Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          Wf52FAmiR8nPDFutIlLk2/3SnUMZS9UVglCnqvwfPJI=
Subject key identifier:   1A:C7:39:C6:37:B4:A6:AA:CA:EC:94:7D:35:A9:CE:87:16:D7:0C:8D
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       0199FC8F581A6357D7F37FB86FDCB76EF0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 13:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:16 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 7iABV891l+lFiF/yjsPreXDOyLsIed8OHdb6kRywyg8=)
                          2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:58:1a:63:57:d7:f3:7f:b8:6f:dc:b7:6e:f0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: Oct 19 13:01:16 2025 GMT
            Not After : Oct 20 13:01:16 2025 GMT
        Subject: CN=1ac739c637b4a6aacaec947d35a9ce8716d70c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:46:45:8a:e6:e1:51:c6:59:7b:3a:3c:38:
                    ca:ae:f8:10:ab:36:30:96:fe:fd:ad:99:b8:38:97:
                    90:43:0c:ae:68:9e:54:1e:8c:5a:51:88:67:98:5a:
                    37:ee:7a:23:60:9e:b6:1d:aa:15:33:51:9d:9b:02:
                    49:be:9c:8c:3a:73:ef:56:7b:91:f9:35:49:49:88:
                    85:83:09:5c:72:1e:4f:15:c8:16:10:ad:cb:34:b6:
                    29:1d:11:f7:01:63:8a:e5:e3:6a:91:8b:f5:d0:70:
                    10:77:e6:14:37:3e:49:78:b7:44:22:fc:51:4e:18:
                    2e:16:b0:ec:28:f8:20:5c:62:5c:a0:b3:d6:3f:fa:
                    6e:05:0c:df:00:ab:c3:d3:41:c8:d9:df:17:05:68:
                    d1:4c:25:d4:fa:3c:44:0d:c0:e9:7d:4a:b8:6d:41:
                    96:6a:65:9f:6a:a3:7d:84:b8:e1:af:6d:11:c5:fc:
                    71:7e:77:c3:d1:da:35:a1:86:0b:a7:0f:eb:59:d5:
                    74:8b:dc:76:7e:9b:dc:56:53:fd:7a:ba:5f:71:34:
                    28:31:37:1d:80:b1:cf:20:2c:cd:0a:94:43:3f:8b:
                    86:3c:00:cb:5b:6e:b8:59:17:4e:4c:a8:3a:37:3f:
                    10:99:b1:93:bd:76:0d:90:48:89:7c:8f:73:25:a5:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C7:39:C6:37:B4:A6:AA:CA:EC:94:7D:35:A9:CE:87:16:D7:0C:8D
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:87:e3:e8:4f:d7:10:ff:de:0b:98:93:61:0c:f1:59:74:
         0e:3a:80:19:84:3a:41:54:67:7d:ba:40:53:3f:32:c1:b6:52:
         4c:1a:0f:64:96:ef:11:5b:ed:1a:4b:c9:00:74:24:31:da:1f:
         d6:43:2b:99:16:2c:6b:2b:e2:ba:ff:3e:a5:3f:59:14:16:9f:
         fa:42:96:04:b6:a1:1a:da:3a:82:47:0a:2d:ad:42:77:43:71:
         74:bb:86:8e:01:21:0a:32:88:09:a9:89:af:9c:6d:47:2a:f2:
         c4:b9:93:fb:69:b6:39:1c:39:17:16:23:0f:04:4b:f3:de:6e:
         40:a3:7f:35:34:f3:d9:94:ad:af:47:99:4d:ad:7a:03:de:a4:
         e2:74:5f:94:57:0b:61:1e:86:3e:3d:ad:d4:25:e3:d6:92:4d:
         d4:3b:76:27:ee:6e:11:d7:af:c0:32:6a:8f:b3:8e:e0:e1:29:
         a7:b9:cf:32:47:61:3e:ee:93:38:56:9a:79:3f:b9:2d:d3:43:
         77:f7:af:0d:4a:2d:03:73:75:02:50:29:06:a7:90:1b:ab:85:
         27:e1:e6:a1:ac:05:65:2d:31:8c:88:c2:b7:27:98:f9:47:4a:
         3b:c3:b7:5a:a4:d5:ec:83:c4:a0:7a:25:a0:34:1b:30:99:54:
         8a:cb:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:00 2025 by rpki-client