Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File:                     a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier:          kmWt10vQVXsTsAkYdJzCfZZF5WInqCx6jhQ4UgdEbTc=
Subject key identifier:   F7:CA:DC:7F:16:17:E4:62:64:07:9A:BB:D3:53:A8:E6:50:B9:57:50
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer:       /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial:       0199FC21ADF56D09226B1BCF5D4E1BB7C18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:29 +0000
Files and hashes:         1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
                          2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: rXnDxQZTWoItn4z/Z01MOB55nQQ+5IHimfF51B9o5tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ad:f5:6d:09:22:6b:1b:cf:5d:4e:1b:b7:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
        Validity
            Not Before: Oct 19 11:01:29 2025 GMT
            Not After : Oct 20 11:01:29 2025 GMT
        Subject: CN=f7cadc7f1617e46264079abbd353a8e650b95750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:ef:0d:0a:41:0a:e0:5b:5f:45:05:8a:14:
                    fe:82:f7:3b:df:2d:1c:a3:29:83:cc:ff:f7:ce:68:
                    67:26:1e:82:22:94:57:bd:24:00:e1:28:20:ba:a5:
                    21:da:f8:9e:de:5d:9d:74:52:56:c0:a6:ce:c5:57:
                    14:b7:de:d5:07:10:bc:39:d8:6d:c6:fe:a0:58:df:
                    b9:b8:9b:37:65:9d:85:3b:92:fb:bd:4e:1d:8e:44:
                    66:88:aa:3c:34:fd:92:2b:25:e1:a9:97:b2:64:95:
                    c9:34:74:cd:45:1f:77:db:fd:3c:8d:ca:ba:99:e6:
                    4c:ea:40:50:8a:1f:a3:d3:c1:4c:49:81:06:6a:60:
                    fd:9d:ca:94:52:b3:9f:ee:b1:e7:4b:88:bd:ee:ab:
                    9f:2b:41:d1:73:3d:e5:71:62:6a:c2:60:ce:6c:f2:
                    2d:69:d6:8f:bd:40:16:81:20:75:f6:6c:8c:db:36:
                    bd:70:45:32:88:a1:30:f0:f6:e1:7c:51:fd:97:7a:
                    d6:3d:1c:37:62:6a:0e:e3:8a:e6:d7:9f:db:ed:29:
                    a5:dd:63:c7:e1:14:99:f0:d5:54:5d:66:a9:cb:5a:
                    66:c5:73:bc:60:63:3c:a4:59:9f:67:1d:33:c1:e4:
                    a8:98:db:82:6e:0b:9b:2f:5c:39:06:08:b6:f6:d0:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:DC:7F:16:17:E4:62:64:07:9A:BB:D3:53:A8:E6:50:B9:57:50
            X509v3 Authority Key Identifier:
                keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4f:48:b9:28:4b:42:46:55:2f:09:71:80:e6:f5:02:a4:59:
         be:fd:00:78:cf:24:5e:e0:11:97:f1:6d:1f:0d:71:da:af:45:
         6c:ec:8f:ef:36:7b:e6:2a:45:7f:60:ee:e8:27:70:c3:6f:b9:
         24:2a:78:9b:03:09:12:af:49:e2:b5:84:3e:04:58:92:c7:06:
         5b:10:f1:84:85:aa:51:ce:17:1d:5c:52:cd:ba:8f:7c:2e:98:
         71:f0:8c:6d:b4:d3:4a:32:a3:7a:45:16:66:53:34:1c:16:0d:
         12:be:02:da:08:17:f5:4c:02:c8:b7:7b:38:1f:38:32:ac:a3:
         e0:b0:f1:8c:ca:9b:e8:10:c8:2c:d8:9c:4b:bc:5a:97:75:bb:
         45:0c:48:c5:d2:b8:08:20:ba:2b:88:9f:76:9c:57:c0:53:36:
         0f:9c:cd:05:bb:f0:de:61:d0:36:4f:69:b3:9e:fb:63:e1:1c:
         93:54:a6:47:fb:e2:a5:cd:fe:92:06:a2:cb:6b:f2:d9:74:96:
         15:f0:18:66:94:52:af:71:42:95:7e:06:03:26:06:1c:56:6d:
         df:29:e9:ab:f7:ed:72:fb:1f:f4:21:b5:72:cb:aa:f2:e4:ff:
         cf:99:68:f1:b6:e2:53:f7:ac:50:c0:e9:93:58:e9:6b:d8:73:
         9f:60:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:40 2025 by rpki-client