Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File:                     DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier:          m5AWEKitZMkahjPOjY0O56QGrrh8CSdV6geJ7mw+vSo=
Subject key identifier:   DC:D4:76:03:CE:8D:B4:F2:5A:5B:80:85:53:68:07:7A:3A:67:A9:10
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer:       /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial:       0199FBEB7184C6FEF60C63C4468B1CB88ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:15 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:15 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:15 +0000
Files and hashes:         1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
                          2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
                          3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: eeb0jVK7WVcVQDeGwRox5oi/6CEyaXom5J3Pr2k3khA=)
                          4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:71:84:c6:fe:f6:0c:63:c4:46:8b:1c:b8:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
        Validity
            Not Before: Oct 19 10:02:15 2025 GMT
            Not After : Oct 20 10:02:15 2025 GMT
        Subject: CN=dcd47603ce8db4f25a5b80855368077a3a67a910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:c7:22:ed:ef:46:f8:8d:8a:76:a8:ed:d5:
                    fe:72:70:60:e1:7f:44:3d:7c:40:cf:45:b2:03:ce:
                    dc:c3:8c:a7:2e:94:13:77:9e:05:52:82:08:e2:e4:
                    ef:ce:4a:c2:cb:a4:b5:57:87:df:19:d2:46:d2:8a:
                    3c:fc:d2:9c:bd:70:82:2c:86:9a:41:ea:1e:69:6f:
                    ed:86:5b:78:81:ce:fd:f0:96:30:82:52:85:9a:35:
                    65:b5:8a:97:39:3d:d8:a8:9e:ff:51:46:0a:03:7b:
                    3a:1d:2f:b4:08:65:63:86:ef:8f:68:b1:74:e0:f2:
                    79:a5:ad:f1:87:ec:50:de:d1:67:2c:13:15:e1:67:
                    57:e2:49:00:4b:3f:9c:9e:87:fb:99:bc:bf:74:45:
                    9b:08:1e:9f:14:98:77:3f:60:59:bf:9e:00:1e:b2:
                    5c:c5:dc:1b:82:6e:30:9e:de:d6:22:4a:d6:4f:e9:
                    af:a3:eb:02:f7:ac:41:5f:9f:84:e8:75:1e:40:b4:
                    e6:46:22:f6:b7:76:75:1e:0c:8a:1a:d1:fb:e3:b3:
                    fd:0c:b5:c8:05:99:fa:a9:f1:21:a0:45:80:82:ba:
                    6b:55:f6:a4:71:a5:7a:54:cd:1b:c2:12:05:2b:6c:
                    ce:e3:05:6f:1e:c4:51:05:0b:2e:df:b6:2c:d8:c9:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:76:03:CE:8D:B4:F2:5A:5B:80:85:53:68:07:7A:3A:67:A9:10
            X509v3 Authority Key Identifier:
                keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:a4:8d:24:5f:24:c2:61:b5:40:29:7e:83:46:d3:da:79:
         d2:30:fb:6c:9e:ba:bd:4d:66:e7:c5:19:3b:4d:5f:88:a4:30:
         85:00:42:b0:49:0b:68:05:6d:c0:52:e8:90:50:bb:6c:aa:7c:
         c7:60:93:17:61:2f:f1:fe:69:27:8f:b8:f3:87:18:18:7f:50:
         17:dc:ab:e1:19:2b:93:c8:26:55:06:99:b7:79:c0:3c:64:78:
         ba:a2:30:2b:a7:f6:43:6c:a9:27:e0:c6:25:b7:2e:6d:bc:9e:
         c3:83:b0:a2:45:dc:cf:68:82:82:87:88:e3:92:61:dd:83:0c:
         55:2f:8c:90:91:3e:9b:39:c3:78:b3:ca:0c:4d:dd:5d:e9:44:
         e3:5f:b9:df:c9:2d:d2:e8:df:53:81:ea:f1:8f:90:40:d0:49:
         a8:02:98:fd:29:4a:c6:ff:fd:58:56:23:85:a5:b1:23:5f:a4:
         25:26:7d:46:7b:b7:22:98:ec:ac:73:2b:07:41:cc:be:91:78:
         92:1c:41:72:9b:33:eb:9e:a8:b8:3c:5b:48:1a:11:9d:24:57:
         09:56:9d:32:5d:0a:fb:63:5b:3b:32:b5:44:18:d5:34:07:3d:
         79:db:35:24:37:f9:51:bd:ac:e1:70:bf:4e:e1:f9:ed:2c:10:
         f0:c3:7e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763GExv72DGPERoscuIq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjUxMDE5MTAwMjE1WhcNMjUxMDIwMTAwMjE1WjAzMTEwLwYDVQQD
EyhkY2Q0NzYwM2NlOGRiNGYyNWE1YjgwODU1MzY4MDc3YTNhNjdhOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0nHIu3vRviNinao7dX+cnBg4X9E
PXxAz0WyA87cw4ynLpQTd54FUoII4uTvzkrCy6S1V4ffGdJG0oo8/NKcvXCCLIaa
QeoeaW/thlt4gc798JYwglKFmjVltYqXOT3YqJ7/UUYKA3s6HS+0CGVjhu+PaLF0
4PJ5pa3xh+xQ3tFnLBMV4WdX4kkASz+cnof7mby/dEWbCB6fFJh3P2BZv54AHrJc
xdwbgm4wnt7WIkrWT+mvo+sC96xBX5+E6HUeQLTmRiL2t3Z1HgyKGtH747P9DLXI
BZn6qfEhoEWAgrprVfakcaV6VM0bwhIFK2zO4wVvHsRRBQsu37Ys2MnqeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzUdgPOjbTyWluAhVNoB3o6Z6kQMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7ikjSRf
JMJhtUApfoNG09p50jD7bJ66vU1m58UZO01fiKQwhQBCsEkLaAVtwFLokFC7bKp8
x2CTF2Ev8f5pJ4+484cYGH9QF9yr4Rkrk8gmVQaZt3nAPGR4uqIwK6f2Q2ypJ+DG
Jbcubbyew4OwokXcz2iCgoeI45Jh3YMMVS+MkJE+mznDeLPKDE3dXelE41+538kt
0ujfU4Hq8Y+QQNBJqAKY/SlKxv/9WFYjhaWxI1+kJSZ9Rnu3IpjsrHMrB0HMvpF4
khxBcpsz656ouDxbSBoRnSRXCVadMl0K+2NbOzK1RBjVNAc9eds1JDf5Ub2s4XC/
TuH57SwQ8MN+9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:18 2025 by rpki-client