Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File:                     xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier:          aIvj5r/q+loOipYEeSyv4UG/S5V5Xcqi6VJubC/DfVY=
Subject key identifier:   CB:57:E6:85:64:7D:A7:A5:3A:0E:F2:BC:81:82:22:95:5D:90:04:A8
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer:       /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial:       0199FCC61ABE6058374961AA0BD78D48AF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 14:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:05 +0000
Files and hashes:         1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
                          2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
                          3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: 6Y0is+VuQ75J2x8ed2ApDmHBrZK/zwxq+rpO5065q9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:1a:be:60:58:37:49:61:aa:0b:d7:8d:48:af:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
        Validity
            Not Before: Oct 19 14:01:05 2025 GMT
            Not After : Oct 20 14:01:05 2025 GMT
        Subject: CN=cb57e685647da7a53a0ef2bc818222955d9004a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:49:62:e0:11:c9:50:f8:0b:d8:37:a7:64:
                    28:24:b0:57:a3:a6:d1:68:f3:de:63:56:14:b9:6c:
                    c7:54:e4:66:34:d4:32:d3:14:5e:5f:a0:97:e9:87:
                    98:55:31:40:b5:89:21:e8:1a:8f:f4:fe:bf:43:45:
                    66:0f:41:ae:7f:13:e8:5b:d4:11:ba:e2:3b:a0:7d:
                    ec:1f:82:2b:ba:4d:e8:46:d7:ba:d9:bd:c9:7d:67:
                    7b:20:47:e1:69:3c:7e:7b:23:1d:fd:30:1a:c4:d6:
                    c7:47:81:e3:7d:05:db:f9:53:d2:b8:81:5c:16:64:
                    38:d0:0c:28:46:fe:10:50:d7:22:1d:a8:e3:5f:bf:
                    5c:7a:a9:05:df:b4:4b:3d:5c:66:2c:28:44:1d:10:
                    8a:d7:80:7f:fc:13:49:e1:05:41:66:f4:32:15:f7:
                    12:53:ad:26:32:ff:67:d4:ef:a9:95:8d:78:05:20:
                    14:98:94:de:99:b5:14:d1:d2:5b:a3:4d:95:29:23:
                    c4:a2:38:a3:65:6a:bd:43:ae:63:02:1b:ec:48:55:
                    16:e9:4a:c1:e8:46:60:db:e5:6e:6e:4c:2e:bb:63:
                    37:10:b4:b8:ae:90:3c:56:68:bc:82:09:ad:2a:aa:
                    bb:40:ff:b8:56:f6:b3:5a:4a:d8:e8:70:e1:c5:9f:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:57:E6:85:64:7D:A7:A5:3A:0E:F2:BC:81:82:22:95:5D:90:04:A8
            X509v3 Authority Key Identifier:
                keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:e8:7a:4d:95:16:1f:10:6f:cf:bf:8c:6c:27:a2:e7:43:
         16:1e:e3:e8:27:31:9b:77:e3:58:20:23:e2:ab:a4:83:50:c5:
         6c:f0:3d:6b:6c:82:82:cf:4e:dd:20:c9:32:3a:a7:7d:1b:19:
         8c:b3:21:f2:43:fe:3c:86:07:8d:74:d0:0d:d1:e3:a0:e5:6b:
         a3:2c:f7:ac:2c:a8:67:a9:8e:b2:7e:c6:a1:d2:96:83:24:85:
         6f:8a:3d:38:c4:04:34:52:95:8c:da:75:c2:7d:78:16:31:07:
         70:0a:86:2f:7d:2a:f5:0a:a6:70:b5:d0:ea:9e:04:39:e1:9f:
         0b:52:69:62:f5:e5:17:a2:e8:82:27:28:44:92:63:87:07:c1:
         f0:de:ed:94:8f:c8:6d:0f:76:40:96:b7:46:ee:6d:8c:21:84:
         0b:dc:b8:82:61:3b:2c:ac:a9:5b:7d:0e:da:db:8e:fd:12:f0:
         a6:b2:ce:26:8b:fa:f8:60:ab:95:98:9e:1f:88:5a:77:ea:84:
         0c:a0:b8:c4:f1:67:c5:dc:77:4f:44:bf:e8:5b:9b:d7:32:86:
         ed:8f:2d:8c:83:74:c1:25:cb:50:4f:22:ca:62:f9:40:13:4d:
         81:ef:23:df:15:23:b6:11:8a:f0:22:8f:d4:3d:3f:12:5a:43:
         41:cf:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:10 2025 by rpki-client