Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          5Tg/41GDayecKAHagoCDVIyUCVsjlZJvQcN08l99fEY=
Subject key identifier:   06:4C:BE:A3:2D:43:75:D7:8A:E7:05:98:F8:88:5B:ED:28:5E:72:16
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       0199FD6B161495E3518406BF62CF8D6982EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 17:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:17 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: tWHfN6Dyy+305FXPjHrWDk8xAGxpHI+vxsxXqnAlAlo=)
                          2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:16:14:95:e3:51:84:06:bf:62:cf:8d:69:82:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Oct 19 17:01:17 2025 GMT
            Not After : Oct 20 17:01:17 2025 GMT
        Subject: CN=064cbea32d4375d78ae70598f8885bed285e7216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:cc:4b:b8:b2:8f:c3:93:a8:a9:3a:88:0a:
                    4e:89:8b:00:83:3d:3e:ae:04:af:f8:7f:2a:f7:f2:
                    b7:28:ed:bb:ec:ce:f0:cc:ce:8d:27:b3:a9:cc:20:
                    b0:c8:92:61:68:80:e7:5e:ab:ac:c9:ac:73:50:17:
                    bf:5e:19:f3:91:e0:6a:33:d9:2e:78:8a:cc:74:eb:
                    f4:f5:fd:5f:cd:c0:c2:fe:53:ce:3c:aa:b8:3f:2c:
                    06:0f:d8:2d:b0:82:33:67:f4:bb:38:e9:ca:53:ef:
                    bc:6e:6e:0e:5d:a0:b0:e2:50:f8:6a:e7:9a:ed:c3:
                    96:49:7a:47:07:2f:b9:f6:bd:a9:7d:dc:89:da:ea:
                    56:ea:4d:75:96:1f:88:54:95:4b:bb:76:c5:7a:d9:
                    dd:ee:11:2b:67:f3:0b:eb:4a:58:b7:12:5e:fd:f2:
                    71:49:35:30:f1:93:d1:ac:bc:50:91:3e:e8:51:ed:
                    69:73:4b:28:50:32:a5:61:c7:95:84:7c:9b:b5:af:
                    a2:1b:74:13:c8:67:ba:c5:6c:1c:db:a1:49:29:e4:
                    75:54:e4:cb:8d:e4:c7:29:ec:1e:5c:57:6b:54:01:
                    2a:78:4c:ff:13:12:46:ae:7b:59:82:eb:44:6f:a9:
                    41:fe:14:50:fc:82:96:5b:f7:37:15:6b:d4:1a:79:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4C:BE:A3:2D:43:75:D7:8A:E7:05:98:F8:88:5B:ED:28:5E:72:16
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:39:ab:d2:74:32:db:fc:47:bc:cd:8d:6e:e6:78:d5:8d:
         40:fb:97:b6:30:06:95:f0:71:f5:b2:62:1f:e4:06:53:2c:e2:
         bd:61:ae:ff:b8:ae:30:16:bd:dd:75:d3:f4:df:48:2b:55:84:
         e8:51:98:1a:ae:a2:b2:18:eb:3b:ed:92:e3:b4:f3:1b:09:6d:
         3f:7b:0b:0c:c1:1a:24:c7:e0:f9:a9:67:ca:02:84:fd:fe:8f:
         c7:dd:e4:4d:37:97:80:36:0c:51:5d:55:9a:9f:d5:bc:70:46:
         cd:ea:2d:57:01:49:65:3c:fd:71:d4:e9:e7:d1:f9:cd:e3:65:
         a1:90:01:1f:b0:66:22:d7:9d:4d:b5:9f:65:2e:1a:3b:d8:9a:
         e5:c1:7d:87:50:9f:39:cd:68:75:7f:4b:87:0e:7b:87:3f:ee:
         c2:41:3c:82:fa:98:86:cf:1a:8c:5f:64:cb:52:f5:94:0a:a7:
         8c:15:52:b4:b9:9a:07:ad:eb:74:86:3d:1a:87:0f:5e:21:24:
         52:85:00:e9:1e:5f:03:0b:95:6d:4e:66:4b:c3:8a:b7:e0:13:
         39:fc:ce:03:db:a1:ce:a5:18:75:53:5f:b3:39:be:c0:a7:16:
         f3:8e:cf:6b:8c:ac:7e:ee:8a:d3:fe:ee:87:ea:e7:09:c2:96:
         1b:40:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:36 2025 by rpki-client