Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          RN1NSJ2bzjlIPT96A4k8izVsHkXZu4czW1z6EXyOWVQ=
Subject key identifier:   7A:C4:4C:F0:4F:9F:BB:D4:CE:34:6D:26:5E:51:DD:42:D3:9E:96:6A
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       019A236552AF9E714D1611E78B73CAE4CA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          16CB
Signing time:             Mon 27 Oct 2025 02:00:34 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:34 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:34 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: vBcHgdWR/o+h2nQn2+y1UVADpnZg6Akic49ZuTOktVo=)
                          2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:52:af:9e:71:4d:16:11:e7:8b:73:ca:e4:ca:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: Oct 27 02:00:34 2025 GMT
            Not After : Oct 28 02:00:34 2025 GMT
        Subject: CN=7ac44cf04f9fbbd4ce346d265e51dd42d39e966a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:14:fd:1b:a1:df:af:17:3c:b3:aa:eb:9f:
                    33:62:a2:ce:83:85:7a:4f:c6:0c:71:04:c2:ce:23:
                    bf:ef:c4:43:08:fc:c7:90:4c:ff:af:66:0f:e6:94:
                    9f:0d:70:26:11:e1:09:b4:62:1e:10:47:89:17:70:
                    75:48:b1:4b:e7:de:ad:16:75:3d:00:42:4a:92:c3:
                    41:c4:4c:1a:b2:76:be:21:c3:cf:62:ba:82:dc:19:
                    de:99:f2:41:6f:60:9e:f2:ff:44:3e:a2:24:fa:9e:
                    04:b6:e3:13:8e:36:a8:59:5d:50:d9:56:08:9f:50:
                    16:44:82:8e:dd:bd:43:5c:51:0e:9f:91:61:4d:97:
                    3d:26:67:30:8b:5c:22:cf:46:4d:43:8f:83:ed:6a:
                    cc:f2:26:05:4b:e7:8e:67:2c:fe:fc:3a:a8:54:e0:
                    51:3b:af:11:bb:f6:c7:ac:59:56:c7:a9:47:b8:1d:
                    3e:ea:45:62:09:58:23:2b:ae:47:03:09:4a:e7:0a:
                    32:9c:d3:c7:b5:e9:8b:08:3c:72:6a:7a:11:07:56:
                    15:39:52:94:0c:1c:85:57:5e:53:29:9a:99:be:03:
                    c2:f8:4b:53:9b:7d:e3:3a:c1:f4:72:16:85:7b:73:
                    8e:a2:73:ad:e7:05:64:d5:51:a6:5b:c8:bc:b5:75:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:4C:F0:4F:9F:BB:D4:CE:34:6D:26:5E:51:DD:42:D3:9E:96:6A
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:90:7d:c2:37:72:d4:e7:5d:86:8e:7b:97:25:f9:ae:31:
         15:84:8f:51:a1:09:62:2c:49:96:18:20:79:48:90:3e:ad:5b:
         72:1c:f5:97:45:c6:86:24:16:c0:93:c8:4f:35:23:eb:44:be:
         f9:27:84:e0:6c:c3:6e:65:3a:97:c2:e6:b4:a9:37:0b:a5:af:
         0c:0a:6d:e0:69:c6:ce:07:85:79:c6:8e:ed:fe:37:97:67:f3:
         9a:a5:76:ce:c1:bd:37:16:f0:41:30:13:63:70:c2:6f:bd:e8:
         eb:9f:82:b7:34:a2:ee:9b:05:03:dd:16:78:a2:42:4b:af:9e:
         9e:c5:1e:de:d2:59:ed:d9:eb:a8:fe:eb:8e:dc:3b:86:d0:e8:
         37:21:a8:b0:16:fd:b9:88:5a:c2:bf:b9:0b:3c:ad:12:55:32:
         df:c4:03:76:7a:6f:1e:fb:1e:27:d3:30:b9:f2:3e:7d:97:9d:
         71:b4:c0:94:26:c7:f3:d7:46:18:68:0d:a0:b9:b7:d2:78:92:
         36:56:c4:69:0a:ac:c8:f5:23:1a:91:ad:9d:dd:32:9a:aa:f4:
         6d:5e:28:db:05:42:0e:fd:9f:1a:f8:4b:ed:37:ce:07:12:55:
         3e:fc:d2:be:3f:1f:05:b6:c4:39:1b:8a:de:36:90:d7:9e:a9:
         61:d0:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:00 2025 by rpki-client