Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File:                     w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier:          vU75bj31/uy3x97JlG/k7UASh42tm6wdDMlwG2/dsl0=
Subject key identifier:   FD:84:1F:A3:11:3D:E9:5B:4B:47:8E:A4:98:2F:01:9A:8C:AB:21:F9
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer:       /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial:       0199FBEA83D95CAEE244CCBAA47CB9FA2C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:14 +0000
Files and hashes:         1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
                          2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
                          3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: 18i40FsNCogR3c6NZE+8dzu4n950GWNYMRzBzfNOr0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:83:d9:5c:ae:e2:44:cc:ba:a4:7c:b9:fa:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
        Validity
            Not Before: Oct 19 10:01:14 2025 GMT
            Not After : Oct 20 10:01:14 2025 GMT
        Subject: CN=fd841fa3113de95b4b478ea4982f019a8cab21f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:b7:84:07:b8:8e:19:b2:05:91:78:11:37:
                    9e:fc:6c:5b:7e:5e:74:5d:8b:9f:4a:a0:52:36:e7:
                    f7:55:55:19:89:fd:64:19:66:8f:4c:a8:1f:c3:3b:
                    80:45:2e:f4:6c:0f:47:07:a2:63:c2:b1:ea:9e:76:
                    51:73:e2:39:df:12:0f:5b:bc:25:69:39:d4:09:a0:
                    90:49:d0:36:ad:fb:e7:27:2f:80:0b:fe:4e:0a:e4:
                    65:da:e5:8b:a7:85:f1:cd:26:78:3a:50:95:5e:ea:
                    e2:5d:4d:c2:b2:e3:58:c9:1c:a2:45:65:52:4b:6c:
                    29:fe:fe:35:e1:b0:e2:79:10:ef:da:b5:d0:ab:3c:
                    1b:42:d9:85:ed:a8:d3:b4:87:a1:3e:53:5f:ae:55:
                    89:25:65:07:f0:d0:e2:af:86:6e:f7:bd:72:33:0d:
                    22:7e:ac:73:7c:e2:25:b3:4e:dc:5b:12:9b:4d:10:
                    65:f4:dc:a5:34:30:a8:fa:43:ad:52:cb:da:3b:e3:
                    6a:f9:ac:38:db:ff:a8:98:36:2c:3e:53:40:28:60:
                    4c:8a:2f:52:e9:be:6a:61:fd:ae:b9:a0:fc:ea:cd:
                    18:2f:e2:3c:c8:a4:7f:5e:fc:b5:56:41:5e:39:3c:
                    5a:b8:5e:03:71:ea:b8:72:79:dd:0e:73:99:cd:f9:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:1F:A3:11:3D:E9:5B:4B:47:8E:A4:98:2F:01:9A:8C:AB:21:F9
            X509v3 Authority Key Identifier:
                keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:47:0c:7c:71:ce:f7:7c:fe:98:d6:e3:05:ad:c6:07:90:29:
         a5:21:62:2c:39:dc:f4:e1:3f:96:a9:93:b1:c4:d0:a7:f2:dc:
         9f:89:f7:74:2e:94:de:9d:c9:37:ab:c0:a4:2d:f2:9a:64:5d:
         65:05:f1:7b:8d:03:e8:93:4d:36:de:49:13:b8:33:a8:61:93:
         4f:17:bb:66:5d:1e:d5:9f:23:98:6a:c4:95:a1:f9:0d:cc:7d:
         1d:e6:77:88:fb:ed:59:ee:3e:87:5e:23:b5:66:2f:e9:be:69:
         cf:a2:43:b1:28:60:1e:9a:d4:e3:89:a4:62:0e:5b:eb:f2:e0:
         22:86:2d:3e:09:2e:60:83:95:c1:8f:72:4f:07:a6:ee:bb:ec:
         9e:d7:e9:65:2a:c0:0e:78:c2:fd:9b:cb:5f:b3:50:0e:89:4a:
         d6:0f:a9:8c:e2:fe:01:9e:e1:05:98:a7:88:4a:84:65:e2:43:
         80:79:c9:bf:84:9c:74:f7:f0:25:29:70:02:89:c5:a2:2b:6c:
         41:b4:c8:83:68:ba:a5:17:a3:7f:a2:1c:28:89:bf:08:86:15:
         c0:16:4f:30:ad:a1:ff:b9:d9:15:1f:a8:7a:e9:77:85:28:4a:
         67:f9:0d:2c:2d:7d:fc:09:36:6c:b1:9a:9e:64:68:16:b1:bb:
         a2:f7:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:23 2025 by rpki-client