Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File:                     Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier:          s58BJ2jr8H0PFHAT+DdYjdFJ2UKsuwtbROy12YJmAPI=
Subject key identifier:   E5:4A:62:C4:DD:45:C9:CE:27:B5:5D:84:E4:16:E1:C2:91:8D:FE:2B
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer:       /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial:       0199FD345EF4FCB1A10D7FAD4B37115BCCF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 16:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:31 +0000
Files and hashes:         1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: b/GrOl4RVikxu4BYZPGcfOQkpkwtMZshwPkgur8u0k8=)
                          2: hx1AobN52MdMauAKbwiof1BpngE.roa (hash: 69thDY3N1zb82iIdJWyRKD2mWa/WKlKqpVSoW/+g4+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:5e:f4:fc:b1:a1:0d:7f:ad:4b:37:11:5b:cc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
        Validity
            Not Before: Oct 19 16:01:31 2025 GMT
            Not After : Oct 20 16:01:31 2025 GMT
        Subject: CN=e54a62c4dd45c9ce27b55d84e416e1c2918dfe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:80:8c:b2:5b:2f:dc:26:e9:6f:13:97:1c:
                    0e:69:3f:a9:07:79:cb:d7:4e:ea:92:96:1d:f3:70:
                    1f:ee:83:aa:eb:f1:69:34:26:79:7a:45:87:97:24:
                    fd:d9:f3:c5:ca:ce:f5:7b:f2:fd:e5:9b:9c:f3:3c:
                    9f:82:ea:5d:6b:32:90:26:ad:8f:72:1e:73:c6:0a:
                    0a:c6:66:df:c6:bf:7b:e6:6e:fd:b4:60:1b:70:80:
                    20:ff:66:8e:19:d2:bd:90:e7:9f:cd:28:38:59:89:
                    f0:d0:f8:b7:e6:5e:93:37:ba:62:11:e9:8d:36:3f:
                    25:e6:df:fb:8e:3c:cc:b6:3c:eb:f2:38:ba:76:2b:
                    bd:83:01:ff:4a:b5:9c:be:74:f4:c1:25:f2:57:23:
                    aa:6a:ac:60:39:8b:c6:a6:73:f9:45:38:2e:60:3b:
                    43:3e:76:a9:29:c7:8e:3e:b4:6c:2e:dc:11:db:2f:
                    cf:f8:01:c8:8b:f5:4b:1a:14:a2:1e:ae:ce:b9:1f:
                    5b:30:75:c1:88:c4:bd:f7:e6:03:29:d7:e4:e9:06:
                    d8:56:69:cf:af:3e:0a:8d:c1:f4:94:1d:25:a6:cb:
                    cd:7e:d6:fd:f4:da:ac:0d:69:60:4d:ea:b8:8f:30:
                    a9:5a:dd:ff:54:83:fc:6e:64:a6:0d:3d:34:1d:ea:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:62:C4:DD:45:C9:CE:27:B5:5D:84:E4:16:E1:C2:91:8D:FE:2B
            X509v3 Authority Key Identifier:
                keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:60:14:cf:6a:e2:90:58:e1:d8:6d:21:87:5a:22:9b:5a:
         c0:14:be:84:37:73:28:ef:bf:00:7d:65:49:c2:88:fc:af:d9:
         eb:29:11:30:2c:b3:93:2a:20:78:5b:06:4e:8f:15:4c:be:1c:
         2b:c0:9f:7f:97:5c:bd:2c:b8:62:25:72:1b:fa:4b:ff:a3:8c:
         be:02:9c:9d:bc:03:30:09:5a:a8:39:f5:86:e5:55:d4:4f:c3:
         2a:e2:a2:fa:b4:3a:68:38:42:ec:22:41:c3:94:a5:6e:f9:82:
         a9:f5:e9:1e:37:bd:5d:0b:4e:2b:a0:f8:1d:74:16:f8:3a:61:
         6c:04:fa:51:7e:9e:8d:c5:0e:f5:c1:d0:8a:ab:43:87:b6:4d:
         14:34:33:af:45:d2:7c:62:a8:66:da:2e:33:eb:ac:b1:a9:a3:
         a4:f8:fc:68:d7:ab:4f:65:45:9a:a3:b8:9d:df:98:33:61:7c:
         95:44:ff:4a:d5:31:85:3a:ce:4b:c2:a3:36:06:00:5a:28:29:
         64:87:ee:b8:a7:ca:cf:68:51:38:91:c2:53:67:c8:a0:73:f4:
         5f:65:ba:4e:73:d5:10:cf:bc:dc:8a:44:08:bf:b4:23:92:de:
         ea:46:e0:a0:82:30:f0:10:90:2f:f6:8d:ba:a5:99:e3:a5:7f:
         d9:66:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:41 2025 by rpki-client