Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File:                     KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier:          PoC4djB3UONY2wi4vYdY/rMiY96JwkLWqCMaCGf28MI=
Subject key identifier:   47:A8:D1:37:0E:7A:89:82:43:75:29:E7:89:62:54:8A:A0:76:A3:41
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer:       /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial:       0199FB45B5D9A449A9BF173D557372F4AB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 07:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:13 +0000
Files and hashes:         1: 4AoUOv0FI3bJOWNB03o-fqag36g.roa (hash: lE0wM7qhSogQ0qa/Rafsku4glOJqw2l70ocwo2WeE/c=)
                          2: 5tesipqYkRXRRWnVZJDo92wLa7o.roa (hash: sefnYYGAGevYCEP5NBJ+Xnm/tUS4YEP2waf49250BH4=)
                          3: ArxGq_kltFKX5YUm3DRNAjYGQGc.roa (hash: 5XM5lzW30JX9FmEqPAciFGZ+SNFRk053GOf+9YREVN4=)
                          4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 71lUdqk0BY9qKCWzcn0WPz3h0yRrB0McuNu6swcEab4=)
                          5: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:b5:d9:a4:49:a9:bf:17:3d:55:73:72:f4:ab:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
        Validity
            Not Before: Oct 19 07:01:13 2025 GMT
            Not After : Oct 20 07:01:13 2025 GMT
        Subject: CN=47a8d1370e7a8982437529e78962548aa076a341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:a4:16:45:1d:69:23:f5:bf:7c:e6:c6:fc:
                    11:31:1e:02:80:7f:1a:b2:c5:fa:1b:d4:61:24:06:
                    5a:f2:39:a2:00:ef:87:04:86:be:1f:b3:ab:7f:ca:
                    00:50:b0:9f:3d:48:ae:52:c9:98:ac:7f:9f:66:30:
                    8a:5f:ab:e1:a4:98:b0:c4:2c:89:17:97:15:c9:0b:
                    d9:c1:e3:fb:06:20:ba:da:9f:3c:e2:fd:aa:e7:26:
                    fb:97:45:b8:6e:d5:5f:7a:ec:1a:ed:80:14:2c:d8:
                    7f:74:6f:79:bf:86:98:1e:1e:45:35:34:72:ec:2c:
                    ee:ed:da:1b:5d:89:5a:9e:0e:71:67:f9:45:a5:c2:
                    20:32:f5:80:1c:aa:62:8b:1c:a0:7a:c1:7e:27:e4:
                    d8:49:a4:d5:03:29:0f:62:8b:50:5b:e5:86:60:d8:
                    62:87:a4:c2:8b:c9:70:1b:6b:f8:5b:38:ae:77:51:
                    2d:d1:0f:9a:75:f6:62:8c:72:7b:b9:0a:51:da:b1:
                    bf:69:7f:fb:69:10:0d:d0:fb:27:95:ab:a7:fb:af:
                    d1:7f:ec:b7:7c:e4:99:bf:c0:c5:fd:1c:20:87:0d:
                    f6:6e:87:a6:64:38:14:b6:a0:8e:3e:28:a1:72:b0:
                    a4:db:c7:36:a7:55:38:b1:30:8b:be:ab:df:1c:7c:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:D1:37:0E:7A:89:82:43:75:29:E7:89:62:54:8A:A0:76:A3:41
            X509v3 Authority Key Identifier:
                keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:72:1b:7e:85:88:f1:40:c6:6e:8d:f2:f7:f2:9e:ea:9d:
         1b:00:b6:03:83:7b:a3:3f:0a:75:6f:7e:a5:99:49:87:00:94:
         09:ab:90:32:2a:d1:de:c5:78:55:d0:63:45:0c:c5:7e:d8:9d:
         18:b8:c1:4f:1c:3f:e3:3d:0b:7a:68:71:17:45:6d:83:e1:80:
         b2:26:87:7f:37:74:d6:3f:53:89:54:54:0f:8d:f0:cf:9b:00:
         92:17:e1:6e:0e:7e:0b:c3:1e:5a:c7:b4:d8:17:14:b3:ce:eb:
         58:a2:63:c7:c3:4f:6e:84:bf:d8:46:77:11:a9:71:bf:3b:26:
         76:aa:b0:ed:40:50:1b:42:db:34:b5:d7:a0:7f:42:0e:a1:43:
         29:80:42:85:87:5d:8f:eb:0c:2b:a2:ef:53:7d:f7:47:40:8e:
         d3:22:47:e2:ab:66:13:fc:b8:85:a9:e1:11:db:e0:43:3a:e3:
         7e:9a:80:b2:ce:5f:b8:6f:70:b0:b2:9b:8b:a6:63:1a:18:6f:
         13:54:22:ea:86:28:52:7e:d0:58:c9:44:16:f0:71:c9:d2:12:
         13:cc:82:72:2a:17:41:e1:9b:31:23:07:e4:37:a9:b0:1b:69:
         4d:f0:fc:80:c7:84:e1:4f:fc:19:1f:02:61:a7:9e:75:f0:b2:
         ca:66:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:43 2025 by rpki-client