Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File:                     1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier:          6qqmodwSRMbX1oJZ2t0AySr5ufPbn+HQvY0xIpNky/I=
Subject key identifier:   46:FD:5F:D7:0C:4D:38:EB:CA:44:A8:59:0D:82:B1:E2:B1:3C:70:65
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       01992DEC6A70881503492F71F8FAEFB30ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number:          16A3
Signing time:             Tue 09 Sep 2025 10:01:32 +0000
Manifest this update:     Tue 09 Sep 2025 10:01:32 +0000
Manifest next update:     Wed 10 Sep 2025 10:01:32 +0000
Files and hashes:         1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: 14nclHKLmd4KWnjlPKQtM/5L//bd53Cgc0gI/x/+T4o=)
                          2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=)
                          3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=)
                          4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=)
                          5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=)
                          6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:ec:6a:70:88:15:03:49:2f:71:f8:fa:ef:b3:0a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Sep  9 10:01:32 2025 GMT
            Not After : Sep 10 10:01:32 2025 GMT
        Subject: CN=46fd5fd70c4d38ebca44a8590d82b1e2b13c7065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:a4:96:be:90:0a:bc:aa:5f:f2:ed:c7:e6:
                    05:49:83:f8:45:fa:3f:7f:b6:48:b9:6b:80:44:69:
                    8e:08:64:42:7b:83:4d:c1:82:aa:c4:c9:94:3a:db:
                    99:96:6b:83:36:da:17:07:fb:5c:f1:6d:b5:ae:5e:
                    31:f8:25:49:71:53:d8:f6:81:6a:4a:1e:fe:47:59:
                    58:ae:fd:6f:6b:a5:05:56:67:ba:b3:4d:cb:ac:e1:
                    9b:9d:25:c2:8f:69:ff:c7:ba:a8:fe:7b:d0:5b:2e:
                    0b:22:b5:13:0e:73:e6:09:39:2e:e4:78:a5:d9:55:
                    23:fa:4c:e0:8f:f8:93:75:86:e5:4e:9b:75:25:42:
                    03:93:f2:df:02:86:ca:c1:d6:eb:e9:9e:74:07:57:
                    b9:0e:fb:be:a8:f8:b6:9d:0c:5a:09:a2:96:f4:20:
                    7c:9a:b5:b1:f4:63:11:ec:99:e0:3e:8e:3d:38:e8:
                    cc:01:87:b0:d8:b3:1a:f5:c3:86:71:50:48:bc:5e:
                    ac:1d:56:8c:d5:b3:c6:40:d3:b2:86:f5:1f:9e:f4:
                    4f:ba:fc:19:36:48:65:9b:f4:ca:ed:d5:f8:16:fa:
                    a0:2e:d0:75:ca:e8:5f:da:b2:76:b6:38:05:81:81:
                    d0:28:c0:fe:d8:c0:30:5b:c9:89:8f:64:8f:cd:af:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:5F:D7:0C:4D:38:EB:CA:44:A8:59:0D:82:B1:E2:B1:3C:70:65
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:53:5e:7a:fe:79:b7:8b:31:02:1f:45:5b:c5:0c:fe:46:
         dd:65:80:fc:9e:f8:3c:98:3c:6d:51:0e:3d:02:88:4f:26:62:
         70:d7:a3:07:1d:8a:dc:0d:b0:3f:7c:8a:4d:1d:58:d6:29:a6:
         ef:02:1e:cf:21:3c:74:60:0e:3e:c3:d6:a2:aa:7a:04:12:e2:
         9a:fe:d6:91:49:8f:6c:79:6c:1a:9e:ee:c0:b5:93:8a:6a:0b:
         5e:6b:f8:8a:a0:b1:29:6c:7d:70:1e:b9:5a:64:31:77:5e:3e:
         bf:e2:e6:8c:a7:58:b8:a6:d0:03:4b:78:3b:72:7d:2c:bf:e9:
         6c:9f:c2:50:35:e3:73:7e:a2:58:0c:d3:ec:0d:9c:a8:70:13:
         6f:60:c6:77:79:77:0d:bb:9a:90:ac:1e:8e:45:9a:d6:c2:55:
         b7:06:04:84:da:ea:bc:0a:78:a3:c0:e5:42:95:d0:28:56:3d:
         79:71:2b:55:4b:65:20:22:c2:38:14:c3:c6:50:65:1e:84:7a:
         b5:68:fd:ba:77:3f:3d:59:76:05:73:fe:4b:cb:dd:4d:82:a7:
         5a:90:56:9c:34:30:22:ea:85:ef:8e:7b:0c:1d:65:18:87:75:
         a9:f9:46:29:95:93:4d:af:7a:bf:df:d3:62:81:33:ed:2d:83:
         2e:64:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:33:35 2025 by rpki-client