Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          men4glKxCDSoPqvazBUT0MG4LrwwpLDcluOazmtaEJg=
Subject key identifier:   1D:F3:00:E5:36:56:A6:F4:44:24:F6:D0:5B:DB:3F:FC:F4:1B:56:6C
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       0199FC588F29D466EF58952D79585FB50D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 12:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:26 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: 4/KW7JfgxpLph8mfpZcOGWjiLB9fyTpt0KG9yGt9EqY=)
                          2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:8f:29:d4:66:ef:58:95:2d:79:58:5f:b5:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Oct 19 12:01:26 2025 GMT
            Not After : Oct 20 12:01:26 2025 GMT
        Subject: CN=1df300e53656a6f44424f6d05bdb3ffcf41b566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:b1:d2:85:91:de:71:78:04:47:61:35:86:
                    ed:69:26:f8:a2:80:cb:c7:22:06:27:f7:77:0b:9a:
                    18:41:bc:c8:3f:4a:e6:e6:78:d4:d2:74:07:7f:19:
                    b0:0d:ff:a9:e0:66:13:ac:a8:87:8c:7e:22:79:57:
                    a2:10:e6:4c:db:a6:76:68:b5:29:aa:91:2d:62:cb:
                    51:f5:67:f8:f3:4c:16:f1:f8:f8:08:27:03:bb:67:
                    0a:8f:8f:39:dd:38:aa:cb:5d:9e:6c:2d:9c:ff:95:
                    c9:b3:14:f4:92:a6:da:f8:f0:c2:35:3f:15:6d:48:
                    54:59:10:17:ec:e8:13:5f:70:36:49:1f:3c:0e:0c:
                    d5:25:95:d6:0b:cd:d9:6b:89:6a:f7:70:b1:6f:da:
                    4c:88:65:c0:21:1a:d7:be:20:e3:c6:dc:d6:c6:99:
                    b8:fa:d4:ee:97:bc:b7:54:cc:6a:6e:be:85:5f:6c:
                    63:91:17:e1:6e:c7:c3:c4:ba:7d:e4:d7:43:1d:d1:
                    ef:05:eb:e4:33:22:30:b5:b4:48:e6:ee:88:c8:6d:
                    98:2e:de:ab:c6:59:ac:91:48:90:cc:82:c2:15:ed:
                    a6:5a:d6:39:55:3b:72:68:f9:fb:89:1c:e6:c5:65:
                    43:9b:c4:26:30:ec:5f:d6:a0:70:0d:f0:5b:c3:44:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:00:E5:36:56:A6:F4:44:24:F6:D0:5B:DB:3F:FC:F4:1B:56:6C
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:58:bd:46:fd:15:bc:88:c8:f5:45:b8:1a:23:83:9b:ee:48:
         75:4f:f9:25:23:21:97:da:30:a6:1c:dd:f2:77:5d:82:eb:98:
         d8:32:d0:87:ba:39:e3:69:3a:db:92:59:5a:10:03:90:4d:59:
         59:77:2b:fd:18:3a:50:7f:80:0f:f4:be:87:e6:34:51:cc:9c:
         e0:c7:96:2e:c5:e2:3d:12:03:4f:76:ef:c6:63:f7:50:9b:f2:
         23:0e:26:92:40:66:e1:d5:55:b5:d8:31:95:c7:1d:12:a8:94:
         22:a1:ad:e6:93:c7:01:bb:c7:e1:fa:82:76:5f:70:e4:f3:5e:
         7f:46:54:7e:d2:33:ec:c3:ec:84:1b:43:2f:ea:a1:3f:94:8b:
         4b:b3:28:35:bf:33:68:d8:96:cf:69:e0:8c:a1:eb:80:12:8f:
         9a:1f:7e:5a:67:43:63:d6:14:1f:5b:12:48:7a:81:54:de:a7:
         2a:dd:32:22:76:15:58:86:cb:d6:3f:8d:1d:97:ed:40:28:98:
         e2:9a:6f:14:eb:25:ee:67:c6:d4:9d:d5:d7:c6:1f:69:0f:01:
         20:85:bb:84:de:51:f1:f5:f8:aa:37:55:9f:40:0f:e8:e1:76:
         5e:34:65:fc:ba:cd:14:e8:c6:36:0b:b9:04:d8:17:ac:e0:88:
         01:c9:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:15 2025 by rpki-client