Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File:                     cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier:          gNgA2fwph0EXHkOdJcqJhHSeWTFY15BXAwSi04HBEYQ=
Subject key identifier:   DC:E1:F6:1D:DB:61:10:2E:82:CF:CD:3E:E6:96:65:12:51:56:73:5A
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer:       /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial:       0199FAD8023E5B2268CABB67B7C9F806AEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
                          2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: +fRT/WJj8Mcigb4AqY0q1K1sLVTduUmZlI6XV07I9f0=)
                          3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:02:3e:5b:22:68:ca:bb:67:b7:c9:f8:06:ae:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=dce1f61ddb61102e82cfcd3ee69665125156735a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:49:64:8b:52:0b:61:22:33:5e:a8:2e:f4:
                    33:9f:03:b6:aa:f9:d6:96:0f:a7:d0:de:a7:b7:06:
                    4d:bf:18:1c:c5:ac:f4:70:17:f8:a8:eb:a1:5e:e5:
                    3c:f1:35:c4:53:b6:01:cb:2e:36:90:d5:cc:61:ce:
                    b9:2b:28:7f:40:55:3d:92:fd:fb:d0:c8:be:a7:19:
                    5c:94:0b:43:d8:05:40:4a:81:54:5d:56:9f:8e:8d:
                    4e:42:ec:b7:ee:ab:d5:a6:49:97:87:e6:19:04:a0:
                    37:e5:71:bf:1b:83:34:f4:c4:f3:80:98:9d:b2:d0:
                    19:f9:0f:50:f7:22:bc:19:e6:79:52:76:d9:48:24:
                    1a:c8:3e:aa:36:19:dc:c2:1b:dc:80:d7:d8:d0:18:
                    1d:13:ee:4a:46:80:14:53:cf:3c:4a:47:d7:7f:9d:
                    53:0f:76:f1:15:4d:f1:b0:6f:e9:dd:fd:c8:2e:9f:
                    0c:a0:bd:4d:f0:15:8b:3d:48:13:ae:97:72:7c:02:
                    1c:f5:06:a8:ce:a7:b0:a5:ee:97:20:37:64:fb:18:
                    31:10:00:23:51:6a:be:7c:19:de:3d:cc:b1:36:e2:
                    7e:f4:c1:7a:98:f7:5a:94:26:f2:5a:d9:59:5e:d5:
                    11:39:ef:65:45:dd:cb:ba:f7:ba:6b:cc:d2:b8:25:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:F6:1D:DB:61:10:2E:82:CF:CD:3E:E6:96:65:12:51:56:73:5A
            X509v3 Authority Key Identifier:
                keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ba:32:bd:ea:c3:4c:fe:91:b3:56:9b:28:43:82:34:46:61:
         42:8c:c8:c1:28:b2:12:d8:be:db:c9:49:68:65:63:8f:1d:a8:
         27:d9:68:d3:f2:36:a8:80:b9:81:d9:44:fa:e8:ab:55:44:9b:
         4d:de:52:87:7d:24:62:fa:e7:cd:13:67:81:a6:6b:2a:ec:58:
         a6:2c:a4:4e:a5:b4:8d:3b:58:f8:04:ee:12:5b:66:23:74:a0:
         53:6a:16:8d:0c:42:3b:b8:f9:8b:87:95:46:8d:8f:cb:e0:fd:
         8f:51:2c:04:39:11:b7:c1:76:fc:d1:55:e4:be:f8:a2:b5:e8:
         1f:b5:ff:62:5e:75:cc:f3:db:41:37:5c:6f:ef:8e:39:44:b5:
         c8:73:87:0b:4d:24:01:16:17:4b:50:33:c9:be:90:c2:86:b9:
         48:76:41:c2:8e:91:a1:1c:6c:33:9e:cd:b5:7a:a1:3d:5f:03:
         6f:86:90:60:61:93:0b:0b:e5:e4:a2:04:60:be:68:74:30:40:
         e9:d1:f5:92:fa:52:a3:c6:88:a8:47:4e:c5:48:e5:43:b2:21:
         75:62:a0:f0:e2:0d:d8:eb:70:a7:85:e8:7b:33:b6:d1:a6:2b:
         5a:9b:24:c6:37:e9:80:8d:fe:a7:87:26:d7:f0:f5:76:5f:16:
         c7:9b:06:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62AI+WyJoyrtnt8n4Bq6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjUxMDE5MDUwMTI0WhcNMjUxMDIwMDUwMTI0WjAzMTEwLwYDVQQD
EyhkY2UxZjYxZGRiNjExMDJlODJjZmNkM2VlNjk2NjUxMjUxNTY3MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5NJZItSC2EiM16oLvQznwO2qvnW
lg+n0N6ntwZNvxgcxaz0cBf4qOuhXuU88TXEU7YByy42kNXMYc65Kyh/QFU9kv37
0Mi+pxlclAtD2AVASoFUXVafjo1OQuy37qvVpkmXh+YZBKA35XG/G4M09MTzgJid
stAZ+Q9Q9yK8GeZ5UnbZSCQayD6qNhncwhvcgNfY0BgdE+5KRoAUU888SkfXf51T
D3bxFU3xsG/p3f3ILp8MoL1N8BWLPUgTrpdyfAIc9Qaozqewpe6XIDdk+xgxEAAj
UWq+fBnePcyxNuJ+9MF6mPdalCbyWtlZXtUROe9lRd3Luve6a8zSuCUkRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzh9h3bYRAugs/NPuaWZRJRVnNaMB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLoyverD
TP6Rs1abKEOCNEZhQozIwSiyEti+28lJaGVjjx2oJ9lo0/I2qIC5gdlE+uirVUSb
Td5Sh30kYvrnzRNngaZrKuxYpiykTqW0jTtY+ATuEltmI3SgU2oWjQxCO7j5i4eV
Ro2Py+D9j1EsBDkRt8F2/NFV5L74orXoH7X/Yl51zPPbQTdcb++OOUS1yHOHC00k
ARYXS1Azyb6Qwoa5SHZBwo6RoRxsM57NtXqhPV8Db4aQYGGTCwvl5KIEYL5odDBA
6dH1kvpSo8aIqEdOxUjlQ7IhdWKg8OIN2Otwp4XoezO20aYrWpskxjfpgI3+p4cm
1/D1dl8Wx5sGJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:39 2025 by rpki-client