Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          Y+JAqcdmWy9tpTDaIUXBQ0AqL9T21mEsKNz9MYWRwYw=
Subject key identifier:   3F:46:B2:42:48:30:2F:7D:DE:20:5A:25:E0:B3:57:48:9F:B7:69:A4
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       0199FCFD50D497FB3D1C7F892B7BDBBC7C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 15:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:23 +0000
Files and hashes:         1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: Mh3EnZ/wulkx1+2KYdiENUvIMNtOeOgZc5SR+RKVc4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:50:d4:97:fb:3d:1c:7f:89:2b:7b:db:bc:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Oct 19 15:01:23 2025 GMT
            Not After : Oct 20 15:01:23 2025 GMT
        Subject: CN=3f46b24248302f7dde205a25e0b357489fb769a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:7f:4d:82:82:7c:0b:d7:b4:38:00:2c:11:
                    1d:5b:0b:ff:15:d1:c9:26:5d:6e:d4:4f:18:cb:04:
                    41:8a:07:ec:ad:e0:38:93:86:b6:5f:dd:a7:c6:55:
                    c3:10:2f:a4:85:be:a6:dd:21:d6:43:ec:3b:72:a9:
                    ee:99:95:02:f7:2b:33:59:e1:db:cc:22:ad:9a:82:
                    e9:81:1f:51:5a:6a:4b:a3:19:c1:d0:48:43:0d:cf:
                    6d:15:f9:15:d4:08:8d:40:25:de:f0:fc:dd:8a:cd:
                    90:89:c5:3c:25:18:8c:d3:9b:2c:63:8a:06:e7:bf:
                    24:46:81:eb:0e:f7:8c:a0:a8:91:96:44:27:68:da:
                    cd:05:98:1b:e0:20:6f:6b:36:c4:c0:11:34:33:b1:
                    3f:83:51:ba:57:cc:b1:c8:b9:bf:f2:3e:ad:1b:df:
                    68:4d:68:f7:1c:18:ff:4a:0b:f7:e3:14:03:cc:20:
                    87:5e:27:85:a9:77:e2:3c:09:4b:68:43:c2:ec:e6:
                    07:0a:ea:a6:a7:b9:e4:69:12:c2:af:95:1d:ac:1c:
                    40:a6:83:d8:6c:db:05:53:e4:70:54:49:5b:bd:5d:
                    c5:98:e1:d8:50:b1:7d:54:db:7b:d2:69:b2:3a:41:
                    fc:9d:e6:19:77:f9:c1:79:7b:fd:6b:ad:27:27:fe:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:B2:42:48:30:2F:7D:DE:20:5A:25:E0:B3:57:48:9F:B7:69:A4
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:53:d1:17:00:1d:78:66:99:18:83:c2:13:84:26:aa:ea:
         b4:d2:1d:4d:a3:25:1c:61:eb:e7:8e:11:cc:9f:60:83:0d:cf:
         25:8d:b4:ad:a4:ef:74:d1:c5:1e:ad:a2:05:32:dd:d9:51:3a:
         1d:35:2e:06:e1:a2:c7:d5:05:2f:f0:9b:44:22:16:e2:95:59:
         df:46:7f:38:a5:f8:97:fd:07:21:28:78:91:18:ab:3b:47:b2:
         5d:cc:c6:be:ed:c8:9f:c2:17:96:35:48:7d:6d:c0:28:d1:68:
         ea:c0:38:3b:59:4f:35:16:fc:cd:fa:27:58:8e:fd:87:90:54:
         9a:50:f7:b4:f3:74:c3:a6:c1:ba:6f:0f:60:f0:18:4a:f4:8f:
         76:dd:31:3a:08:5a:d6:2d:5d:ef:35:19:9e:ac:17:5f:22:f9:
         e2:02:b5:3b:62:c7:e7:5e:d0:06:3c:cf:d4:78:47:94:56:de:
         e3:c1:9d:12:96:71:1a:4b:d9:e9:b3:39:dc:78:f8:d5:52:3d:
         c5:4a:d9:73:37:b5:eb:1f:cd:7f:d6:d2:21:9f:f0:53:42:f4:
         16:55:7c:a4:22:51:1e:44:41:41:92:b0:ca:cc:e6:bb:c7:28:
         f2:a0:f0:13:cc:c3:fc:ff:2d:38:70:1f:00:f3:ba:51:6a:94:
         e2:6d:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:30 2025 by rpki-client