Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File:                     rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier:          kIs+IZqwx06U49McUHPtmf9/Y1tvyL1ke2QIooJY+mE=
Subject key identifier:   E1:13:AB:E5:BB:05:5E:1F:94:F3:7E:56:08:CA:C6:53:05:62:E3:A6
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer:       /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial:       0199FAD7CC0B03B8F7F4111EA3E23A6867EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 05:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:10 +0000
Files and hashes:         1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
                          2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: 8CfsC9eCiHO8CHLil+SgREu69PVj3xvAnZZV8YODLGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:cc:0b:03:b8:f7:f4:11:1e:a3:e2:3a:68:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
        Validity
            Not Before: Oct 19 05:01:10 2025 GMT
            Not After : Oct 20 05:01:10 2025 GMT
        Subject: CN=e113abe5bb055e1f94f37e5608cac6530562e3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:83:ab:db:73:d2:e6:9f:32:8b:2b:bc:7c:
                    d6:56:ea:f2:ea:a2:33:25:27:a2:fc:d3:57:a1:ce:
                    33:3b:10:ed:f1:62:9e:e5:4d:b1:78:29:6b:71:0c:
                    d2:66:11:0b:1d:f5:39:b4:f8:c0:84:7c:c3:75:48:
                    58:99:ce:cf:a4:87:c5:f2:41:9b:e6:98:fa:af:8a:
                    f1:4c:ae:86:e1:7e:bc:26:59:06:8a:5a:33:b5:fd:
                    80:71:a5:9d:be:d5:0d:73:f9:62:7f:a8:61:f2:2d:
                    ba:ca:36:17:96:54:16:2a:f9:77:bf:61:f9:12:aa:
                    40:7a:da:39:d4:71:0b:10:1f:1f:02:d7:ca:55:0a:
                    78:54:fd:a0:b5:5a:4e:75:49:13:bc:32:5d:82:66:
                    57:bf:63:53:8b:09:88:43:4f:94:d1:28:36:78:bb:
                    ef:24:cc:1c:18:e4:b8:d1:b5:49:b1:d4:88:bc:c5:
                    72:e0:05:69:d4:52:8b:66:10:37:52:a9:d9:dd:82:
                    b4:ba:60:7e:ea:bc:e0:6b:49:05:94:89:dc:3b:f1:
                    24:32:78:de:cb:96:5f:5e:1c:7a:6e:d2:36:d5:e6:
                    d8:72:08:28:2b:82:35:62:e1:31:4d:1f:c0:2b:82:
                    f5:1e:2f:47:f7:c0:45:ca:19:52:58:c8:66:8b:cc:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:AB:E5:BB:05:5E:1F:94:F3:7E:56:08:CA:C6:53:05:62:E3:A6
            X509v3 Authority Key Identifier:
                keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:d2:c4:a5:78:0e:79:39:cc:c0:fa:6e:b9:25:42:5e:97:
         2f:b5:92:a7:d3:e8:54:d1:71:e3:25:1d:04:b2:cf:95:b5:f2:
         85:fe:c5:66:9a:34:7e:55:95:42:c4:79:80:39:31:f1:5e:09:
         4f:ae:ae:49:f4:53:53:7f:44:2d:4e:e2:a4:24:4d:0d:fc:fb:
         6e:28:9d:0f:c6:01:fa:91:8e:4b:ef:ba:a5:5e:dd:de:77:cb:
         f5:77:48:ed:f0:f3:15:62:e4:74:ea:eb:45:9d:f3:df:4c:e1:
         33:3d:d9:d9:c2:9a:e0:ad:a1:e6:d7:0a:74:9c:2c:7e:62:ba:
         e7:06:88:89:76:29:9d:f9:2c:ff:55:f8:2e:a2:e5:29:62:76:
         69:51:28:86:b8:23:af:ae:39:e2:36:99:c6:ac:04:c5:93:cd:
         bf:fa:41:0d:4e:7f:a2:bd:89:36:bd:85:2f:ff:5a:19:eb:1e:
         00:65:b1:32:47:95:e1:8a:ea:48:b2:b5:7e:f8:12:18:e6:89:
         96:01:c7:f4:5c:63:6f:2c:6f:86:4e:17:63:ba:09:9c:b4:de:
         6e:84:6e:01:65:85:a0:34:62:c3:da:0f:a0:6a:0d:38:ac:b1:
         d8:03:85:e2:34:ba:5c:a0:60:98:ee:49:45:30:08:d1:7f:d1:
         00:d8:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:24 2025 by rpki-client