Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          BfqS1aFylqWgsoKTXKX4E7s8SLdVzY7Kz+hA1mG0cqU=
Subject key identifier:   54:A1:83:F3:92:52:B3:DA:55:EE:DD:06:72:38:6A:2E:DB:93:26:35
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       0199FEB4B90B3F56348ED81C2437B3FAB991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 23:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:20 +0000
Files and hashes:         1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: RNjUO8lcXXTnmXoL9uw8ilf3wP4kETlUjnblY6R4RDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:b9:0b:3f:56:34:8e:d8:1c:24:37:b3:fa:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Oct 19 23:01:20 2025 GMT
            Not After : Oct 20 23:01:20 2025 GMT
        Subject: CN=54a183f39252b3da55eedd0672386a2edb932635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:0f:8b:44:c9:9a:45:ab:6f:a3:d3:1c:dc:
                    97:4f:ed:e9:78:12:6d:20:e9:ef:ef:16:a9:70:9b:
                    73:ea:e0:37:98:64:d6:a3:cc:ba:69:e7:40:60:c5:
                    b3:a7:c7:0d:22:93:fa:b3:fc:e9:dc:ca:b0:a4:b1:
                    12:82:1d:ec:a5:4d:af:95:42:15:b9:10:63:63:42:
                    70:28:7f:4d:a6:d9:14:25:d1:f9:f2:86:4f:67:12:
                    4b:79:0e:5a:71:28:98:f4:d0:72:b8:98:2a:ca:db:
                    29:cb:70:4c:19:88:00:f6:36:ad:1a:40:88:46:a0:
                    77:47:d3:41:08:e3:b6:30:d8:4f:70:3c:c3:ca:30:
                    76:8b:1f:39:46:f6:6b:15:7e:ae:4a:e0:ef:24:78:
                    1d:75:d8:4c:e7:6a:bf:b1:63:11:ea:a1:0e:01:1b:
                    06:5e:77:e0:b6:96:8c:0e:e8:64:1d:b9:49:6c:87:
                    f7:e1:bc:87:91:75:d1:cd:56:e9:3a:49:eb:ae:40:
                    27:17:18:73:11:e5:19:4f:d7:43:2c:3c:67:88:bb:
                    5c:fd:7c:67:c1:da:d2:cc:07:ac:ac:4c:12:b3:f7:
                    8c:ae:88:3d:be:11:63:88:b0:2e:67:33:0a:23:59:
                    96:74:4e:c3:62:1d:fc:dd:7b:c2:be:f6:94:3d:ad:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A1:83:F3:92:52:B3:DA:55:EE:DD:06:72:38:6A:2E:DB:93:26:35
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:da:2d:3b:42:43:57:b5:1e:61:5e:6c:ce:12:93:9b:92:09:
         67:b5:5a:94:d0:79:fb:8a:83:fd:f5:38:5e:39:ef:0b:7e:5e:
         26:c6:4d:5c:61:2f:09:35:e5:0b:6f:dd:7c:f2:d8:1c:ff:d9:
         ab:13:f8:7b:2f:d9:d8:71:cc:ed:41:2a:c8:ac:82:7f:8e:11:
         f0:bc:fa:ec:48:af:6e:7c:56:83:a6:51:4d:52:75:c1:ce:70:
         77:c3:0c:ff:2b:c1:65:e6:92:de:b3:fe:02:26:23:32:29:35:
         c6:b4:51:7e:fc:68:b9:05:68:7f:40:b9:61:9a:fc:ed:4d:83:
         c2:2f:f6:c9:37:ec:b2:3a:88:04:85:31:63:46:de:5e:f8:aa:
         da:ca:ee:0d:71:d5:69:7c:97:c9:71:28:31:53:28:e4:e6:58:
         ff:d0:07:72:99:9c:98:5b:70:2b:1d:70:20:48:59:85:78:70:
         64:bc:41:39:45:ae:e0:f4:1f:b4:67:19:15:39:2e:2c:31:43:
         57:3f:cb:93:f7:a0:31:c1:3f:eb:62:a6:02:a0:16:c2:25:2e:
         c5:dd:de:b9:24:e3:00:8d:6f:fd:85:65:9f:d2:e6:7f:1f:12:
         15:7d:88:86:9f:b4:a8:ea:be:a6:66:32:50:d4:d0:2b:bc:8b:
         d0:2f:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:15:42 2025 by rpki-client