Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          TccOBKeTv6nKRhQm5Z7HdZo7DEb57pD2eOjtKbqrQtE=
Subject key identifier:   97:9D:66:36:0A:0F:B4:B8:27:DC:12:64:C9:57:0C:96:C0:4B:B4:F7
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       0199FC8F38D7DB929A0110F1938A41E68ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 13:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:08 +0000
Files and hashes:         1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: bJPm7f/AbWS/ARmgwQue86sCirTG/x0hXzHyDSsk0KM=)
                          2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
                          3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
                          4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
                          5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:38:d7:db:92:9a:01:10:f1:93:8a:41:e6:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Oct 19 13:01:08 2025 GMT
            Not After : Oct 20 13:01:08 2025 GMT
        Subject: CN=979d66360a0fb4b827dc1264c9570c96c04bb4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:a5:ef:7c:41:32:b0:88:81:bc:64:af:11:
                    d4:f8:1a:c7:83:96:b0:e9:f5:f9:cc:88:ef:2e:8f:
                    60:66:3d:ba:e4:8a:08:ba:9d:32:08:f0:33:36:fc:
                    95:38:53:66:bd:0d:ef:82:6b:1c:49:cc:87:05:4e:
                    b9:32:6b:43:d3:8c:57:e6:75:e7:dc:07:3d:87:25:
                    6c:76:eb:f7:5f:0f:35:c1:05:cf:37:da:fe:89:1c:
                    a5:13:b5:67:eb:bd:97:f1:e2:09:86:5f:4c:d6:27:
                    3a:c3:cb:a0:5d:9f:e0:8b:c0:c8:08:18:19:ba:14:
                    f1:4d:00:99:bf:88:87:e0:ca:7c:6f:f4:67:c1:4c:
                    95:24:52:e0:42:dd:3a:bb:ca:c8:e5:93:89:69:79:
                    ef:8e:74:aa:c3:de:00:b7:f0:24:e8:f8:67:99:b8:
                    db:3a:db:67:1e:4a:66:3a:ab:a7:3d:43:e7:28:6d:
                    9b:af:92:c2:41:d4:24:ad:08:af:d6:11:a5:9e:6b:
                    37:96:b7:10:e9:45:8d:d5:55:7f:9f:54:51:40:96:
                    74:62:b7:e3:cd:6a:96:18:3b:06:ca:cf:46:30:ca:
                    9c:60:03:33:dc:41:0a:5b:14:7f:02:e7:24:5f:53:
                    f5:17:a8:ce:d3:34:d3:49:e6:13:9a:3d:f1:25:58:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:66:36:0A:0F:B4:B8:27:DC:12:64:C9:57:0C:96:C0:4B:B4:F7
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:5d:4e:b7:90:48:bd:be:72:e3:4e:1d:4f:d5:1f:9e:09:
         7e:67:05:41:31:e3:22:2a:a2:56:ee:23:a7:e0:20:89:af:32:
         8f:b3:21:70:2a:78:47:c9:18:03:65:ef:d5:f2:59:6e:d0:59:
         aa:d8:d6:04:ee:00:f9:91:28:59:c6:b0:c1:29:4a:41:2a:5b:
         31:2f:de:93:4c:2d:6e:a6:b1:c7:b3:91:67:ce:9b:64:ca:cf:
         01:a7:65:6d:c8:df:af:67:99:58:1a:d1:cb:3c:54:d6:f2:da:
         e1:4a:21:03:25:e8:0f:9a:f9:70:6d:19:c4:03:30:41:84:7a:
         1c:5f:2e:62:85:56:d7:06:4f:48:f6:24:4a:9e:9c:5f:94:82:
         53:ce:28:f5:b1:89:d6:07:be:55:02:61:93:1b:31:a6:84:a7:
         e2:f1:90:19:03:cc:86:a3:a2:01:ac:9a:24:5a:dd:af:1a:73:
         cc:94:83:ac:8a:56:b1:d9:70:f9:d6:a9:6c:8c:68:c5:93:7c:
         3a:e7:91:10:49:80:c7:e0:a7:06:f2:0d:85:bf:b7:18:82:31:
         b4:89:92:eb:d1:9d:50:96:c9:af:a2:2c:51:8d:2f:b6:5f:d3:
         ea:86:5b:b6:7c:79:e7:d0:45:dc:ab:59:79:a6:ae:b3:eb:61:
         8f:17:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:06 2025 by rpki-client