Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
File:                     wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft (raw, json)
Hash identifier:          aLS2IW+sqSvU4ypMNq6xbwPFYmGb9R/1eCSjOfGTT4s=
Subject key identifier:   3C:3E:D5:48:12:91:B4:F4:BE:C1:65:59:41:C5:8A:DC:DF:D8:F3:0E
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Certificate issuer:       /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial:       0199FC584B81B15984E215C6BA96513F69A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 12:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:08 +0000
Files and hashes:         1: Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa (hash: gaxxG0d8OZJYS5NjwczzEeAHbzOn6c5dbyMUhDM1ej8=)
                          2: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl (hash: zzMU/K/Ddt6nSd0sZ7zF6zb4xaCllp31weaoxPcu5gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:4b:81:b1:59:84:e2:15:c6:ba:96:51:3f:69:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
        Validity
            Not Before: Oct 19 12:01:08 2025 GMT
            Not After : Oct 20 12:01:08 2025 GMT
        Subject: CN=3c3ed5481291b4f4bec1655941c58adcdfd8f30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:70:4e:e0:7d:c6:61:c0:dc:98:4e:b1:79:
                    29:1e:bd:e0:ad:7b:a3:1c:9c:87:b8:ce:25:9d:2f:
                    67:e0:a2:52:0b:cc:6b:81:96:82:99:02:d4:3d:4a:
                    54:3d:41:d3:24:12:73:9b:53:8c:f1:2c:79:12:c0:
                    6d:d0:40:e4:8d:f6:07:f8:f6:cb:af:ae:b9:e6:e5:
                    5b:80:0f:4a:ac:b3:6d:b0:d5:70:9a:cf:c1:67:79:
                    ed:0e:e6:08:99:08:ff:f2:4f:4c:7a:f1:8b:53:13:
                    45:1e:bd:3e:13:34:e4:88:09:15:22:df:3e:b2:8b:
                    82:b8:ee:e1:96:b3:45:49:7b:89:88:70:c0:ca:39:
                    e5:22:af:bc:76:bd:0a:34:39:3e:fb:ca:46:0b:22:
                    55:51:af:97:30:e6:9a:ec:48:85:5f:74:07:ed:ac:
                    33:31:2d:81:14:42:e3:09:97:97:a4:b2:a8:9c:2f:
                    28:0a:31:88:8b:42:b0:5e:28:2c:f1:70:c8:36:c7:
                    a2:f6:11:41:6b:9e:93:6b:95:45:7b:bc:d2:94:e7:
                    a9:f2:45:20:d6:65:66:85:06:26:3d:ae:fa:3f:92:
                    5f:78:a2:c7:a3:4e:a5:62:1d:76:f7:a1:73:8d:84:
                    f9:bd:63:1e:b2:59:fc:9b:34:36:fc:b7:65:a1:0f:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:D5:48:12:91:B4:F4:BE:C1:65:59:41:C5:8A:DC:DF:D8:F3:0E
            X509v3 Authority Key Identifier:
                keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:96:1a:13:25:72:0e:ce:63:d8:ca:ef:34:04:96:ac:6b:ac:
         e6:2b:ac:70:3c:df:62:c7:61:ee:6d:2f:be:35:f6:66:69:e8:
         93:1c:b8:c1:52:86:13:b9:f4:39:f7:5a:ad:8a:f1:58:3b:02:
         74:5a:68:1a:62:c7:73:5f:f3:56:32:69:86:de:85:80:0b:aa:
         c4:94:ae:31:f9:04:be:4e:5a:93:f4:b8:59:99:4f:40:92:80:
         04:d6:05:64:6e:a6:11:62:1c:d9:ab:ff:7a:db:c6:54:97:32:
         75:6b:82:2e:37:52:a0:5d:97:7b:2e:0a:8a:90:f6:0e:3c:e1:
         a2:cc:b3:4d:e9:0b:2d:12:2c:5c:17:09:41:f7:0e:54:67:70:
         bc:f8:5a:44:ea:92:4e:e8:a3:bf:12:d9:9b:d9:cd:6c:b4:2b:
         4e:ad:c4:55:4f:d7:71:03:43:47:9a:70:1b:ff:c9:0a:f0:24:
         ec:b8:fb:d7:f4:c6:7a:b4:a6:73:a8:cc:ca:2a:9e:96:2d:e0:
         7a:5b:77:7a:06:1a:b0:fb:2d:e7:73:a3:de:3a:87:a7:99:a4:
         a8:a4:05:73:7a:66:25:87:34:69:bf:f2:02:a7:63:63:c9:5d:
         13:a1:b5:cd:a9:23:30:53:e2:bb:e2:59:e4:87:4f:1a:94:b8:
         57:dd:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:11 2025 by rpki-client