Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          iDb2ZcFSx2T6AqAqGCbDSQcZ9ehZE4fhbDkCPcmVKjI=
Subject key identifier:   66:6A:A6:9F:5F:D1:DD:49:65:A7:B4:98:10:DB:16:60:F4:18:E8:51
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       0199FFC8BE1EB062B864C8E5643188E11D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 04:02:49 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:49 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:49 +0000
Files and hashes:         1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: A72jhi8tjkTZ+rIqEFlCJQIlvxQGwqqu9zjU42zUh6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:be:1e:b0:62:b8:64:c8:e5:64:31:88:e1:1d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Oct 20 04:02:49 2025 GMT
            Not After : Oct 21 04:02:49 2025 GMT
        Subject: CN=666aa69f5fd1dd4965a7b49810db1660f418e851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:ba:bb:47:71:cc:6f:2a:ac:10:38:60:9c:
                    19:75:be:54:65:11:4f:c1:18:2f:de:4b:df:c2:9b:
                    21:21:3d:a5:57:31:11:e5:c6:4a:b0:d5:71:04:4d:
                    b2:16:af:88:ad:7b:ad:4f:93:d0:05:e3:11:50:62:
                    78:33:bb:b5:a2:99:b4:1c:27:9f:e1:f9:db:98:67:
                    96:00:fa:26:8e:b0:ca:60:75:4e:39:a1:48:7e:29:
                    d1:65:a7:f5:a8:c3:4c:68:92:44:7f:05:44:79:5f:
                    d1:d0:4d:77:34:a2:58:08:15:91:e7:ab:54:ef:63:
                    15:55:c8:71:41:b3:34:f3:ef:35:15:ac:55:1c:b8:
                    97:af:4e:cc:6f:8a:3d:51:b7:eb:47:3a:ea:21:55:
                    75:0b:f4:69:f5:b9:40:e9:7b:92:52:a3:fe:6b:8e:
                    bb:63:a5:5c:f4:5c:b9:e7:e3:8b:a9:07:73:7a:c6:
                    c3:fa:1a:b8:2c:06:ca:ce:39:c4:2d:0b:64:a6:86:
                    06:81:8d:db:de:0a:25:8d:e5:07:42:e1:0c:de:00:
                    58:e8:32:19:9a:ac:36:c6:d2:21:7f:aa:57:95:4a:
                    7d:9b:7b:fc:70:b4:7b:0e:3f:40:44:d7:83:5c:bb:
                    cc:92:bf:a5:bd:dc:91:06:3a:a5:13:42:b6:16:b0:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:A6:9F:5F:D1:DD:49:65:A7:B4:98:10:DB:16:60:F4:18:E8:51
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:69:a6:4a:de:91:0b:9a:bf:bc:7f:1d:f6:e1:f6:c6:3a:
         82:f8:55:80:87:59:57:52:06:67:f8:13:59:e5:60:4a:14:71:
         a9:18:76:b1:d8:09:59:7f:09:7b:f4:32:2e:31:f2:26:f4:c8:
         3e:26:f7:77:57:b2:7f:73:83:9e:b5:f5:6c:f9:9c:3a:52:4e:
         a3:10:70:c3:65:66:d8:e9:85:d2:30:9c:12:7c:8c:88:a8:67:
         73:06:1a:dc:e2:e0:fd:fc:ac:f9:da:62:b5:ee:fd:27:e2:c9:
         05:57:90:ea:70:06:25:28:46:58:36:e1:75:c6:87:2e:96:31:
         0b:bb:d6:99:1e:da:b0:29:2a:51:2c:fd:5d:38:7c:d6:dc:d4:
         e8:86:0d:79:7f:36:d9:aa:d1:9f:fc:ab:c5:2b:fd:3d:64:a5:
         2c:b1:33:25:ac:27:8f:47:4b:d7:78:e6:1e:f8:e2:49:7c:e1:
         47:ea:67:f5:df:55:c6:73:38:c1:ee:f4:76:43:9e:59:df:5c:
         1a:00:d8:d0:45:26:b2:db:c5:39:9c:db:11:9c:c5:de:64:d5:
         98:0e:d7:72:81:05:2f:3c:f1:7a:91:64:d2:cb:be:22:61:a1:
         29:73:4c:18:6f:84:84:38:47:cd:b6:40:61:1e:9a:7d:7e:73:
         e8:de:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:55 2025 by rpki-client