Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File:                     F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier:          HMA9LxZBUIjJUQeYwTIRXSITYcNKKMuzm92INdbvAmg=
Subject key identifier:   A4:87:C5:B0:A6:3D:0D:FA:45:B3:74:08:59:7C:85:07:01:87:30:92
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer:       /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial:       0199FC8FA477AC9C6CC78471FF73C1063469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:36 +0000
Files and hashes:         1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: wuV3b9RmV4gjH2/0WetbQzChIKkQA6AY/qc3jtUVQ0E=)
                          2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a4:77:ac:9c:6c:c7:84:71:ff:73:c1:06:34:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
        Validity
            Not Before: Oct 19 13:01:36 2025 GMT
            Not After : Oct 20 13:01:36 2025 GMT
        Subject: CN=a487c5b0a63d0dfa45b37408597c850701873092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:b3:0a:6e:5d:dc:39:e7:eb:73:8d:2c:9a:
                    34:8c:83:a4:3d:f9:24:6a:20:d9:0e:49:e7:51:38:
                    01:7d:f2:08:7d:52:1f:5a:ce:c6:f1:97:84:e1:d0:
                    8f:4c:82:f6:6b:1e:f2:c2:5f:a7:2c:8d:27:56:f5:
                    81:ba:d1:eb:11:55:b9:43:85:52:d5:1f:7c:12:5a:
                    cd:e2:c5:fa:b7:7d:8a:46:5a:83:8c:d6:e4:b8:f4:
                    ab:21:d9:eb:b1:91:0f:76:39:37:84:0b:f3:06:ab:
                    a4:98:e3:08:6c:d7:37:d5:ab:45:7c:34:97:bb:61:
                    f2:53:67:9d:3c:d8:2e:ca:7b:87:76:5f:4f:37:7d:
                    12:3d:50:4b:cb:c9:c0:8e:5d:e9:2f:1a:12:a9:a6:
                    6c:91:1b:81:cf:df:f2:9a:a7:30:30:59:dd:d3:4d:
                    10:4e:4b:0c:bb:1c:26:57:ec:dd:8f:d8:fe:f1:8a:
                    11:f1:75:21:2b:c0:45:55:4a:1f:20:7b:53:78:aa:
                    17:a1:ea:19:39:7a:db:2a:03:5f:7b:e3:1e:d1:3f:
                    b5:8a:b7:f4:c5:f5:41:d1:0a:4f:ca:5e:db:86:ca:
                    d2:91:15:1e:1e:68:4b:19:58:fd:b1:99:5d:e5:b8:
                    b3:00:96:9b:d7:16:21:87:35:9c:6c:7d:3d:5d:a6:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:C5:B0:A6:3D:0D:FA:45:B3:74:08:59:7C:85:07:01:87:30:92
            X509v3 Authority Key Identifier:
                keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:55:03:e0:13:5f:cf:19:07:d0:32:23:27:71:5e:9a:83:
         41:b6:24:ad:55:6b:40:28:aa:95:47:cb:cf:66:0f:a6:a7:8a:
         c6:b2:fe:2a:99:9a:ae:9c:21:97:53:84:fd:cb:6c:29:af:b4:
         f5:8a:c8:08:92:8f:6e:aa:2f:61:40:e3:b9:6b:15:47:f3:86:
         06:14:3a:c5:bb:42:fe:40:79:b1:20:69:cf:71:87:d8:69:5f:
         cd:02:40:74:1c:ba:c0:05:c4:cb:fe:72:89:30:ae:ef:56:0a:
         5e:e2:f9:3b:be:ea:d6:d8:4c:ba:21:e5:4d:03:b1:eb:f6:df:
         4e:cb:80:27:1e:bc:ec:10:85:39:5f:a3:90:80:72:73:76:18:
         3a:f3:6e:4b:f5:f5:ae:f0:90:ba:6e:8a:a7:7b:0d:1c:93:69:
         38:51:0d:37:ec:3d:09:f1:06:27:a2:e0:de:0c:93:5b:32:93:
         b1:94:b2:11:d7:c3:ba:9a:bd:cd:9a:4b:44:eb:59:6e:9a:a5:
         dd:f3:d3:de:c8:2c:60:d6:9c:5f:1f:f2:98:fa:50:c4:8b:df:
         a2:16:c5:4e:53:95:ab:c7:c4:cb:fa:e8:6f:9f:0e:bc:32:60:
         50:49:c6:f5:70:fc:c2:e1:ac:10:60:e1:28:0c:a4:e5:6f:dc:
         28:d5:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:09 2025 by rpki-client