Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          v6Ia2vAVvkqV9TkTYP5XbWHBVmydDLicltiPzJBR7B4=
Subject key identifier:   3E:C9:08:6F:95:B7:D6:70:4B:39:94:1A:B6:EF:07:CA:F8:1A:3D:97
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       0199FC217A389CDE4F18334450658AD0C2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:16 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: XY4VcR5983inpu7B7ajkS/t7pqWXjXPlCLRDn0ouzyI=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7a:38:9c:de:4f:18:33:44:50:65:8a:d0:c2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Oct 19 11:01:16 2025 GMT
            Not After : Oct 20 11:01:16 2025 GMT
        Subject: CN=3ec9086f95b7d6704b39941ab6ef07caf81a3d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:90:fb:55:db:02:83:7f:fe:b0:39:52:7d:
                    42:a7:79:ee:ec:78:07:fd:72:44:e4:e6:cb:41:e8:
                    e0:f1:88:91:e0:58:78:c5:e9:6d:ef:5b:14:7a:08:
                    7a:51:85:8f:d5:ca:e0:43:32:ac:b8:89:ab:d6:29:
                    f1:95:61:f3:1f:0e:ad:9c:78:90:4b:08:c5:94:0b:
                    b7:e4:67:86:9e:64:88:d9:a8:c0:5c:18:73:f4:7f:
                    11:6b:ef:e5:0d:e1:f9:7d:bb:85:26:ef:65:97:c7:
                    f9:e2:af:7d:7c:d0:36:e6:1d:39:a7:ca:97:10:52:
                    b6:3c:41:0b:e3:47:42:69:55:59:83:d5:b5:47:85:
                    22:ac:74:9c:99:bc:0e:fd:09:73:82:6e:3b:e2:c2:
                    c8:8b:45:2f:79:44:e8:ee:9f:2b:eb:e7:ca:cb:bc:
                    10:18:43:5d:83:c2:84:03:b6:be:55:0f:eb:d7:71:
                    c6:59:35:92:f1:2a:c2:2c:20:a2:aa:91:e4:11:05:
                    c7:6a:2f:d6:1d:d1:b3:48:87:b2:80:b9:fc:37:2b:
                    06:0e:dd:69:6a:29:ec:f5:44:21:5a:50:2b:66:6a:
                    f4:0f:55:bc:a8:20:bc:d9:98:63:68:86:5a:79:63:
                    3f:36:eb:16:1f:dc:50:67:03:6a:04:33:dc:19:0d:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:08:6F:95:B7:D6:70:4B:39:94:1A:B6:EF:07:CA:F8:1A:3D:97
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6a:d4:a5:88:94:19:49:4d:e6:7d:80:d6:db:5d:20:d5:34:
         ba:aa:08:12:ea:66:2d:05:15:96:31:5d:35:ea:47:03:22:8f:
         ca:41:e0:2b:5f:40:6a:65:81:c4:a2:fa:87:b4:de:d7:f2:56:
         2d:4f:8b:7c:05:fa:91:28:47:8c:0d:2d:c5:ef:ba:c2:e5:04:
         82:cc:b6:08:62:c4:2b:b9:b8:60:af:82:43:7a:72:33:15:12:
         a5:58:d1:52:9a:0a:a7:98:58:fa:66:5e:1a:fb:9c:c7:ac:b7:
         b1:e8:6e:c2:3c:1c:d7:32:9b:81:45:ad:4b:9e:6f:d5:f1:49:
         f2:ae:cf:36:66:aa:45:5f:8c:5d:d8:e0:76:ab:94:dc:15:04:
         c0:a7:95:aa:76:a4:25:ef:8f:fd:27:67:1d:d4:59:12:e1:e5:
         4f:92:35:1c:a2:47:21:85:95:62:e7:52:8a:64:e1:57:bc:72:
         ec:87:fa:d2:5e:2f:0e:f9:10:63:51:0d:f0:ac:1f:d6:f6:64:
         4e:54:ff:51:5c:9a:93:fe:d1:9a:f2:57:43:c6:a2:5c:63:00:
         a9:04:55:b0:57:1a:97:a8:fe:bb:e0:d9:89:54:8b:e9:51:99:
         30:e3:1c:b1:1d:35:0d:ca:6f:4a:db:3d:7b:7c:7a:af:e5:a2:
         ad:8e:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:45 2025 by rpki-client