Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          TcGXragDOJQdIGJkphXZd7z9F8QvEQl97/N2dzxmbJ4=
Subject key identifier:   38:AD:1F:12:C4:CE:95:BB:B8:95:41:D1:6D:A0:0B:F1:E6:FF:30:BE
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       0199FC8F5B02983667574047A329DBA315D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 13:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:17 +0000
Files and hashes:         1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
                          2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: zzOKjmmckvX7TxMFrXL5UGNCiy0+1rsuil6FTxiEOHM=)
                          4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
                          5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5b:02:98:36:67:57:40:47:a3:29:db:a3:15:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Oct 19 13:01:17 2025 GMT
            Not After : Oct 20 13:01:17 2025 GMT
        Subject: CN=38ad1f12c4ce95bbb89541d16da00bf1e6ff30be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:8a:14:be:86:b3:80:d6:e2:08:10:2c:2c:
                    e7:8f:8f:52:a8:3f:00:ad:ec:94:cc:d1:70:29:9d:
                    a4:ca:8f:3f:b6:1c:99:5a:19:e8:fc:d1:3d:8f:97:
                    e2:c9:b6:15:52:16:73:bf:fe:ba:d5:84:d6:39:da:
                    f6:df:b2:c3:32:80:21:1f:68:c7:66:ff:74:a0:ef:
                    ec:d5:6a:b3:1e:65:62:a6:9e:8c:ad:89:b8:39:5b:
                    90:0c:83:1a:bd:b2:e6:97:71:13:54:ce:6c:5e:7e:
                    44:9e:18:4b:8e:f5:b4:c8:84:59:4f:4d:a4:7e:2e:
                    dc:80:08:04:84:ce:a8:23:bc:6f:ae:4a:85:b6:e3:
                    55:f1:f0:e8:31:40:9e:77:74:24:1b:11:46:3b:7a:
                    4b:0e:3f:ab:43:38:61:c5:ff:54:64:62:44:93:dc:
                    64:51:cd:1e:06:28:96:64:e0:7e:93:30:30:48:67:
                    f1:79:2c:4d:9b:42:06:ad:60:4b:b2:47:bf:a9:ee:
                    bb:bc:20:1e:b9:6a:ef:d7:63:ff:df:7f:c5:17:8f:
                    0c:c8:51:9e:a0:c2:1f:77:0f:a6:82:cd:4a:b4:d1:
                    cd:bc:c3:f7:5d:02:70:0f:93:70:81:8f:cc:c8:4b:
                    6c:b7:b5:78:80:d7:37:1d:cb:85:d3:d9:80:9c:8d:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:1F:12:C4:CE:95:BB:B8:95:41:D1:6D:A0:0B:F1:E6:FF:30:BE
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:0d:da:3d:13:8a:59:18:fc:02:17:97:0b:e7:51:25:cf:
         ed:5e:d2:ab:5c:3e:d8:ef:d7:ca:86:8a:20:4a:f5:7e:c2:5a:
         f4:b1:e7:8e:1f:91:04:e2:fb:3e:89:fa:7d:28:0e:14:be:85:
         92:92:fb:f6:83:e0:04:f1:17:d3:e8:42:59:2e:15:39:91:d3:
         1a:72:09:87:65:cb:f8:4c:86:a7:a6:a7:37:d7:c8:19:db:ff:
         c0:28:f0:1a:bb:68:32:63:17:2e:59:b4:b9:ae:17:a7:17:2f:
         d9:5a:86:6d:b7:0f:ab:5e:b5:ea:3c:40:cd:de:01:93:08:9d:
         d7:9a:4e:00:05:9e:ff:bd:19:5c:4f:f0:ed:d2:cb:07:7d:8a:
         5e:80:a4:81:4f:47:eb:71:57:bb:32:ee:2e:31:0d:99:29:54:
         07:8c:c0:a5:24:60:1b:4a:37:25:cf:8e:43:6f:df:5d:28:b1:
         f0:b2:1a:6c:b3:be:6c:fa:53:d2:58:65:ed:b6:2f:31:02:9c:
         ab:63:b3:39:89:7b:2c:66:74:b0:1e:0c:4b:46:57:1b:e6:a5:
         58:b0:cf:1f:d5:d0:e5:f5:50:55:22:a6:5d:cf:db:b3:a3:70:
         5b:e5:26:0b:95:9b:6b:2c:9a:9a:54:ea:e4:1b:70:01:40:07:
         70:75:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client