Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File:                     ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier:          v/pFEwfIStvW4pJhgmKaeQqeFqv+8q6q1uGD52ktops=
Subject key identifier:   43:18:41:72:7D:3F:72:4B:B3:30:70:C7:20:A4:E1:FE:D5:E5:36:C9
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer:       /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial:       0199FC216667095C7C3B9B6A23D730353B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:11 +0000
Files and hashes:         1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: hSQn3v6aKZoMamHGINx3J9T9bjGEzZIbKS1ByW6IQrc=)
                          2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:66:67:09:5c:7c:3b:9b:6a:23:d7:30:35:3b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Validity
            Not Before: Oct 19 11:01:11 2025 GMT
            Not After : Oct 20 11:01:11 2025 GMT
        Subject: CN=431841727d3f724bb33070c720a4e1fed5e536c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:a2:39:43:e3:b8:12:a8:b2:1c:da:d1:d3:
                    f5:7f:9c:61:0f:c7:3e:c3:e6:d6:ac:c1:11:1b:f8:
                    99:b4:d7:1a:39:03:b2:7b:15:03:86:fa:03:5d:a4:
                    c6:19:b6:1c:57:d7:84:4c:71:84:af:18:f9:ba:91:
                    32:21:90:64:68:b5:f4:d5:a1:4d:ac:1b:47:0b:38:
                    c5:0f:d8:b3:b1:95:4f:64:e8:7f:37:ff:f9:02:3a:
                    6c:88:b8:37:78:63:89:95:85:2d:e0:ea:0f:20:b6:
                    d4:40:35:08:52:18:70:2e:58:73:ff:25:1d:9f:54:
                    12:df:e0:5d:f7:6d:24:63:aa:bb:0e:91:0c:81:64:
                    df:41:86:c0:de:cf:35:84:5f:ce:5b:58:c7:87:45:
                    f6:b3:6c:8a:e4:6a:55:b8:1c:69:c5:e6:80:79:c2:
                    a8:08:27:b6:41:ef:0d:8f:27:1a:e0:3b:33:ea:19:
                    7f:44:af:d8:49:79:4a:bd:6c:ea:9a:5e:51:60:97:
                    7d:be:eb:c3:a4:a6:04:20:8d:52:2c:c4:aa:68:98:
                    da:86:86:18:93:03:7f:e1:f8:50:73:99:c9:08:ca:
                    6d:21:e2:17:b8:12:ef:8a:71:64:fd:2a:47:23:16:
                    97:7e:ba:bb:60:d5:d0:4d:f5:76:e6:d4:f2:e2:94:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:41:72:7D:3F:72:4B:B3:30:70:C7:20:A4:E1:FE:D5:E5:36:C9
            X509v3 Authority Key Identifier:
                keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:e9:1a:1a:a1:b2:7f:62:71:f7:d7:09:45:64:ce:8d:78:
         4d:19:ec:12:fc:56:4a:8d:f8:7c:2d:2c:c1:dd:4c:d3:06:c9:
         57:d4:f5:9e:da:63:c6:28:ba:ca:3a:64:09:0d:3f:e3:73:87:
         4a:34:90:d4:27:56:62:ef:b8:18:98:2c:d3:11:e7:d6:cd:4f:
         3a:2a:fe:e2:8b:87:78:1f:9f:e9:66:e1:2d:2e:1b:bd:51:00:
         97:a0:f3:95:de:04:3d:68:71:56:35:9f:99:47:06:e4:99:46:
         20:26:5d:91:d0:58:a8:1c:5c:a3:30:f4:8f:42:1e:ed:2d:8f:
         5a:81:79:0a:4c:0c:cf:74:15:ea:2f:ba:78:b1:9b:a4:23:1d:
         ac:ce:12:71:04:5b:21:12:c7:0e:40:59:90:09:b3:6d:76:17:
         ab:98:46:cd:48:f8:f4:e3:08:13:59:eb:96:5a:5f:77:e4:a3:
         e6:02:06:21:f6:89:0f:97:60:25:50:11:33:ff:cb:5b:cb:77:
         c6:03:ee:d5:1c:03:c3:ce:95:48:3e:00:99:bb:09:58:d7:99:
         3b:82:5d:05:d5:10:98:29:e2:e1:f3:80:ec:a8:3b:fc:84:51:
         a7:c3:48:83:51:e1:04:a5:c7:8f:39:d9:78:85:2d:e8:c3:f1:
         49:f5:3b:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWZnCVx8O5tqI9cwNTtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzE3NTk4ODM3M2U1NmI2ZmZlMGIxNWExZmM3NWQ0Njkz
YWUyYzAwHhcNMjUxMDE5MTEwMTExWhcNMjUxMDIwMTEwMTExWjAzMTEwLwYDVQQD
Eyg0MzE4NDE3MjdkM2Y3MjRiYjMzMDcwYzcyMGE0ZTFmZWQ1ZTUzNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmiOUPjuBKoshza0dP1f5xhD8c+
w+bWrMERG/iZtNcaOQOyexUDhvoDXaTGGbYcV9eETHGErxj5upEyIZBkaLX01aFN
rBtHCzjFD9izsZVPZOh/N//5AjpsiLg3eGOJlYUt4OoPILbUQDUIUhhwLlhz/yUd
n1QS3+Bd920kY6q7DpEMgWTfQYbA3s81hF/OW1jHh0X2s2yK5GpVuBxpxeaAecKo
CCe2Qe8Njyca4Dsz6hl/RK/YSXlKvWzqml5RYJd9vuvDpKYEII1SLMSqaJjahoYY
kwN/4fhQc5nJCMptIeIXuBLvinFk/SpHIxaXfrq7YNXQTfV25tTy4pT/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMYQXJ9P3JLszBwxyCk4f7V5TbJMB8GA1UdIwQY
MBaAFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEt
ZGZkNTFiMDZkZDk5LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEtZGZkNTFiMDZkZDk5
LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm3pGhqh
sn9icffXCUVkzo14TRnsEvxWSo34fC0swd1M0wbJV9T1ntpjxii6yjpkCQ0/43OH
SjSQ1CdWYu+4GJgs0xHn1s1POir+4ouHeB+f6WbhLS4bvVEAl6Dzld4EPWhxVjWf
mUcG5JlGICZdkdBYqBxcozD0j0Ie7S2PWoF5CkwMz3QV6i+6eLGbpCMdrM4ScQRb
IRLHDkBZkAmzbXYXq5hGzUj49OMIE1nrllpfd+Sj5gIGIfaJD5dgJVARM//LW8t3
xgPu1RwDw86VSD4AmbsJWNeZO4JdBdUQmCni4fOA7Kg7/IRRp8NIg1HhBKXHjznZ
eIUt6MPxSfU7rQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:20 2025 by rpki-client