Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File:                     IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier:          ydk3cdwWTtZulyAF0ntfl6GBKZFJB1uu3l6oTITo/2s=
Subject key identifier:   20:D9:54:DD:CF:D8:8C:75:A9:EA:14:3C:82:70:84:9B:03:39:81:5C
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       019A0147FCB5085D7C573CB2D7F339BEA8FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number:          16F4
Signing time:             Mon 20 Oct 2025 11:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:26 +0000
Files and hashes:         1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: tP5ZPPeEwZp6ln9A8+9MmT2n8RplJrp1fyCW936Ao6g=)
                          2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
                          3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=)
                          4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
                          5: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=)
                          6: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
                          7: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
                          8: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
                          9: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=)
                          10: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=)
                          11: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:fc:b5:08:5d:7c:57:3c:b2:d7:f3:39:be:a8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: Oct 20 11:01:26 2025 GMT
            Not After : Oct 21 11:01:26 2025 GMT
        Subject: CN=20d954ddcfd88c75a9ea143c8270849b0339815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:5d:ec:fc:a8:ed:b3:f5:c8:b2:a6:d0:5f:
                    89:b1:44:e0:d6:15:69:80:cd:5b:93:dc:56:82:5b:
                    f5:3d:9f:91:ee:66:60:9c:b4:55:98:40:f8:35:9f:
                    78:cf:2c:3a:5d:c5:a9:e9:f7:ac:b0:a1:44:ad:2d:
                    3a:56:26:d4:27:03:ef:d6:d2:c8:1f:39:fd:3e:26:
                    c3:d8:33:9a:17:15:dc:ca:74:62:36:06:41:57:b1:
                    21:8a:d0:6e:cf:22:61:d2:b3:40:40:33:47:16:7a:
                    d9:63:a9:af:93:1c:75:e5:20:aa:67:3e:19:a8:6a:
                    a6:25:4f:f4:b5:ae:d5:fe:bf:c1:53:a1:20:7f:44:
                    9f:25:c7:db:79:86:bc:d4:a0:59:34:53:a2:3c:c5:
                    ec:ca:ae:41:6b:6e:0d:c1:10:32:63:63:da:9f:26:
                    d5:8c:77:34:cf:87:d2:9a:21:fe:d8:ce:16:0f:24:
                    33:59:e8:ac:6b:50:6f:f8:1b:04:0b:9f:55:be:f3:
                    ef:45:6e:6c:8c:6a:00:a1:86:85:85:59:f3:f1:e0:
                    0a:1e:00:31:0c:80:82:d9:89:ba:35:82:f0:2a:2f:
                    6c:a4:73:b4:45:4d:e1:08:8a:6b:19:a5:24:ac:86:
                    7f:7e:55:48:7a:1b:18:3f:08:b6:5d:80:28:37:03:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:54:DD:CF:D8:8C:75:A9:EA:14:3C:82:70:84:9B:03:39:81:5C
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:78:86:50:fc:f9:5f:94:98:65:a5:9d:b3:d5:cd:9b:93:
         48:2e:d1:ea:b3:5d:cb:8f:5e:46:ff:fb:fd:5b:c9:4c:0d:1b:
         08:03:50:09:8a:fb:29:32:33:70:0e:12:8b:c2:3e:4a:54:3b:
         71:67:54:9c:6a:95:cf:aa:01:11:33:1d:7f:50:87:12:b3:5c:
         18:36:62:44:71:1e:5f:cd:48:9e:96:c7:ca:11:ab:6b:35:8e:
         3c:53:ac:ac:54:10:53:0a:41:b5:bf:7c:12:68:53:44:2c:75:
         63:12:93:9b:84:35:9d:9e:dd:a3:20:25:91:11:42:d4:33:04:
         cf:de:8c:2b:ff:d4:ba:68:a8:64:a9:ab:67:b9:5a:48:4e:93:
         df:16:b1:a1:b1:c9:c6:ea:c8:cc:89:cf:a6:3b:56:1b:80:8b:
         ba:bf:a8:e8:bd:32:c0:a6:d6:7e:5d:2b:c1:2d:91:7e:ee:e8:
         3b:00:77:99:c3:6e:06:c1:8d:9d:1e:12:e1:cf:18:3a:89:34:
         a7:c4:39:b6:63:50:39:60:87:e4:ed:5a:fb:de:d6:7b:99:d9:
         52:4e:7f:3b:c2:ae:6a:0f:ee:20:58:04:86:e7:4c:c3:52:ee:
         c0:7b:08:c9:64:44:8e:c4:c8:95:0c:e0:73:73:a9:33:6e:91:
         00:93:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:59 2025 by rpki-client