Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          2W7GYCS2qTtcbzs6+JGzf9jtkdd55BXG6jB5WfaLEvo=
Subject key identifier:   F1:6B:FF:BB:F8:13:3C:58:C5:5C:51:D5:9D:20:6B:EA:95:73:F8:92
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       019A20D24F0BDA46A4689C80218B41149B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          16F6
Signing time:             Sun 26 Oct 2025 14:00:44 +0000
Manifest this update:     Sun 26 Oct 2025 14:00:44 +0000
Manifest next update:     Mon 27 Oct 2025 14:00:44 +0000
Files and hashes:         1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: egubSToo5nUJ/HtAhNXhu0f4h9fcDFL6DMSk9y8m0Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:d2:4f:0b:da:46:a4:68:9c:80:21:8b:41:14:9b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: Oct 26 14:00:44 2025 GMT
            Not After : Oct 27 14:00:44 2025 GMT
        Subject: CN=f16bffbbf8133c58c55c51d59d206bea9573f892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:45:fc:f7:e8:6c:35:f5:88:02:8c:b8:f7:
                    d4:01:73:7e:3f:aa:11:c6:b5:70:96:02:33:55:10:
                    c7:3c:95:45:5b:59:c8:72:74:e5:f8:31:3c:fc:50:
                    2f:6c:4a:b7:b5:7f:ea:5a:a5:e9:5e:b6:f5:af:fd:
                    6e:dd:b7:e8:9b:d4:09:d8:0e:49:02:97:ae:37:51:
                    d4:27:c1:fd:00:4c:c0:19:76:3a:2c:e2:d5:bc:b0:
                    f0:aa:db:d8:42:63:12:f7:34:51:03:7c:c2:81:0f:
                    47:e8:8b:96:d4:1c:7d:ab:ee:0b:37:f0:dc:47:e0:
                    96:6e:67:1d:06:d6:9a:b0:08:16:3d:f9:61:b1:a6:
                    2b:5b:b7:a1:8f:b9:4f:24:2e:70:04:ca:4d:73:33:
                    8b:b3:71:a7:44:2a:4a:57:da:c7:f3:7d:46:0d:46:
                    12:43:ef:41:c3:ad:c5:8f:ad:8b:4f:93:de:78:85:
                    5a:fc:dd:ab:aa:71:c8:4c:53:be:6b:de:3b:81:ed:
                    4e:54:9c:ff:c8:d4:4a:7e:ff:92:ca:9e:74:f4:42:
                    dd:be:32:ba:9a:59:c4:82:01:55:ed:a0:83:46:d2:
                    f2:9b:4d:27:14:f7:28:01:94:54:67:4b:fd:dd:d1:
                    59:cf:70:0c:ed:69:70:5e:9a:7d:2c:d0:0f:f8:ea:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:FF:BB:F8:13:3C:58:C5:5C:51:D5:9D:20:6B:EA:95:73:F8:92
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:61:e8:15:84:1e:89:d5:07:3c:1a:78:96:a1:fc:98:24:de:
         1c:b8:c7:8c:aa:73:e6:fc:33:32:11:ec:f8:18:f7:65:05:1d:
         a7:02:8f:e2:66:f7:4c:71:c7:7f:cd:6a:db:8c:66:86:f3:48:
         e2:c9:be:47:fa:0a:69:f3:c1:9a:bc:10:40:89:0b:02:66:44:
         da:04:46:bf:87:b7:a0:61:77:4e:1a:c3:de:eb:2d:40:13:df:
         12:8a:e7:85:76:8e:ba:52:22:29:39:28:a7:aa:99:17:ad:2b:
         4d:50:b1:00:b1:95:98:c4:33:e6:de:4c:99:95:ac:6c:d0:33:
         fd:18:30:03:38:8b:89:5a:31:b4:34:b8:1c:f8:74:28:51:6a:
         05:c4:47:07:0a:d1:25:9d:c6:22:42:a7:b3:7f:de:6c:93:f2:
         be:c8:a3:f3:8c:9c:d8:af:a0:ad:0a:10:35:f8:3a:ae:f0:11:
         ca:46:b4:03:5f:d7:ff:92:eb:5b:f9:34:85:57:39:0c:f7:50:
         30:44:15:20:2b:4a:49:13:43:e1:f4:ca:9c:ed:49:6b:b1:79:
         86:10:8d:f8:d1:6c:b5:db:c7:0d:92:6c:96:17:9e:3f:d5:e5:
         fd:85:53:90:25:da:fa:9a:60:95:d8:a5:a9:c2:11:35:d8:d5:
         8b:7a:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:36 2025 by rpki-client