Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          iuQb89O/CLaBOCBS/9EXFdgr0a01w1rp/gPAe3NFqHk=
Subject key identifier:   16:FA:0B:57:56:7C:1B:FC:76:09:4C:F5:C1:3F:A3:6D:FE:0C:A3:38
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019A4F2B8822816CDFF4D30F807EFF5D3330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0B18
Signing time:             Tue 04 Nov 2025 14:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:44 +0000
Files and hashes:         1: 1-ZSGsCHMEIt-zdJlJw6apZX2Wrw.roa (hash: jSCF0+9de5r9THp7fXr99R1xtgUUcEM1y8WA8CvHwCI=)
                          2: DgOZwnFO8AhdHBgLmgcNwBsxDAc.roa (hash: h4KsWMGXdyj/8wNpX8sYIR4JqIdgBrnn4TPvXbnDMpw=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: rlVZN8zzYaCx3U6RqHO11lgotF/6M6xoTxYGz1vCa8g=)
                          4: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (hash: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=)
                          5: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (hash: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=)
                          6: m3gokZ3oqrQAkT9aNHEn43WdviM.roa (hash: MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:88:22:81:6c:df:f4:d3:0f:80:7e:ff:5d:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Nov  4 14:00:44 2025 GMT
            Not After : Nov  5 14:00:44 2025 GMT
        Subject: CN=16fa0b57567c1bfc76094cf5c13fa36dfe0ca338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:d4:20:9b:5c:50:a6:e1:43:f8:e5:e3:53:
                    3e:fd:bb:1e:1a:67:62:c5:51:51:9e:60:fd:46:4d:
                    ea:c6:e2:ab:b9:3e:66:b1:c9:1c:48:25:fd:8e:f1:
                    99:70:19:29:46:6f:94:9e:e4:ad:1a:ee:4e:2f:b1:
                    66:12:30:e7:a5:38:9c:d2:ec:6f:7a:8b:cb:ae:ac:
                    d2:a2:8d:71:c8:7f:bf:68:98:cd:a7:c6:83:fb:1b:
                    f0:84:01:60:b6:30:9c:c5:43:db:0d:f3:67:8a:0e:
                    f2:77:d0:60:e9:12:a3:b6:7f:20:4b:b0:18:ae:54:
                    3f:ca:9b:49:cf:ff:62:a0:b4:2b:12:99:d9:e7:c1:
                    93:ad:ad:0d:b4:63:56:b0:0a:81:ba:4e:9a:f3:6d:
                    ef:fa:fa:ab:8d:06:42:d3:df:34:f6:a5:31:1c:dd:
                    29:a3:61:c4:35:09:b3:9b:2e:2a:06:90:4d:61:2b:
                    cb:ef:6f:55:65:a7:4f:56:d6:f3:0f:76:46:27:30:
                    e8:49:36:f1:b5:c7:9d:aa:0c:1b:a6:83:a6:9d:3a:
                    c3:05:2b:75:27:3e:51:7d:5f:e5:48:ab:83:89:a7:
                    6a:da:7d:41:03:f1:f5:90:0c:9d:dc:d0:9f:fc:85:
                    c7:7b:5e:36:b1:c5:b0:ff:06:0b:e5:b1:84:7a:5c:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FA:0B:57:56:7C:1B:FC:76:09:4C:F5:C1:3F:A3:6D:FE:0C:A3:38
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:19:89:c8:97:1a:cb:de:26:69:9a:23:5f:d0:66:71:27:
         73:ab:18:b5:3f:b6:02:38:a3:20:de:5e:bb:e6:55:d6:1c:89:
         96:71:cf:fe:e6:4d:2d:d7:b2:db:63:6f:25:e7:9f:fa:a2:b2:
         2d:7e:07:5b:08:ad:03:c9:dd:b8:cc:51:c9:74:a2:95:10:9c:
         6e:39:97:89:32:45:ad:8a:b3:6b:30:d7:ba:d1:76:3c:f3:36:
         09:7b:0c:c8:a0:0f:05:87:85:09:81:61:46:a5:c7:cf:36:91:
         16:46:09:bd:d7:24:80:70:51:cd:66:75:9e:95:cc:d1:0a:4a:
         a1:bb:25:15:7b:d2:52:92:93:34:ee:ac:f7:7a:5d:2c:aa:31:
         bd:e2:92:7c:5a:c3:52:e0:03:ad:5f:64:d1:72:15:16:0a:60:
         1d:6e:80:23:3e:a4:64:c3:37:18:06:99:1c:96:f6:0c:fc:46:
         da:2b:b0:72:c3:b5:0e:fe:bc:01:86:c0:81:0d:b7:84:2a:6e:
         2e:94:31:b2:28:17:4b:f9:0c:55:22:bc:bf:34:4a:45:05:a2:
         28:20:30:7d:29:58:90:6d:58:5f:0e:3d:94:1b:ad:d7:aa:69:
         7c:02:08:d6:c3:e6:3e:fa:ee:19:ef:93:50:01:de:dc:d7:98:
         37:5c:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client