Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File:                     02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier:          CkZz/KckKL4aep4kvK2b2rC2DwmIbjrwgee29q5AhZY=
Subject key identifier:   6F:DA:E6:5C:E2:43:13:67:82:C6:73:FE:CA:91:90:B0:C5:63:58:98
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       0199FB45C98E099CEC6D3592A61AFCB9E690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number:          16F2
Signing time:             Sun 19 Oct 2025 07:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:18 +0000
Files and hashes:         1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: /esSs8tL6H3+gkPWydn240DDBnnqQehSWnfXD2CvvUU=)
                          2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=)
                          3: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=)
                          4: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=)
                          5: Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa (hash: yc/wxf6t0jomAnEf1S9R6mg0/BH4SO1UAudfyh2QjG4=)
                          6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=)
                          7: KoO3sM7qwS5mA20IsKbDhxcTB1U.roa (hash: tjrHSpdKeLdJHbMSWc5OzlqZez0K6Pu4HPg+UKvTrTM=)
                          8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=)
                          9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=)
                          10: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c9:8e:09:9c:ec:6d:35:92:a6:1a:fc:b9:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Oct 19 07:01:18 2025 GMT
            Not After : Oct 20 07:01:18 2025 GMT
        Subject: CN=6fdae65ce243136782c673feca9190b0c5635898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:c4:c7:df:2f:28:ec:91:28:e9:2c:b4:3b:
                    1d:f5:95:a3:60:9c:96:47:0d:2c:08:b1:4b:05:32:
                    17:ca:b5:47:21:66:6e:77:e4:bd:4a:e0:d2:b7:68:
                    87:a3:1d:67:62:12:7b:ce:bd:d6:1f:8a:34:f5:07:
                    dc:64:8a:91:c6:1b:d8:09:29:5d:52:fc:47:a1:9b:
                    4a:aa:87:44:1d:ec:b2:14:3c:3e:38:c3:73:94:50:
                    0f:92:8d:bc:83:1f:a2:f3:2b:f9:22:71:17:c0:58:
                    48:fd:12:e7:df:3f:80:87:1c:1f:90:58:a4:e2:2b:
                    f9:93:64:39:20:ff:d9:9d:ce:84:f2:3f:ee:26:9c:
                    4e:4d:18:a6:50:26:e7:1e:7a:8c:76:d4:b8:fc:32:
                    22:05:4a:0e:70:41:ab:3c:d0:bd:8d:00:79:8d:2a:
                    8b:52:66:1c:db:51:f4:e5:56:66:7d:a3:5e:37:7f:
                    14:5a:49:9c:02:1a:12:f8:e7:01:58:b3:4f:53:74:
                    4f:15:84:e7:ef:ef:69:13:61:0d:0a:d7:a5:eb:8d:
                    a3:bc:c5:c1:14:d3:0e:de:98:02:e3:e8:6a:c2:e9:
                    64:3e:b1:df:6f:09:7a:12:98:4e:49:18:97:64:d3:
                    22:d0:48:d4:da:69:20:44:92:0f:47:28:25:d6:3a:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:E6:5C:E2:43:13:67:82:C6:73:FE:CA:91:90:B0:C5:63:58:98
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:6e:10:7b:f5:79:db:04:32:d6:48:6d:ad:a7:ca:0e:4e:
         e1:9f:6a:79:b3:32:2f:a3:6c:3d:5a:5c:82:7e:da:e4:a8:f0:
         ea:48:cb:f7:b0:5e:36:25:cd:48:9e:b9:8a:23:a4:b2:56:ec:
         de:84:7a:03:be:24:10:40:50:f6:96:ae:a3:10:dc:6a:61:f8:
         11:e5:22:b8:a2:67:ed:3a:48:2b:dd:75:0c:c7:dc:8c:e3:65:
         48:ba:87:2b:7e:69:a6:39:b0:d5:5c:dc:07:a0:b9:e0:f7:30:
         e6:48:a0:ce:04:20:4b:06:a6:dc:78:17:6c:83:88:94:8e:64:
         b2:d6:77:29:a5:0e:59:85:7b:fc:5f:c8:d8:d7:45:57:2d:19:
         96:b0:70:98:45:53:2d:2d:d0:fc:d6:d7:e6:43:14:da:53:5a:
         69:f1:b1:53:46:54:a8:26:85:31:fa:7b:a2:48:ea:59:f3:f8:
         a5:f4:9b:0b:50:1e:63:53:16:ec:7b:46:65:88:e7:bf:23:b0:
         a9:94:38:a7:62:e2:78:73:a5:b7:6f:12:94:37:4c:85:be:79:
         20:39:a5:ff:c3:f8:9f:af:92:87:3f:7a:ab:17:fb:c8:d8:a8:
         ae:36:7b:6e:61:7a:3b:13:ad:83:22:b6:4f:48:af:e9:ce:0d:
         e1:45:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:24 2025 by rpki-client