Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          5uKqS8B7VJtxYmG6ChonXH9fmh0OoaA3bkgPv6OPg3U=
Subject key identifier:   D4:CC:B6:2A:59:9F:94:6D:C5:B7:21:76:70:74:DD:08:DB:A9:D9:04
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       0199FAD825FEF34466477EBCD00A19248317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 05:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:33 +0000
Files and hashes:         1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
                          2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: 86SzHGbJTjJE4pNZOnMzyRbGsSAj+vUCxaiTLQQ5m0k=)
                          3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
                          4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
                          5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
                          6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
                          7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
                          8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
                          9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:25:fe:f3:44:66:47:7e:bc:d0:0a:19:24:83:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Oct 19 05:01:33 2025 GMT
            Not After : Oct 20 05:01:33 2025 GMT
        Subject: CN=d4ccb62a599f946dc5b721767074dd08dba9d904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:54:e8:29:d4:05:fe:be:1d:f6:62:af:c0:
                    36:69:87:d1:40:42:78:93:c1:75:f3:84:5d:c5:97:
                    8e:33:78:a4:30:de:bf:61:99:2d:35:de:77:65:3d:
                    f2:23:4f:c9:6e:8b:58:f2:b3:2b:73:67:ff:e9:88:
                    2f:6e:90:b4:ca:d3:79:fd:c4:cb:dc:87:fd:7d:7f:
                    45:0b:f7:08:61:8a:d3:0b:18:aa:fe:e1:c0:44:fb:
                    0d:82:3c:7f:a3:8d:a8:38:0d:7a:de:e4:7b:d4:ec:
                    21:23:81:a3:d0:39:df:8f:fd:10:5a:ce:13:db:24:
                    f0:ca:26:39:4c:11:5a:db:c3:44:06:10:10:2d:89:
                    5c:b5:c0:f2:77:1d:80:b1:9d:42:52:da:77:98:72:
                    c6:7e:ef:c8:27:a0:ee:e4:6f:e5:69:7a:4d:de:f5:
                    fc:05:04:97:40:53:10:61:76:c2:82:30:eb:75:15:
                    35:b3:e1:00:f5:45:da:52:d6:9f:d0:28:c4:d6:19:
                    1a:c8:f0:71:76:69:86:f8:25:ae:d8:ff:77:4e:32:
                    72:c9:82:22:ed:73:d9:26:6d:e3:8b:76:4c:17:9b:
                    35:0e:61:73:60:0a:d9:52:d3:97:e3:fc:be:2e:d4:
                    75:8e:62:1a:98:5f:6a:ae:40:59:e7:d5:dd:8f:dd:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CC:B6:2A:59:9F:94:6D:C5:B7:21:76:70:74:DD:08:DB:A9:D9:04
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:c0:33:b6:a0:ca:6d:92:3d:1a:d2:e2:ff:ce:cd:d4:8f:
         1f:86:61:39:4c:3b:49:94:46:07:d9:aa:6f:46:81:d0:b2:e5:
         4e:c7:5d:9d:5f:08:e9:4a:34:db:6c:08:8d:be:38:be:e9:1f:
         7b:12:9b:95:be:b8:d4:42:e7:95:75:7c:a4:95:13:bf:60:c1:
         aa:0e:3f:e8:06:73:9a:dc:da:4c:75:ad:87:cc:2e:64:f8:5c:
         f4:83:f0:67:4b:a9:f2:fb:5b:75:56:74:17:9b:60:0d:cc:a2:
         af:33:6f:0a:c1:13:3e:7e:75:8b:d5:7e:a4:ae:e0:d1:2b:66:
         62:43:14:ea:ce:33:6d:76:c4:1a:98:6d:1f:2e:8c:ab:7e:10:
         1d:0a:db:5d:7e:cd:d9:d6:f3:e9:04:9d:d0:76:f7:a2:ab:8e:
         bd:24:79:8f:03:d7:bd:8f:a1:dc:b8:cd:36:02:f9:d7:63:0a:
         90:3c:dd:c7:42:f3:7c:0b:b9:50:0f:e0:ef:e8:be:0e:bf:95:
         91:6d:d7:ea:85:a9:d3:31:4c:b6:d2:7d:6b:07:61:0c:ca:8d:
         b2:b9:62:c1:d6:40:ee:c3:9d:b4:d4:6f:fb:bd:89:29:a7:3c:
         d2:c6:72:55:61:5b:7e:b2:b9:e4:73:54:5d:e7:59:20:64:01:
         59:b9:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:18 2025 by rpki-client