                    08:85:68:ce:3f:02:fd:5c:85:33:38:e7:58:a7:79:
                    40:e0:c0:d1:fa:1c:36:8c:0b:db:b3:0b:92:b7:c2:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:87:1E:CB:90:B4:E0:88:AF:EC:85:CF:F5:84:6A:B5:C1:57:84
            X509v3 Authority Key Identifier:
                keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:da:5f:c9:d2:19:f3:47:f3:da:21:a0:a3:eb:3f:d2:f2:92:
         02:c8:95:50:6c:9a:12:e9:85:57:e2:7c:d6:fc:10:93:0d:f4:
         0a:60:f7:af:da:d1:56:ce:c6:ef:04:fb:de:51:45:71:95:a9:
         41:54:38:38:ed:ea:76:15:1a:e0:14:cd:38:dc:08:1b:8b:60:
         2d:f2:bb:85:8b:cf:3a:36:64:45:86:8b:de:ed:b7:0e:4d:11:
         6b:82:d6:86:ee:53:c7:fc:1d:25:e0:da:c4:b2:4c:97:a0:03:
         61:13:b3:c0:17:3e:94:36:52:5c:3f:ad:4d:d7:f0:02:f2:0a:
         a5:61:bf:8b:b8:a7:14:df:1a:82:34:f0:f7:f9:8e:2e:cc:c8:
         82:8b:b4:98:39:6c:46:ec:0a:e4:97:d6:fa:12:68:a0:f6:19:
         18:6f:05:73:66:ff:e0:95:e6:e3:75:34:58:59:66:44:21:01:
         97:d5:28:b0:29:ec:b4:5a:61:91:82:02:d1:34:52:84:1b:e2:
         a2:2c:ab:f9:9e:93:57:89:aa:18:20:a5:78:7e:69:3b:b3:97:
         7a:89:53:22:92:e9:34:d0:a0:57:ec:93:f7:87:8c:98:13:55:
         43:be:4b:0d:a3:a1:13:71:cf:49:cb:a6:0a:1d:c6:f3:bb:f9:
         69:e3:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:42 2025 by rpki-client