Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File:                     EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier:          T7r2OBTgvtnu4JB6wgGUmtrCaFUZ2DIkwflscVTfIj8=
Subject key identifier:   B4:33:92:46:1B:8B:BF:E1:FA:2F:1C:18:01:63:87:D5:4E:1A:0E:E4
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer:       /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial:       0199FC21A95D6246A0405A0D48DBEFDE2BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 11:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:28 +0000
Files and hashes:         1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
                          2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: 2sn8d9P3s6Gylecm3iMKs2scBYdwgVdcNkDZWYE0GvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a9:5d:62:46:a0:40:5a:0d:48:db:ef:de:2b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
        Validity
            Not Before: Oct 19 11:01:28 2025 GMT
            Not After : Oct 20 11:01:28 2025 GMT
        Subject: CN=b43392461b8bbfe1fa2f1c18016387d54e1a0ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:32:a4:23:b5:58:88:85:5f:62:c5:e0:d9:
                    85:e3:75:5a:60:cc:f6:9a:26:9c:86:3b:71:78:95:
                    21:bb:83:87:d8:2b:40:89:d1:75:a9:84:d7:41:25:
                    df:4b:56:a0:30:bc:3a:9f:66:e7:0a:20:05:97:52:
                    99:55:e2:1b:f4:dd:70:cf:84:0d:d4:67:f9:30:f4:
                    c0:95:fb:3c:07:96:12:57:32:9b:23:99:66:a5:d0:
                    51:0e:c7:71:29:17:84:75:0e:2e:a5:84:e1:49:82:
                    2d:28:79:ad:86:c8:fd:83:1c:19:e1:22:b2:46:48:
                    fb:10:f4:99:d7:04:f0:d3:83:6d:97:8c:78:f2:c3:
                    d2:98:a1:39:3d:06:1e:1d:d8:e8:a7:30:48:55:12:
                    65:4d:92:0e:fb:23:a4:b2:a4:4d:fd:ae:1f:48:78:
                    ef:a9:61:04:f1:d4:ca:fc:54:c8:1b:fa:73:44:74:
                    bf:38:d6:ef:13:08:47:5d:2f:24:98:07:6b:ca:1e:
                    ac:e6:c2:60:61:1f:20:c6:c8:f7:6d:52:9d:7a:ec:
                    36:83:4a:d9:c5:aa:5c:3c:ce:4d:ae:a1:3b:9a:2d:
                    e0:68:59:6e:16:31:28:2a:24:30:a8:83:8a:59:7d:
                    6e:8a:91:08:e4:cf:2d:52:32:b3:28:a0:d2:d0:04:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:33:92:46:1B:8B:BF:E1:FA:2F:1C:18:01:63:87:D5:4E:1A:0E:E4
            X509v3 Authority Key Identifier:
                keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:90:23:0e:a3:f9:51:45:43:0e:a8:18:6d:71:fe:f5:92:
         83:b9:85:e2:b1:4b:6c:f0:7a:be:3f:3e:42:58:ac:04:57:3f:
         07:d8:ac:7d:fa:54:cf:3a:af:02:e0:1c:57:aa:91:85:54:47:
         48:5c:ad:0a:07:22:68:ae:7b:88:20:09:70:8c:25:79:25:f5:
         3b:33:1d:8c:68:b4:66:a9:05:ca:88:49:30:3d:4f:6d:b2:27:
         ae:07:00:3a:c1:c4:9f:c5:25:11:97:e6:89:e2:52:8b:e9:06:
         45:95:c8:7c:f7:4c:b0:10:19:88:db:e6:fd:70:ab:7e:08:24:
         46:2f:21:80:6a:81:f6:bc:74:a9:ac:ab:34:42:14:d4:c4:41:
         a2:2a:a3:71:ad:bc:f1:48:cf:78:d2:be:24:de:07:3a:a2:e4:
         90:ba:2e:ad:c8:48:18:5f:0a:18:cc:63:4c:4b:b2:fa:35:7c:
         e6:2d:1e:0b:cd:61:f8:e6:26:32:fa:46:f5:90:a1:e5:2e:6c:
         aa:a9:b7:69:b8:25:03:71:9c:b4:dd:cd:ef:3d:ab:16:b8:7b:
         75:16:82:0c:50:38:04:c8:85:b7:4c:65:39:7f:7d:32:a0:c2:
         b5:6f:b8:e3:ef:5c:f5:08:ee:9d:6f:94:3e:00:e5:4f:dd:f2:
         10:9a:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:06 2025 by rpki-client