Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          xfWNavT7SPJfQ6G23ULJ+fvE3BvQz+bjdj+TVaKX6xY=
Subject key identifier:   3A:A7:2C:97:FF:15:1F:B6:BC:5E:41:61:18:CC:3D:41:25:0F:5F:11
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       0199FDD9A0E590BB31D8CA0FFD3DC87397FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0D00
Signing time:             Sun 19 Oct 2025 19:02:02 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:02 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:02 +0000
Files and hashes:         1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: Ziv0Ee6vt7V71pN3BVme62d77AvQ149eptw1yiifGj4=)
                          3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
                          4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:a0:e5:90:bb:31:d8:ca:0f:fd:3d:c8:73:97:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Oct 19 19:02:02 2025 GMT
            Not After : Oct 20 19:02:02 2025 GMT
        Subject: CN=3aa72c97ff151fb6bc5e416118cc3d41250f5f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:50:d0:f1:6e:0b:9f:0e:dd:8c:78:61:02:
                    be:e9:60:67:c0:28:56:68:fc:6a:94:f2:68:b9:11:
                    05:39:b6:97:e2:e4:17:13:31:ae:f7:d4:fc:19:9d:
                    f1:51:2a:d7:32:dc:5f:e6:e9:8b:f4:db:6e:17:4f:
                    a1:a6:33:c1:e8:61:70:af:29:ac:9a:da:4f:4e:e4:
                    1d:0d:a6:1d:a1:bf:93:17:bc:0a:ca:3a:c9:3f:a2:
                    a9:95:84:99:62:ee:6c:37:e4:6d:49:95:3d:1c:8d:
                    7c:5c:a1:88:18:10:4e:81:0d:01:7a:ad:18:29:6a:
                    c1:52:8c:0c:d0:54:9f:28:24:26:79:93:04:f7:9d:
                    89:43:67:0f:d7:db:ab:9f:ec:13:e2:02:fa:94:58:
                    38:14:a9:7b:2d:27:8f:57:3a:73:8c:aa:56:42:13:
                    42:71:66:b5:59:cf:f8:e5:c7:40:89:93:c9:95:f8:
                    87:d4:98:5d:4c:67:ca:96:1f:9e:21:eb:ab:51:bb:
                    7a:a1:d4:26:46:e3:73:45:2a:6b:42:6f:7f:0e:c2:
                    86:cf:46:26:77:76:0b:b8:48:b7:49:de:69:6e:b6:
                    1d:e5:83:5b:ca:e3:66:71:8f:7d:df:a6:4e:11:db:
                    50:ad:a1:9e:79:fb:8a:65:27:97:f3:30:22:4a:3e:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:2C:97:FF:15:1F:B6:BC:5E:41:61:18:CC:3D:41:25:0F:5F:11
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:58:0d:d0:fa:48:8e:86:0e:6d:eb:01:af:b5:63:bc:8e:
         87:d4:cd:d3:74:c7:00:38:d5:00:e2:1d:f5:de:02:e3:d6:8a:
         13:5e:b7:7a:80:21:fb:4c:78:02:74:26:11:50:12:af:c1:87:
         38:9a:e6:72:31:97:9d:15:68:0b:39:3a:f9:ba:a3:12:40:7d:
         94:a2:ca:e8:47:55:b4:8f:b0:db:ab:5e:2d:d0:e2:91:dc:df:
         ac:3e:35:f5:75:86:f2:5a:70:40:74:0f:f5:10:15:55:39:0c:
         51:36:59:93:d4:74:df:bf:94:cc:6e:ce:a0:d5:6f:ca:9e:6d:
         21:89:a7:d2:37:2b:bf:7e:29:d0:bc:49:cf:17:4b:0c:31:db:
         34:3f:78:f9:fe:00:09:0b:69:b5:dc:5b:2a:5c:17:23:67:17:
         8c:9c:11:ea:62:b3:45:ea:09:82:4d:ad:99:bf:cd:30:c5:43:
         7e:3d:c1:16:37:a8:7e:72:41:de:46:59:55:60:bd:15:29:e2:
         a9:96:13:c2:fc:29:fa:df:c0:29:6e:f3:8b:df:f2:e5:05:91:
         75:c1:38:0b:e2:6b:3a:fe:90:c6:dc:96:20:94:a0:78:9f:68:
         97:43:4f:f4:ca:cb:3e:09:45:2c:78:95:92:46:a7:36:49:e4:
         e2:13:93:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92aDlkLsx2MoP/T3Ic5f7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj
NDQ5YWYwHhcNMjUxMDE5MTkwMjAyWhcNMjUxMDIwMTkwMjAyWjAzMTEwLwYDVQQD
EygzYWE3MmM5N2ZmMTUxZmI2YmM1ZTQxNjExOGNjM2Q0MTI1MGY1ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP9Q0PFuC58O3Yx4YQK+6WBnwChW
aPxqlPJouREFObaX4uQXEzGu99T8GZ3xUSrXMtxf5umL9NtuF0+hpjPB6GFwryms
mtpPTuQdDaYdob+TF7wKyjrJP6KplYSZYu5sN+RtSZU9HI18XKGIGBBOgQ0Beq0Y
KWrBUowM0FSfKCQmeZME952JQ2cP19urn+wT4gL6lFg4FKl7LSePVzpzjKpWQhNC
cWa1Wc/45cdAiZPJlfiH1JhdTGfKlh+eIeurUbt6odQmRuNzRSprQm9/DsKGz0Ym
d3YLuEi3Sd5pbrYd5YNbyuNmcY9936ZOEdtQraGeefuKZSeX8zAiSj5PYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqnLJf/FR+2vF5BYRjMPUElD18RMB8GA1UdIwQY
MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt
YTViMmQwOWUwNWNmLzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm
LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWJYDdD6
SI6GDm3rAa+1Y7yOh9TN03THADjVAOId9d4C49aKE163eoAh+0x4AnQmEVASr8GH
OJrmcjGXnRVoCzk6+bqjEkB9lKLK6EdVtI+w26teLdDikdzfrD419XWG8lpwQHQP
9RAVVTkMUTZZk9R037+UzG7OoNVvyp5tIYmn0jcrv34p0LxJzxdLDDHbND94+f4A
CQtptdxbKlwXI2cXjJwR6mKzReoJgk2tmb/NMMVDfj3BFjeofnJB3kZZVWC9FSni
qZYTwvwp+t/AKW7zi9/y5QWRdcE4C+JrOv6QxtyWIJSgeJ9ol0NP9MrLPglFLHiV
kkanNknk4hOTgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:23 2025 by rpki-client