Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File:                     CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier:          p1cvDqssSD1mu6TK7uImv7TEcp++rTRV+n1PGOVSJW4=
Subject key identifier:   80:CC:2C:92:E2:1D:75:95:CB:17:A4:78:68:53:2E:EC:47:D3:0D:77
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer:       /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial:       019A022317FEB093C6A93B1F58546FFADC4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 15:00:45 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:45 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:45 +0000
Files and hashes:         1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: PPA94ZwdIy0ntKsqOGdLcJ4L+QJ/qgjdAGNoH2pgBTg=)
                          2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:23:17:fe:b0:93:c6:a9:3b:1f:58:54:6f:fa:dc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
        Validity
            Not Before: Oct 20 15:00:45 2025 GMT
            Not After : Oct 21 15:00:45 2025 GMT
        Subject: CN=80cc2c92e21d7595cb17a47868532eec47d30d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:ae:12:7a:a9:8a:73:6d:69:46:df:0f:00:
                    e1:41:53:4a:ac:80:03:1c:be:e3:54:c6:c0:7a:5c:
                    12:c8:3c:95:b2:a4:31:36:aa:29:0e:df:8d:5b:e9:
                    2c:6c:b6:ee:63:4f:e8:d6:97:d8:25:f8:54:bf:14:
                    86:37:1f:3f:66:cf:d1:12:5e:57:33:1a:7e:44:a5:
                    b7:1c:f2:78:30:2a:6f:09:54:7c:c2:79:ce:96:bc:
                    c6:92:d0:1b:f2:f4:4b:fa:70:d7:54:3f:be:d6:32:
                    53:8d:26:ec:90:07:5c:79:5a:2d:e9:74:0a:a5:93:
                    14:7d:bd:f6:65:c6:1e:92:40:9b:15:17:09:3f:15:
                    d3:7a:d3:1d:90:9e:e2:b2:ed:fa:69:0c:81:1d:6c:
                    e4:b7:bf:f8:52:f4:cc:06:54:2a:2b:68:d8:dd:71:
                    d6:0d:22:f4:e2:d4:2c:8c:d2:f3:c3:3b:70:af:dc:
                    00:3e:92:74:70:33:d8:97:6d:a6:33:f8:59:4a:de:
                    a2:0a:49:c8:2a:5d:01:d7:5d:00:28:ce:f2:15:9b:
                    04:af:c0:19:ee:4e:32:32:35:66:8c:91:d0:73:58:
                    2e:fc:9d:d7:31:36:43:f9:7a:b2:07:02:d6:5e:21:
                    5e:37:65:be:b2:a7:5b:af:4c:c7:56:3d:6f:09:f1:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:2C:92:E2:1D:75:95:CB:17:A4:78:68:53:2E:EC:47:D3:0D:77
            X509v3 Authority Key Identifier:
                keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:87:85:12:43:d6:1f:34:fe:9a:7f:19:81:30:a6:3b:f2:
         28:fe:e4:61:ef:0a:79:4e:3b:6b:17:c6:ad:22:c8:e8:8d:59:
         64:58:00:1e:f5:a7:b9:b3:97:71:97:22:b7:0a:fa:33:33:43:
         99:33:4b:4d:77:3e:9c:9f:ca:9f:9b:0a:ac:ed:b3:6d:37:95:
         0e:5c:71:15:6d:28:bd:60:f3:0d:f3:54:73:90:91:fd:df:9d:
         5f:76:f0:b9:74:68:78:7b:ab:16:ca:96:1e:8e:8b:cb:60:5a:
         83:6d:8e:60:0c:89:a2:a2:6a:b0:20:b0:0a:6e:73:82:98:db:
         ba:21:f1:43:8f:04:e4:0f:44:df:96:20:02:e0:58:96:a7:87:
         69:d6:cc:2a:13:66:c3:da:eb:bd:1b:2a:c1:9c:1f:11:4b:7e:
         5e:7a:80:6f:3e:d5:df:49:10:27:3f:66:9e:1d:02:cc:a9:29:
         c4:78:c6:0f:1b:fd:90:f9:42:a8:87:3a:ff:fb:e5:a4:94:88:
         64:46:08:1e:49:04:20:f4:bd:9a:31:8d:49:c1:2b:51:19:3f:
         9d:c8:46:8a:c5:9f:dd:fe:65:c8:71:13:25:3b:e4:b9:95:3a:
         e9:7a:44:23:52:7d:73:8e:63:91:4a:e1:d6:09:c3:1b:12:72:
         d7:54:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:32 2025 by rpki-client