Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File:                     e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier:          EDGGneEcYAp0nSecLMi8uwqb5pTy1FirRBHfF7Hvqzs=
Subject key identifier:   FA:DB:94:8B:29:06:AE:09:60:49:35:35:42:C3:66:37:97:BB:AE:BE
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer:       /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial:       0199FC21B6D3EE73C43551884596183A5FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:31 +0000
Files and hashes:         1: _6M7OFdfKNj70ch9yaeejGfETQc.roa (hash: zDHeyswKrEctPTqzGZks7RkAedK9Eb/kBe4tAXFfwiI=)
                          2: e-6blqAsGrPGqaN7LcIbj4DyH0U.roa (hash: iyM95LnHDG5/i8Ga2g5NozrBqrgdbA+3I4RYkh38fiI=)
                          3: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: nXGHQP/MnZRG4Phn6w1IyryBDOx7UUAl1gBmwnFEgms=)
                          4: ta8u9psNnxLXxOOnjkANI4Fajjk.roa (hash: fSNLSNcjXBJXjqSKt5vbfxJa/YEMbXMuFrigLYETmno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b6:d3:ee:73:c4:35:51:88:45:96:18:3a:5f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
        Validity
            Not Before: Oct 19 11:01:31 2025 GMT
            Not After : Oct 20 11:01:31 2025 GMT
        Subject: CN=fadb948b2906ae096049353542c3663797bbaebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:91:ca:7f:d3:33:2b:c0:2b:2d:46:fa:cd:
                    39:53:8d:18:95:db:21:92:57:ad:56:b4:99:b9:ff:
                    9d:c3:32:84:56:fa:60:fa:e0:c4:4a:22:7b:74:47:
                    43:e8:7c:66:df:b8:2b:35:fa:a2:21:db:a4:0d:54:
                    b8:b8:76:d6:46:01:93:82:95:d6:8b:5d:55:0a:65:
                    ec:53:f9:7c:fa:8f:d8:00:17:07:35:59:f2:46:4d:
                    b7:99:da:af:25:0e:36:81:85:52:26:d9:06:fb:2e:
                    85:e5:a9:13:78:12:3b:e2:3a:ff:5a:75:08:1d:98:
                    02:ca:fa:c7:c7:18:17:e3:0b:04:ad:20:8f:fd:23:
                    c8:5b:ee:3b:b1:f5:b7:c5:8d:5f:23:70:86:88:35:
                    d5:dd:9a:42:e4:bf:2b:b3:bc:c1:1d:c4:d6:37:10:
                    a5:56:20:6f:ae:40:2f:36:4a:5a:b5:8c:8f:17:85:
                    fb:4f:8d:be:3b:65:7c:2f:f6:60:88:1d:01:dc:88:
                    df:4a:37:0d:37:4d:8b:42:73:f6:08:dc:82:15:17:
                    b7:fc:50:72:70:59:75:c9:8e:89:76:01:6f:c8:29:
                    1c:69:32:5f:5f:05:32:20:d8:35:e1:74:f7:20:5d:
                    97:93:3f:ef:21:fc:31:24:2b:04:0c:35:f5:6c:8b:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:94:8B:29:06:AE:09:60:49:35:35:42:C3:66:37:97:BB:AE:BE
            X509v3 Authority Key Identifier:
                keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:e2:ff:54:08:16:d3:10:fe:0b:ab:17:66:26:15:25:66:
         df:a8:f7:8a:bc:71:19:c5:47:dd:07:d0:fa:11:c0:1e:4d:a5:
         65:9f:ac:82:87:69:3a:94:ba:8e:71:52:c6:b7:bb:db:e4:64:
         79:b4:45:0c:91:59:33:3c:ba:f6:be:3c:2b:19:c8:24:ad:a9:
         42:d7:b8:8d:8f:18:2a:15:4b:5f:ab:7e:f9:b0:b0:f1:1d:88:
         04:f1:64:04:45:78:d8:bb:c5:3c:20:60:aa:83:21:b1:f7:10:
         b1:0a:29:84:0f:71:f6:53:e9:e6:ba:da:73:5e:da:72:3f:27:
         c9:4e:89:4e:66:15:fa:2f:af:6f:28:05:3b:25:b5:e3:e7:fe:
         32:e4:a5:a2:a5:57:6c:c1:8d:90:db:0e:8b:5b:e5:91:a6:68:
         bb:0e:8f:ba:ed:4f:00:26:15:e4:03:10:6d:cd:b9:3e:1e:b1:
         37:34:7c:1a:83:e4:1a:5b:55:8d:18:ca:f3:7c:bd:d1:ee:3a:
         75:27:7b:6c:6a:83:84:48:83:34:e0:a6:d9:ee:78:91:46:57:
         1d:ae:b5:ba:69:bc:48:28:0f:08:7d:fa:93:22:d1:09:38:a1:
         a2:ec:61:99:36:4d:6e:2d:e4:6b:26:7a:92:fe:d4:1f:26:12:
         3d:cc:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:13 2025 by rpki-client