Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          P8ZW2+8Eo6LO541jvzCy0XVeoat+lXv24pOgmqQhysc=
Subject key identifier:   D6:81:5C:6C:27:1D:82:04:01:DC:E5:17:B0:DF:9A:A0:7F:2E:26:95
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       019A01110F167000BFD7C01B2687CB81EF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          13E6
Signing time:             Mon 20 Oct 2025 10:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:26 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: Ngq4kKQ4QTH9vZ8sYnnNup/pKUzhn4QWq9jQmlbPvYU=)
                          2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:0f:16:70:00:bf:d7:c0:1b:26:87:cb:81:ef:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Oct 20 10:01:26 2025 GMT
            Not After : Oct 21 10:01:26 2025 GMT
        Subject: CN=d6815c6c271d820401dce517b0df9aa07f2e2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:57:f3:23:71:8e:b3:fe:ce:e3:5f:fb:b3:
                    88:b6:3d:fc:80:21:52:50:67:ef:50:7a:76:97:69:
                    ba:11:bc:dc:91:07:af:a0:de:e4:51:bc:f3:87:e8:
                    d0:a5:39:43:c1:8b:08:d3:20:b8:cd:d7:51:05:3c:
                    a8:52:94:2f:13:9b:16:00:dd:eb:ed:0f:cb:25:35:
                    d4:5e:85:b1:32:c1:fa:22:fd:58:8f:d8:8a:17:db:
                    f4:c1:f8:72:83:fc:6b:2c:9f:33:8f:72:eb:1e:fc:
                    b1:90:03:c6:d6:05:42:2a:eb:ce:92:3c:ca:7b:f2:
                    90:10:39:56:97:2c:a7:96:22:eb:6d:36:71:6e:70:
                    54:b9:f3:83:e3:1b:4a:e3:c8:58:b5:3a:d3:dc:87:
                    a6:cd:b5:63:cc:2c:4c:48:3c:ce:c9:ab:64:41:0e:
                    80:df:e9:96:cf:62:4a:0e:ed:b6:33:c9:34:3e:42:
                    a7:97:3c:91:80:64:86:3d:e1:93:24:a1:50:30:84:
                    3a:49:5c:c4:fb:c6:94:a7:f8:eb:33:70:55:c2:16:
                    dc:47:28:94:30:eb:2e:66:84:8f:d7:b3:d4:44:5d:
                    fa:be:89:18:d9:e3:f9:bd:6b:f7:6f:b2:7f:ec:44:
                    bf:c2:bd:23:46:ef:f0:97:58:20:01:a5:4c:e4:36:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:5C:6C:27:1D:82:04:01:DC:E5:17:B0:DF:9A:A0:7F:2E:26:95
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:59:31:21:36:50:4f:4e:95:7e:06:9e:a2:71:29:dd:4a:
         56:bf:db:91:63:de:d9:31:ee:8e:f9:68:ba:54:86:ab:42:16:
         88:e4:a6:f4:61:7c:d0:5b:bf:d9:7d:d8:be:18:73:04:f9:c1:
         3a:31:fb:40:c3:c7:e1:da:2a:85:93:4b:ff:4c:58:57:ad:86:
         7c:01:d9:10:53:19:ad:66:be:02:ef:3d:cf:b3:68:62:14:b6:
         2e:82:3b:7b:74:bf:ba:74:6c:fc:03:65:e5:ab:0c:a7:65:c8:
         0e:c4:7f:9e:d1:cf:ba:14:a3:c8:6a:94:ae:68:67:65:04:cb:
         64:2f:f7:f6:8e:a8:25:eb:e2:30:fe:9c:9e:35:79:fd:ba:bb:
         9d:82:73:aa:c6:46:bb:c1:a7:62:cd:fe:5c:36:ff:41:a4:b4:
         95:24:a9:11:60:cd:3f:c0:0b:da:38:b0:a6:ba:6e:d9:dd:3e:
         ae:fe:76:98:1b:98:aa:67:a8:b5:39:86:5f:56:ef:ea:6d:19:
         52:96:93:c8:75:21:54:46:b7:96:a4:f1:22:30:da:8c:64:3c:
         a4:de:01:b4:bf:b2:34:b2:11:e4:1d:ee:3c:7d:22:67:24:f5:
         62:2a:b1:a2:98:20:bf:49:f7:44:7c:94:10:80:87:c2:ee:be:
         33:8f:c1:27
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoBEQ8WcAC/18AbJofLge9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDFmZmQ3ZGE1ZWU0NTBmY2IxYTY1NmFiZmM2ZTBiMWIy
MWMzNjUwHhcNMjUxMDIwMTAwMTI2WhcNMjUxMDIxMTAwMTI2WjAzMTEwLwYDVQQD
EyhkNjgxNWM2YzI3MWQ4MjA0MDFkY2U1MTdiMGRmOWFhMDdmMmUyNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDRX8yNxjrP+zuNf+7OItj38gCFS
UGfvUHp2l2m6EbzckQevoN7kUbzzh+jQpTlDwYsI0yC4zddRBTyoUpQvE5sWAN3r
7Q/LJTXUXoWxMsH6Iv1Yj9iKF9v0wfhyg/xrLJ8zj3LrHvyxkAPG1gVCKuvOkjzK
e/KQEDlWlyynliLrbTZxbnBUufOD4xtK48hYtTrT3IemzbVjzCxMSDzOyatkQQ6A
3+mWz2JKDu22M8k0PkKnlzyRgGSGPeGTJKFQMIQ6SVzE+8aUp/jrM3BVwhbcRyiU
MOsuZoSP17PURF36vokY2eP5vWv3b7J/7ES/wr0jRu/wl1ggAaVM5Dah7wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNaBXGwnHYIEAdzlF7DfmqB/LiaVMB8GA1UdIwQY
MBaAFPsB/9faXuRQ/LGmVqv8bgsbIcNlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SF8xOXBlNUZEOHNhWldxX3h1Q3hzaHcyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTI2Y2VhLWY2NjAtNDhhMy04NjJm
LTkwNTAxYWJmNTM5MS8xLzEtd0hfMTlwZTVGRDhzYVpXcV94dUN4c2h3MlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI5L2UyNmNlYS1mNjYwLTQ4YTMtODYyZi05MDUwMWFiZjUz
OTEvMS8xLXdIXzE5cGU1RkQ4c2FaV3FfeHVDeHNodzJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR1Z
MSE2UE9OlX4GnqJxKd1KVr/bkWPe2THujvloulSGq0IWiOSm9GF80Fu/2X3Yvhhz
BPnBOjH7QMPH4doqhZNL/0xYV62GfAHZEFMZrWa+Au89z7NoYhS2LoI7e3S/unRs
/ANl5asMp2XIDsR/ntHPuhSjyGqUrmhnZQTLZC/39o6oJeviMP6cnjV5/bq7nYJz
qsZGu8GnYs3+XDb/QaS0lSSpEWDNP8AL2jiwprpu2d0+rv52mBuYqmeotTmGX1bv
6m0ZUpaTyHUhVEa3lqTxIjDajGQ8pN4BtL+yNLIR5B3uPH0iZyT1Yiqxopggv0n3
RHyUEICHwu6+M4/BJw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:56 2025 by rpki-client