Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File:                     mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier:          pSP62fgEV1jumZqsd1Lz++6ZfMQ9Nq2UPeM26TnV2lk=
Subject key identifier:   64:CC:CD:F3:66:3F:DB:FA:B9:C1:16:7D:28:5B:A5:63:15:6D:07:11
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer:       /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial:       0199FB46025AD3A1635DEEC57E2316FA5349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 07:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:33 +0000
Files and hashes:         1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
                          2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: SCRXcSRLlbwSAXPQ0t2vCqNKAlv7MuloSEJxs7RouHk=)
                          3: tYbAWeHoGjW4_0OkM4yMqFJOybI.roa (hash: htZo5UqGGeI3toMrh3D8Z6/VXgbSZywSkH3LLl1S9Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:02:5a:d3:a1:63:5d:ee:c5:7e:23:16:fa:53:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
        Validity
            Not Before: Oct 19 07:01:33 2025 GMT
            Not After : Oct 20 07:01:33 2025 GMT
        Subject: CN=64cccdf3663fdbfab9c1167d285ba563156d0711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:2d:51:ab:d1:4e:0f:82:4d:5e:4a:30:22:
                    2a:c3:05:47:62:b3:61:ef:fb:74:1f:0a:fb:72:49:
                    3c:a3:6b:ce:bb:bf:46:13:49:8c:25:2e:55:ed:48:
                    b9:32:27:0e:63:39:7a:a9:e3:dd:28:a3:e5:e4:da:
                    56:69:4a:e6:74:41:00:e5:64:ba:45:5c:28:9d:94:
                    33:66:c9:b2:49:1f:c0:13:35:a9:b2:c6:cd:22:7d:
                    95:38:1e:78:1f:14:c5:ff:e2:c0:db:29:9d:40:07:
                    e2:65:a6:e0:36:90:cd:a1:2f:06:c1:9f:09:25:dd:
                    be:cf:d0:bf:6c:5d:6d:29:1c:d4:a4:c4:ab:e7:b9:
                    f9:3c:5a:fa:a0:44:76:f9:6e:c8:d0:99:d4:da:98:
                    f6:7e:43:e2:2c:08:15:ce:d6:7f:95:5e:06:24:2c:
                    f5:22:58:98:d1:13:e8:ad:3d:17:23:7c:72:17:38:
                    d0:4f:58:a1:6f:94:fe:c8:e6:60:cd:df:66:40:25:
                    35:47:ce:87:ad:67:6c:1a:9a:a2:1e:f0:40:70:e4:
                    e9:fe:32:50:f5:79:63:c5:95:2a:15:18:89:41:17:
                    d9:a9:27:ce:e3:1f:a8:76:33:a7:a1:ad:20:3c:20:
                    e8:6d:d0:ca:fe:24:cf:43:08:83:f2:4d:cb:12:f0:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:CD:F3:66:3F:DB:FA:B9:C1:16:7D:28:5B:A5:63:15:6D:07:11
            X509v3 Authority Key Identifier:
                keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:ba:e9:f3:81:15:62:93:bf:9f:ca:4e:ac:82:2e:4c:61:
         9d:35:b3:6b:60:dc:58:ca:b7:d9:ae:c4:dc:23:26:4a:4b:df:
         88:c0:05:cb:c4:cb:e2:8b:8a:cd:b5:52:91:bb:24:f2:ec:98:
         db:8a:af:0a:47:4f:12:97:40:67:e9:0e:b5:69:5b:51:6f:9e:
         60:ee:ac:b1:98:fc:47:c1:55:20:a9:c9:50:97:22:44:41:f4:
         a7:c3:b5:ce:16:2b:fa:1e:18:6c:9c:a7:6e:89:d0:62:7e:64:
         76:9a:d1:44:c7:17:f1:48:80:d2:aa:0b:86:f7:df:20:4e:a3:
         68:86:bd:80:4f:48:66:2f:10:62:f2:22:86:fb:3a:43:ee:d8:
         87:ce:93:9b:33:cf:ed:f4:95:1c:8d:9e:11:bd:e5:fc:90:aa:
         4f:0c:09:1d:38:36:6d:59:d4:41:aa:29:16:0d:18:8d:66:2d:
         68:11:c7:85:f2:34:37:a3:37:52:ec:be:26:e2:f5:4d:74:de:
         37:5c:4b:2a:f8:7c:ba:14:a4:59:62:bd:54:a7:52:51:2f:56:
         71:eb:57:bc:f8:07:6a:80:cd:1d:f8:0b:b7:9b:88:11:72:3f:
         e4:a3:48:e3:22:76:5f:2c:cf:aa:24:10:70:3d:55:1b:f3:58:
         5d:bd:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:35 2025 by rpki-client