Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          MwJmWzp4NMgQbzTK2xEl+y5l7ct4GzZAr6jzVFKy4+U=
Subject key identifier:   19:86:23:01:68:5B:38:E2:D0:31:2D:44:31:D1:6B:A8:46:6B:71:35
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       0199FC8F9BA16D379DD9F2DB092A49C753D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          0954
Signing time:             Sun 19 Oct 2025 13:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:33 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: 0lLtRHs3zYwnEHqLZ7q2fIphd4wclE/7VCksHUdgEIM=)
                          2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:9b:a1:6d:37:9d:d9:f2:db:09:2a:49:c7:53:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: Oct 19 13:01:33 2025 GMT
            Not After : Oct 20 13:01:33 2025 GMT
        Subject: CN=19862301685b38e2d0312d4431d16ba8466b7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:20:dd:a1:10:9a:be:df:9e:ed:57:ee:69:
                    97:74:23:a7:c5:07:01:0b:17:56:46:e7:90:03:52:
                    37:52:82:7c:4a:37:57:e4:14:fe:01:11:f1:13:cb:
                    05:90:0d:3a:69:22:01:38:b5:5e:a9:bf:74:0d:90:
                    ae:69:d5:8a:0b:8b:01:77:13:a0:b9:8e:55:cb:b3:
                    25:8c:27:99:06:46:00:e7:07:7f:ec:18:74:dc:6b:
                    ad:83:fa:ff:1a:77:eb:bf:a3:9d:17:f5:3f:e3:2f:
                    da:27:f9:86:a4:c0:4b:4d:4b:de:2c:68:6b:ad:78:
                    22:7a:62:7f:69:03:b4:1a:28:43:1b:f6:3a:6f:fd:
                    69:4e:79:dd:7d:23:b2:dc:b7:91:dd:ad:d7:90:97:
                    cb:e5:57:45:90:f3:c3:16:aa:7c:61:ce:10:48:13:
                    c0:be:8b:d0:b3:41:d8:ff:d3:37:fe:3c:96:5d:0a:
                    b3:77:c6:bf:8d:ee:b0:ee:8f:de:37:b4:f2:62:8a:
                    0f:17:64:fa:c7:bc:85:de:83:85:99:6e:0a:17:60:
                    80:5d:db:8b:f7:27:2d:31:ce:69:60:96:a5:d3:a0:
                    7e:f6:75:5d:b1:74:8b:1c:bb:52:5b:ad:db:d4:90:
                    61:f2:82:48:d5:b8:7b:74:c7:29:1d:ed:cd:3a:cc:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:86:23:01:68:5B:38:E2:D0:31:2D:44:31:D1:6B:A8:46:6B:71:35
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:12:96:8c:d9:ad:a9:fd:41:f6:b5:26:4d:d7:03:8b:35:
         fc:cb:7d:f4:9a:59:93:1b:c4:ac:cf:79:58:3f:4b:8d:95:e5:
         ba:ff:8b:29:43:b3:11:41:64:02:3c:49:77:47:2f:80:f6:a3:
         f3:2c:7f:8e:0a:7a:df:2f:ae:02:18:e2:1c:97:5d:dc:44:ec:
         e2:56:11:cb:a8:e4:f5:79:c5:7a:51:ea:e7:a7:01:f2:68:26:
         4d:96:22:3b:bd:0d:eb:b2:06:36:54:1f:9e:e9:bd:bf:3e:e8:
         84:77:37:36:39:dc:a0:20:8f:12:66:82:05:1d:fd:4c:3a:63:
         f9:e7:b7:87:85:20:2b:c7:b3:a2:a7:41:f6:4a:de:c0:51:0f:
         de:af:f6:3d:2a:a5:a1:00:d6:5b:ee:50:74:1f:d4:ba:a9:34:
         d2:24:90:41:69:42:79:a9:af:2b:37:f8:9b:e2:e4:0b:1f:ea:
         85:5f:9f:f1:7c:ce:d4:63:02:5a:2c:c6:f5:98:b6:02:04:bd:
         dc:53:5c:f9:87:a1:e7:e0:e0:5d:49:00:7c:b3:f5:ab:5c:8a:
         51:6b:f8:b5:14:de:ea:1e:c6:85:d6:f5:85:ea:08:7b:ac:56:
         54:13:25:ba:89:66:a3:cd:20:20:19:5e:04:99:c0:30:50:23:
         23:70:df:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5uhbTed2fLbCSpJx1PVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4
ZTNjYTgwHhcNMjUxMDE5MTMwMTMzWhcNMjUxMDIwMTMwMTMzWjAzMTEwLwYDVQQD
EygxOTg2MjMwMTY4NWIzOGUyZDAzMTJkNDQzMWQxNmJhODQ2NmI3MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWQg3aEQmr7fnu1X7mmXdCOnxQcB
CxdWRueQA1I3UoJ8SjdX5BT+ARHxE8sFkA06aSIBOLVeqb90DZCuadWKC4sBdxOg
uY5Vy7MljCeZBkYA5wd/7Bh03Gutg/r/Gnfrv6OdF/U/4y/aJ/mGpMBLTUveLGhr
rXgiemJ/aQO0GihDG/Y6b/1pTnndfSOy3LeR3a3XkJfL5VdFkPPDFqp8Yc4QSBPA
vovQs0HY/9M3/jyWXQqzd8a/je6w7o/eN7TyYooPF2T6x7yF3oOFmW4KF2CAXduL
9yctMc5pYJal06B+9nVdsXSLHLtSW63b1JBh8oJI1bh7dMcpHe3NOsw08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmGIwFoWzji0DEtRDHRa6hGa3E1MB8GA1UdIwQY
MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt
NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0
LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2cSlozZ
ran9Qfa1Jk3XA4s1/Mt99JpZkxvErM95WD9LjZXluv+LKUOzEUFkAjxJd0cvgPaj
8yx/jgp63y+uAhjiHJdd3ETs4lYRy6jk9XnFelHq56cB8mgmTZYiO70N67IGNlQf
num9vz7ohHc3NjncoCCPEmaCBR39TDpj+ee3h4UgK8ezoqdB9krewFEP3q/2PSql
oQDWW+5QdB/Uuqk00iSQQWlCeamvKzf4m+LkCx/qhV+f8XzO1GMCWizG9Zi2AgS9
3FNc+Yeh5+DgXUkAfLP1q1yKUWv4tRTe6h7Ghdb1heoIe6xWVBMluolmo80gIBle
BJnAMFAjI3Dfiw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:50 2025 by rpki-client