Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          Ms1GMsVPdnHXTnrVI2h1O0wbeQ5h2eUjCw5k6suzcA8=
Subject key identifier:   3A:F9:F4:E8:11:26:22:B0:06:BF:48:56:35:E8:37:00:F0:71:2B:C9
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       0199FCC693AC40E345D798A2421746AE0004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          0E07
Signing time:             Sun 19 Oct 2025 14:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:36 +0000
Files and hashes:         1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: XeU0o+7/ihHN8jqnqA84UGFuzulBZUxctKCbNPLdKc0=)
                          2: 4YqKA_NWl67P1UUsYLLewOce3N4.roa (hash: jzpkFPCa8z2EEBKsdTK/EMaQenQwoVIoEp37mrkYSlo=)
                          3: IQytQDxkG6z6-hb3Iu6XIv8OQic.roa (hash: Fz8ORoLoUXIyDmykV9akqdIIcR0t067gq2FU4oUFIwY=)
                          4: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:93:ac:40:e3:45:d7:98:a2:42:17:46:ae:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Oct 19 14:01:36 2025 GMT
            Not After : Oct 20 14:01:36 2025 GMT
        Subject: CN=3af9f4e8112622b006bf485635e83700f0712bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:2b:17:6e:f8:e0:a6:3d:bd:89:65:f0:96:
                    41:49:f7:4e:59:08:a2:34:2d:0e:eb:52:8f:90:88:
                    28:e1:53:24:7f:48:45:62:73:8d:3b:62:f2:b8:f5:
                    f1:63:e4:6f:72:17:38:17:09:bd:45:aa:e8:b9:1a:
                    59:e3:cc:04:e9:fc:79:57:9b:33:18:fe:b7:85:2b:
                    be:8e:1f:7e:c7:e8:3f:f8:ec:ef:47:82:a9:42:31:
                    da:1b:7c:9c:f4:f5:bb:34:6f:7d:4e:fc:1e:f9:29:
                    3a:18:1c:dd:73:0c:c2:45:3d:9b:2d:c1:e8:59:81:
                    fd:51:06:74:31:26:b6:12:f6:b8:e7:77:76:8f:d5:
                    a8:dc:30:f9:a9:51:1b:bb:d5:47:5c:3a:cb:c6:8e:
                    37:0a:78:d6:da:a7:5c:fc:75:f0:a2:f5:0e:d0:a6:
                    c8:8a:c3:99:25:eb:4e:a9:be:51:17:45:6e:19:6c:
                    de:9f:0e:76:bf:a2:36:79:e0:57:2a:15:c8:4c:0a:
                    07:da:55:f4:5e:4b:a5:61:26:68:47:d6:41:83:c5:
                    52:98:a1:78:03:e0:71:d5:e2:97:4c:ff:fc:17:2b:
                    fa:6a:81:7b:ec:8b:3b:8b:5c:c4:6e:cd:71:16:11:
                    a5:97:f5:ce:35:17:f1:cb:d4:14:b5:2a:9b:1a:d2:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F9:F4:E8:11:26:22:B0:06:BF:48:56:35:E8:37:00:F0:71:2B:C9
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:2b:8b:88:a1:e3:c3:e0:ac:c6:27:d0:db:9a:e3:4e:b4:
         5b:21:29:6d:99:11:30:06:2f:71:e3:93:b8:27:d4:57:97:cf:
         38:28:70:92:7d:d0:e8:fb:d9:fe:77:d4:3c:de:0a:d3:8b:04:
         87:d2:da:cd:85:40:e6:03:9c:b7:cc:36:54:af:ee:f3:89:18:
         67:5c:6e:51:df:93:b1:a2:95:18:bf:e3:d8:5d:21:5c:11:09:
         05:b8:f9:41:ba:c3:1a:ea:7d:6a:29:f7:ce:92:88:41:b3:59:
         eb:b6:8a:be:5d:aa:1e:54:5c:5f:fb:86:af:e0:6c:6f:a0:c9:
         cd:e4:fd:0e:81:a3:98:e6:ca:1c:ed:28:45:34:2c:ab:c9:76:
         76:2c:08:d4:41:9e:d1:31:fc:af:7a:fb:3f:43:a3:37:d2:b3:
         88:cc:44:c4:35:fc:de:30:ab:aa:6f:4c:54:70:38:45:0b:88:
         4c:fd:e3:37:9f:e6:ee:45:3b:52:c5:9a:29:87:2f:7e:ba:63:
         2f:dc:b0:5e:f6:91:b3:25:03:90:09:10:f3:47:40:5c:e2:d1:
         a4:42:25:cb:46:6b:25:6d:41:9b:39:8f:e8:94:f0:4c:f0:51:
         36:92:e2:94:f2:10:ee:a4:be:4f:fb:61:a3:e0:5b:2a:d2:f1:
         dd:eb:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:35 2025 by rpki-client