Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          DiWkS6qz4LkjOdWSDUV7HtCURAUnpwsMEmjWfFo4eIA=
Subject key identifier:   FA:77:2C:AB:DD:50:82:13:0F:61:B6:E6:65:63:D2:92:E8:BE:F0:39
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       0199FB7C97E8B35F0810B83CC4DEAF073DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 08:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:10 +0000
Files and hashes:         1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
                          2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
                          3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
                          4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: qpVPhsNjzSNGY4XTNfhCwCXUTJUhKpB8czsNNL8u28k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:97:e8:b3:5f:08:10:b8:3c:c4:de:af:07:3d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Oct 19 08:01:10 2025 GMT
            Not After : Oct 20 08:01:10 2025 GMT
        Subject: CN=fa772cabdd5082130f61b6e66563d292e8bef039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:30:75:f6:73:9d:15:d3:0c:c7:ce:16:dd:
                    53:1b:bf:e3:ac:eb:b4:bc:89:86:9b:68:c4:75:c6:
                    cf:48:53:05:95:ef:83:f6:9e:07:c1:38:92:b6:e1:
                    e1:8c:f5:44:f7:08:72:f8:5e:90:1c:42:4c:51:b8:
                    bc:54:f9:55:33:59:5b:a5:d2:0b:89:04:fa:06:4b:
                    b0:fd:2f:9b:0c:8e:c8:2c:ff:ec:6f:a8:89:30:ca:
                    d3:f8:95:a7:f6:9f:41:f0:fa:1e:8f:62:83:c1:b8:
                    10:7b:88:a5:53:1a:66:3f:9e:24:cf:17:00:92:fc:
                    a4:41:87:88:f8:36:47:0f:34:56:d6:66:98:b7:8c:
                    7b:8c:f6:c7:7a:ed:84:d5:0d:35:cf:66:44:65:8f:
                    df:27:e1:d3:0e:ad:62:30:9f:d0:ce:7d:81:60:0d:
                    71:9b:a8:82:0d:5a:d8:66:db:30:c0:85:f1:d5:b9:
                    12:83:14:f2:1f:26:70:12:87:b5:e9:70:93:1a:53:
                    99:29:c5:fa:50:41:a6:40:a7:b5:04:6e:ac:5f:66:
                    6a:4c:ab:17:cc:b2:fe:36:6b:c5:f9:51:0b:06:82:
                    d3:b9:67:a8:d1:4f:ab:f2:7c:66:d2:09:f5:56:ae:
                    ed:c4:c4:36:96:5b:37:6e:ff:e3:18:c8:c8:77:64:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:2C:AB:DD:50:82:13:0F:61:B6:E6:65:63:D2:92:E8:BE:F0:39
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:34:ba:cc:26:ac:15:27:53:e9:3e:cd:f6:fc:51:3b:85:3b:
         be:b0:d8:33:06:55:c3:10:a2:ef:65:00:d2:b5:1e:e4:7d:01:
         25:8d:e6:cf:76:6e:a0:bb:86:9b:54:54:3c:f6:bb:fd:1a:4a:
         27:b6:51:e0:44:74:a7:63:d8:a8:15:bc:ef:89:87:02:de:1c:
         14:33:1b:5d:fc:c6:9b:9f:83:a9:53:1b:7b:82:55:22:06:f7:
         e4:40:e7:39:b0:fc:3b:7b:ec:93:5c:21:52:6f:39:08:db:5f:
         7a:f2:5b:36:67:00:55:ac:ba:37:10:ea:eb:1e:bb:5a:66:5b:
         90:2c:51:a6:33:82:6a:6f:c8:2a:d7:c8:bc:ea:75:0b:ab:9c:
         7b:c2:34:a7:c1:dc:19:8a:d6:c2:27:1a:b3:75:d9:e4:a4:35:
         bc:1f:b6:fe:ac:3f:d8:bf:ce:f6:67:c6:05:e2:2a:f2:6e:95:
         82:c1:e6:1f:d3:cd:d0:1d:80:74:fb:73:f4:84:89:06:37:b7:
         13:25:a3:b8:19:e6:6d:ad:6e:9a:8b:0b:33:bc:02:8e:88:fd:
         5b:d9:4e:bb:e0:9e:76:ff:14:fe:3e:c0:b7:54:d6:b9:00:22:
         a2:e6:7a:96:ce:8c:23:c7:fe:3d:9a:34:cc:a3:1f:c2:fb:de:
         37:df:e8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJfos18IELg8xN6vBz3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw
Y2MyNzAwHhcNMjUxMDE5MDgwMTEwWhcNMjUxMDIwMDgwMTEwWjAzMTEwLwYDVQQD
EyhmYTc3MmNhYmRkNTA4MjEzMGY2MWI2ZTY2NTYzZDI5MmU4YmVmMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQwwdfZznRXTDMfOFt1TG7/jrOu0
vImGm2jEdcbPSFMFle+D9p4HwTiStuHhjPVE9why+F6QHEJMUbi8VPlVM1lbpdIL
iQT6Bkuw/S+bDI7ILP/sb6iJMMrT+JWn9p9B8Poej2KDwbgQe4ilUxpmP54kzxcA
kvykQYeI+DZHDzRW1maYt4x7jPbHeu2E1Q01z2ZEZY/fJ+HTDq1iMJ/Qzn2BYA1x
m6iCDVrYZtswwIXx1bkSgxTyHyZwEoe16XCTGlOZKcX6UEGmQKe1BG6sX2ZqTKsX
zLL+NmvF+VELBoLTuWeo0U+r8nxm0gn1Vq7txMQ2lls3bv/jGMjId2TxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp3LKvdUIITD2G25mVj0pLovvA5MB8GA1UdIwQY
MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt
NmMxYjQ0NzFmN2VlLzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl
LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDS6zCas
FSdT6T7N9vxRO4U7vrDYMwZVwxCi72UA0rUe5H0BJY3mz3ZuoLuGm1RUPPa7/RpK
J7ZR4ER0p2PYqBW874mHAt4cFDMbXfzGm5+DqVMbe4JVIgb35EDnObD8O3vsk1wh
Um85CNtfevJbNmcAVay6NxDq6x67WmZbkCxRpjOCam/IKtfIvOp1C6uce8I0p8Hc
GYrWwicas3XZ5KQ1vB+2/qw/2L/O9mfGBeIq8m6VgsHmH9PN0B2AdPtz9ISJBje3
EyWjuBnmba1umosLM7wCjoj9W9lOu+Cedv8U/j7At1TWuQAiouZ6ls6MI8f+PZo0
zKMfwvveN9/ouA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:30 2025 by rpki-client