Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
File:                     4wzJQptjOC6bFxTSGzyW0uXr4lc.mft (raw, json)
Hash identifier:          xhd97pgmzKJdN8YtaCIdzgflsJ2XM7j55nljfEXfoSY=
Subject key identifier:   E9:59:5D:5C:B3:2E:00:68:3F:C4:C4:32:F3:6A:39:D3:11:2C:95:B9
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019A0AB7E5CD2E1B1E1E3759F00C0085D63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
Manifest number:          16F8
Signing time:             Wed 22 Oct 2025 07:00:15 +0000
Manifest this update:     Wed 22 Oct 2025 07:00:15 +0000
Manifest next update:     Thu 23 Oct 2025 07:00:15 +0000
Files and hashes:         1: 0Efo2x6sOPETsj-22hP07U1zWsY.roa (hash: OgAUZjtS9ZnkCG32qF7WTz7BpSyV5BH58J/2I983ulI=)
                          2: 0eEVYCOV3q-TnlqCd-lA81klPTQ.roa (hash: 9ZKMa4fp3AZbASYXZsxduUDTW6eWMZUhVwfsooDXEq0=)
                          3: 1X9xFK5JsqTeyade1aBsNXK2jqM.roa (hash: ch4xBMsoiK3FTWlpXULNfZSQTt2yA75MNr9CkIVKekw=)
                          4: 4wzJQptjOC6bFxTSGzyW0uXr4lc.crl (hash: 6htZrkFzPxI97K4P1hJH9/eAkesSsuAW0Va6iBMYkdw=)
                          5: 9Bu5AeHVju_wmYRkinISjJCoHko.roa (hash: 7WEPMOQ4DXoiRUiaJKbBPpQnxOkhh3m6eWGCmCtQyfU=)
                          6: BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa (hash: ziZpuMSjd6A+xtjmxRjQ3AIfV1jnwc+C8brSkPRY6r8=)
                          7: C6WJ9GdS0D0Mu3t5GWz-91YqJrw.roa (hash: TuiyxpJbSDuJVA46q1OwVWDbQ+P+V9/ytlLI0YTziqM=)
                          8: DQfIEoXTsX4hjARlWuTZqThAeA0.roa (hash: BiGW3GsERqTMcmti5d4+0u8B8YdLVW43FxSBCXsifjw=)
                          9: EB2TK7Kl1_U9G680gxkKAmpjGp4.roa (hash: kgiFTDRrvUC7IWGnYTR3Mzqi96aLc0f21YS8F6+YYy4=)
                          10: EJhirdIUoLNzmOue7FES6MTfC-0.roa (hash: Xuw71OYfiNCPQrZen32SWEw0XBOhe82dHbmW00wdcjI=)
                          11: G9V0_3PniurzJh6A1TvaXZTvjjU.roa (hash: gKd4jMBi1ZJt+VNYE4nQZFZrfxQcP16toyOjiYpdACQ=)
                          12: NQxbcqRE2sNSvHy7XVyCuw1XAnQ.roa (hash: MGzWWHplkDXG7D7+FooNLM82DyBUVFREYbaGbqGESUU=)
                          13: OefhlKYo6vOQTYw9JGAbJUf09Sk.roa (hash: YuBCl+xpfi3ktOJBBB7eY9Cg/51zn2iQPwPzNbSiPdg=)
                          14: Ons9AaoAyvCYcIUP25LyIcwhhcU.roa (hash: 85miehMSdKEq0Wk2FNSFlFGMnw81ViE6nWiSyaYwlMk=)
                          15: RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa (hash: GbklX/DslaRHNgj+v88YxTV/QFH2n/vHFOxV9Z6p4Ls=)
                          16: WsFPLGBSypHWEB7UbM91SGy8ynQ.roa (hash: mIBI4AzXtsH68szPGKhUBCWZanQ1+SMQ//7TMev+wH8=)
                          17: cRx5X6IhRT4TGGyntem5wN-e6hw.roa (hash: yPAxnOnpXhe7f+3HKZRzpk/rpOcCsLAbvqxnozbBZBg=)
                          18: cbHbwJmIogC6tnK-Vvps1TrEKFY.roa (hash: 7bgS71lEpX9738OE+Zkglbw2D6SDEgsmUJoaGhmN0Ew=)
                          19: cyM7dnfMr7EvPZ7pGrfoF-dVt1o.roa (hash: YAJzypx1b34Ery1+o2PRzp+uU+C6QB41uq0KGi8MgMc=)
                          20: ethcODOgY_YKJ1d66LjrxzHbTVc.roa (hash: laPLYBB26BdDYnG1uSNifPQM2luIB4Ti0YbHVqjNaeE=)
                          21: hZ538f0QuQLVC8g75zE0FHfThyE.roa (hash: 6BFx6l28ZY2v5hI+MaoxcL0mUkGye2JVbNG/AHF+rNY=)
                          22: nI1TRtfAQPCn1lgkr462b3T_edc.roa (hash: XCo0bPbm1J2DIp735svYGPkoyfY4WnDsfVIOBM0uci8=)
                          23: oOj_GBZB2xLxA5Y_E2mtwV7V9-0.roa (hash: Bwym/gIrVcU0O/Ncby+0s/9O4c5bJ460ZOKgsQXLq6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 07:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:b7:e5:cd:2e:1b:1e:1e:37:59:f0:0c:00:85:d6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Oct 22 07:00:15 2025 GMT
            Not After : Oct 23 07:00:15 2025 GMT
        Subject: CN=e9595d5cb32e00683fc4c432f36a39d3112c95b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:97:c3:a1:68:0e:33:50:82:93:b5:26:d7:
                    f4:00:82:ea:6f:21:c2:19:1a:9b:50:98:1e:29:4e:
                    8e:6f:09:ee:ea:9f:2b:72:6f:c3:83:e0:a8:61:80:
                    57:ef:6e:85:7c:c6:29:e9:1f:f1:d8:41:be:85:ee:
                    02:18:2f:94:c1:dd:c9:de:c2:10:c5:f3:18:dc:40:
                    52:28:b3:7c:13:e5:83:6f:12:d2:44:a2:30:c4:68:
                    af:e6:7e:34:70:3a:4c:58:6f:a5:e3:5d:ec:b4:e0:
                    60:44:17:29:6f:f1:7d:ac:d6:30:84:49:43:35:d2:
                    0b:ca:d0:09:5e:c6:6a:8d:d1:d3:3d:fb:a3:c2:ba:
                    99:09:0c:f0:f1:44:f0:cd:60:af:8f:c4:2b:2a:4b:
                    53:4e:f6:3d:4d:f2:ba:52:9b:21:68:b8:2d:16:9c:
                    5f:1b:bf:7a:47:7b:26:bf:96:72:87:71:c5:71:63:
                    af:ef:e5:dc:d0:31:35:51:c9:d7:6a:57:95:ee:e3:
                    ce:2e:81:da:21:bf:76:b2:93:51:c8:92:fc:85:72:
                    14:0c:a9:37:c0:4d:27:c7:27:8b:c1:10:df:95:50:
                    fe:21:28:8a:cd:76:1d:13:19:d1:6c:57:45:16:d6:
                    56:8f:34:2b:41:ac:a9:a2:9f:da:4c:ef:b2:70:92:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:5D:5C:B3:2E:00:68:3F:C4:C4:32:F3:6A:39:D3:11:2C:95:B9
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:e2:e7:24:8c:8f:2b:ea:f3:02:17:97:3e:fe:0b:cf:b1:
         bb:a8:60:e1:cb:f4:d1:75:3e:c4:27:5e:30:f0:de:cf:e2:b7:
         f3:0d:4c:f3:c1:76:9a:d9:7f:86:ed:a7:20:a1:3c:bf:f0:10:
         dd:1d:46:aa:92:7e:47:31:40:2f:3f:92:55:45:e4:44:35:ad:
         7c:6d:6b:89:de:7d:9b:31:63:34:d4:72:ae:1e:2d:11:f2:6f:
         e7:7c:9e:6b:11:3f:b7:95:38:86:63:b8:c0:3f:2c:e6:06:70:
         23:2d:18:4f:ce:fd:e2:a5:a6:41:b2:83:ea:70:c5:0e:ef:00:
         1d:1c:6f:8d:d9:4e:f8:f1:08:24:eb:5f:c3:71:08:ea:03:7f:
         dc:9f:94:36:d0:b2:2b:fc:c7:c4:71:14:10:8d:5e:d3:12:c3:
         23:6e:7a:03:04:d7:d6:e8:6c:88:a0:15:0a:5c:cd:8c:85:09:
         4d:22:80:9f:4f:5e:6d:84:e8:ae:5a:68:16:07:7f:bc:da:46:
         5f:af:d8:76:9d:3c:c6:aa:79:d8:62:c3:25:7d:89:80:c8:4c:
         bb:2e:fd:e0:9e:e0:f7:12:40:40:7f:77:5c:d5:1b:b0:82:59:
         ad:34:ef:b6:a8:b3:5d:9b:f5:c5:30:2e:5f:c9:cd:b0:ef:3d:
         bc:a1:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:06:03 2025 by rpki-client