Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          Nt8Dx84nAEk7gBrk9n6VnKx4gMZmzBXAZJTc1WNrpPU=
Subject key identifier:   28:E6:73:FE:A9:8F:28:04:8F:88:13:C6:5A:7C:55:72:E5:DF:21:A0
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       0199FC2155CC2003488F72F2B612C6F37E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:06 +0000
Files and hashes:         1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: 9UX4cN1vu5fYg+sEwjHjH4B8nzS5fas2I3EH5SbiAkg=)
                          2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:55:cc:20:03:48:8f:72:f2:b6:12:c6:f3:7e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Oct 19 11:01:06 2025 GMT
            Not After : Oct 20 11:01:06 2025 GMT
        Subject: CN=28e673fea98f28048f8813c65a7c5572e5df21a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:72:98:ae:8f:72:06:62:08:41:ce:7d:e3:
                    04:48:61:5e:d6:62:2f:d8:66:62:0e:e1:3d:ef:57:
                    18:c5:e1:22:0d:35:95:ab:92:90:7c:e7:ed:cf:c0:
                    6c:7c:37:ac:2a:38:d7:e0:c4:4a:b2:c1:4a:e0:a0:
                    b3:bf:93:a1:10:ed:98:db:78:9b:25:a1:3c:d0:4a:
                    1b:3b:d5:09:25:b4:2c:5d:31:41:fc:94:71:17:09:
                    73:3b:c7:f5:96:da:e3:06:e2:ce:ed:d7:92:9f:d0:
                    fc:24:1b:52:e0:d1:76:54:ec:05:8a:f7:25:23:82:
                    d7:51:ce:ad:40:a2:65:74:da:2b:79:4b:92:15:29:
                    19:f4:6d:a7:01:ee:00:a2:bd:d1:36:4b:5c:5f:4c:
                    69:df:50:09:5a:d2:3b:26:82:1c:f8:6a:ed:30:6c:
                    18:8b:5f:1c:7c:d7:19:49:21:d1:d8:9c:de:fe:b4:
                    ed:02:87:c5:65:c4:46:72:90:18:e7:a0:f5:d0:67:
                    3a:90:e6:d9:a6:d7:4c:1a:b7:cc:15:9c:01:65:a5:
                    d7:46:a4:85:17:f2:29:4d:d3:40:37:3b:09:22:0f:
                    94:62:d2:b4:a6:20:b2:86:18:e5:3a:2e:32:64:f8:
                    ba:7a:29:52:49:8a:f4:3f:cf:cf:b1:4c:62:be:1d:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E6:73:FE:A9:8F:28:04:8F:88:13:C6:5A:7C:55:72:E5:DF:21:A0
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:46:7b:8a:4f:89:04:2b:05:38:96:7e:03:5c:18:74:73:8d:
         12:fb:16:ea:1e:42:24:d2:fa:ca:66:9f:9a:90:68:87:f2:3f:
         85:77:d0:05:5c:4a:23:7d:64:06:5f:ff:72:82:bc:8d:8b:8e:
         63:36:9a:8b:fb:42:4c:83:b7:85:dd:c1:e7:3c:0e:9e:75:b3:
         54:b5:5f:b3:80:31:cf:b5:46:aa:52:6c:44:9e:cd:c9:d9:d3:
         04:81:2d:39:c1:f2:c5:9a:bd:fa:c2:95:97:62:c6:94:03:11:
         81:b3:dc:d9:3f:79:f0:2c:6b:5d:6a:b5:64:bf:35:96:c2:24:
         20:f3:9a:ee:79:9a:fa:42:c6:f5:45:ff:65:23:79:71:4e:6a:
         40:3d:90:57:3f:bd:d2:5d:00:ab:6c:42:e2:58:20:ad:4e:12:
         5b:76:a6:47:47:dc:1d:13:c4:5b:48:ab:70:81:b7:ee:9e:5a:
         b7:5b:d1:65:e0:c2:de:1a:70:4a:82:27:2f:53:5f:51:37:11:
         7f:95:0b:23:4e:92:d1:40:53:c1:d0:34:25:82:36:d6:94:0b:
         63:d8:bd:55:94:8d:2a:2c:c2:e0:90:36:c8:29:33:e8:b1:ce:
         6e:5b:11:7e:f2:8d:fa:a7:a7:ab:29:f6:f7:5b:8b:a1:3d:0b:
         f6:30:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:04 2025 by rpki-client