Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          +nJYXTbiUL13uJd/Yhwu0dyI3YW05FLBWCGJPQDjvK0=
Subject key identifier:   70:2B:B0:2D:DB:D9:29:EF:C7:09:81:90:A1:8F:1B:C7:CB:87:0C:09
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       0199FCC6B55A3DAC78FF9D49466AD70F3C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 14:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:44 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: BzH3yYL3cXzddnYb/+ULFEss+INhhcpqzIFYMNWgM8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:b5:5a:3d:ac:78:ff:9d:49:46:6a:d7:0f:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Oct 19 14:01:44 2025 GMT
            Not After : Oct 20 14:01:44 2025 GMT
        Subject: CN=702bb02ddbd929efc7098190a18f1bc7cb870c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:50:c3:b6:aa:12:80:67:c8:02:32:49:a5:
                    71:2b:87:4f:c2:62:6b:67:ba:43:90:34:9f:50:2c:
                    55:dd:0c:b2:a3:b1:83:59:07:88:04:62:51:d6:be:
                    43:2d:81:40:f0:03:88:06:e4:89:34:80:00:11:90:
                    b8:97:47:68:91:14:14:53:6f:2c:dd:75:0c:2b:27:
                    e5:0a:30:9d:5c:67:2a:5b:7b:b3:d6:29:4d:35:84:
                    64:00:eb:e7:27:05:14:96:bd:1a:f8:b6:dd:d1:12:
                    6d:7f:fc:61:9a:53:62:7e:0c:7e:db:04:02:e2:d0:
                    f3:4f:31:bb:ad:ec:08:61:fa:54:17:f5:4d:b4:af:
                    de:08:4e:bb:2b:2c:47:38:7b:a2:ba:f9:b9:c1:a9:
                    88:db:49:09:dd:d2:96:c4:c0:32:30:74:e9:db:2f:
                    01:34:eb:52:1a:bc:84:70:17:a3:0c:74:4c:00:94:
                    39:58:a8:5b:7d:9d:11:8f:70:76:72:d9:e3:50:61:
                    76:b5:50:2c:08:23:2b:02:18:a6:ff:dc:85:29:13:
                    22:2b:cf:85:90:7d:b8:e9:15:ca:df:44:ff:8c:25:
                    dd:2e:d7:ff:26:d1:3a:a6:c5:c0:d0:fb:d8:a2:7c:
                    5b:ed:27:35:1e:39:16:33:75:b3:b9:53:1d:fe:93:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:B0:2D:DB:D9:29:EF:C7:09:81:90:A1:8F:1B:C7:CB:87:0C:09
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:23:db:7d:df:22:db:21:55:b9:a5:c8:38:48:2b:73:db:
         36:55:56:7b:fd:a2:1f:c8:e9:c8:db:92:85:4a:d5:43:dc:ea:
         9f:d5:9f:11:54:ef:59:f8:dc:9b:ce:4f:21:2a:3d:99:ab:ae:
         8f:6f:f2:ad:fb:9b:b5:4d:27:7e:6d:56:c3:6c:8e:f1:62:2d:
         aa:d1:5b:c2:fd:a3:ec:9a:cf:4a:a2:fe:bd:82:22:8d:d3:1f:
         04:5b:1e:8e:48:d1:9f:0b:d7:02:e3:7f:64:0b:c4:4f:14:39:
         af:6a:73:25:ee:13:12:e6:af:cc:1b:bd:68:ee:22:78:d5:55:
         cd:05:26:76:97:0e:e7:f1:e6:a3:51:03:22:94:53:ce:d8:70:
         f7:1e:ac:fc:2b:07:ee:83:f2:2e:3d:58:da:b9:06:05:e4:6c:
         cb:c8:da:52:50:e6:2a:6d:5b:f5:f0:05:32:3a:21:c3:0a:1b:
         07:38:67:b4:6a:a4:43:c9:26:c7:9d:f7:bd:2b:69:67:67:1b:
         dd:82:53:a5:1f:69:35:56:95:69:f7:bb:51:25:77:7e:cd:d2:
         5f:6d:a7:a0:61:c2:60:8b:82:2b:f5:4f:d5:33:19:43:42:09:
         e5:de:71:97:52:6e:95:7c:ad:ac:ab:7e:12:b4:4b:d5:e0:7c:
         09:d2:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:15 2025 by rpki-client