Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File:                     u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier:          nDao5I/oMOyvWNyoMnkcQf52s8sylgRSy5eB9XATJz8=
Subject key identifier:   B7:1D:8E:DD:00:4B:C7:F8:3C:74:AB:AA:D2:5D:23:45:C3:29:45:51
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer:       /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial:       019A02227650602EFE75FEBDC254CB283B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number:          0E74
Signing time:             Mon 20 Oct 2025 15:00:04 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:04 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:04 +0000
Files and hashes:         1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
                          2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
                          3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: OXOq4FmnBlThpGI3ZXyopWv01se130ahmJj6NSMxSJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:22:76:50:60:2e:fe:75:fe:bd:c2:54:cb:28:3b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
        Validity
            Not Before: Oct 20 15:00:04 2025 GMT
            Not After : Oct 21 15:00:04 2025 GMT
        Subject: CN=b71d8edd004bc7f83c74abaad25d2345c3294551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:38:19:a7:42:f9:41:ac:73:39:8b:20:85:
                    ec:16:dd:ce:4f:b6:29:f1:76:1e:84:d2:a1:c3:69:
                    d0:35:4e:fc:d5:98:da:be:a7:82:b8:86:7b:0c:9f:
                    35:92:0d:62:0c:3e:a8:53:d2:ed:89:7a:cc:de:cb:
                    28:95:ab:d8:f0:cd:90:f5:5c:b6:93:82:4e:4b:19:
                    17:fd:bb:c1:15:13:45:51:78:b2:6f:d8:ff:6f:bb:
                    2b:c9:82:79:fa:e7:e6:f3:7e:8c:0d:93:9a:14:25:
                    1a:c3:3f:f7:c3:1e:2f:c0:83:73:93:ef:d0:ea:5c:
                    25:07:84:71:31:94:b9:d1:95:63:e0:99:3c:b8:96:
                    11:c2:bf:95:13:fe:ca:11:8f:20:f3:f7:e5:78:72:
                    c3:70:d9:e0:8a:75:2a:08:62:d8:f5:03:cf:70:50:
                    d0:af:bc:29:9d:83:0c:b8:e5:bf:48:9e:e5:ec:56:
                    a5:bd:5f:54:5e:39:77:d2:e5:58:f8:72:e2:78:41:
                    f6:7d:ee:6c:af:4f:60:ce:e5:a6:34:9b:00:9b:b3:
                    85:f1:4b:ce:6a:c1:e5:de:01:ce:bb:5f:98:a0:0c:
                    a4:61:98:7b:b5:23:d7:d1:b8:f6:7a:44:7b:05:85:
                    30:cc:f1:df:9c:22:ed:55:91:20:9f:bc:7a:f4:97:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:8E:DD:00:4B:C7:F8:3C:74:AB:AA:D2:5D:23:45:C3:29:45:51
            X509v3 Authority Key Identifier:
                keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:42:34:f2:67:1b:79:a5:0e:9c:cf:82:5f:26:39:91:d5:a0:
         d5:ab:44:45:1a:8d:bf:3a:c5:d3:55:17:d7:71:fa:16:e7:19:
         4a:de:17:59:46:93:70:ca:68:56:ab:37:22:b0:1d:ac:f5:9e:
         49:11:fa:03:4d:09:0a:41:00:7f:b8:31:93:ac:6a:ca:22:27:
         8c:c7:d2:ce:b3:c7:94:8b:c0:a4:f6:8c:05:7a:21:45:11:dc:
         4d:43:47:0a:e5:91:bb:58:69:09:e6:5d:43:e8:6e:f3:48:b3:
         ae:c6:6b:ed:fe:16:2e:e7:a2:3f:07:67:6c:bd:f6:d0:2e:77:
         d8:7d:87:05:97:a6:d0:29:2a:8f:bc:18:52:bc:ce:e1:17:ac:
         e1:ab:27:99:bb:50:51:e1:ba:32:f4:b8:14:ef:92:5e:58:4c:
         1c:79:38:35:39:31:8f:b4:6e:26:41:15:9e:cc:5c:f3:b0:89:
         df:15:9a:70:b3:86:fc:f2:ee:b0:3c:a0:59:ce:1d:b8:b9:8e:
         86:9b:9c:a6:27:2e:89:55:fe:92:3f:3b:54:d7:b9:02:94:52:
         82:1d:2a:8f:6d:ae:73:de:07:fd:23:4e:29:d3:18:c7:49:80:
         61:c8:5b:55:9b:55:32:c3:ba:95:63:14:a3:27:aa:54:98:9a:
         f4:18:48:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCInZQYC7+df69wlTLKDsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjUxMDIwMTUwMDA0WhcNMjUxMDIxMTUwMDA0WjAzMTEwLwYDVQQD
EyhiNzFkOGVkZDAwNGJjN2Y4M2M3NGFiYWFkMjVkMjM0NWMzMjk0NTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBk4GadC+UGsczmLIIXsFt3OT7Yp
8XYehNKhw2nQNU781ZjavqeCuIZ7DJ81kg1iDD6oU9LtiXrM3ssolavY8M2Q9Vy2
k4JOSxkX/bvBFRNFUXiyb9j/b7sryYJ5+ufm836MDZOaFCUawz/3wx4vwINzk+/Q
6lwlB4RxMZS50ZVj4Jk8uJYRwr+VE/7KEY8g8/fleHLDcNnginUqCGLY9QPPcFDQ
r7wpnYMMuOW/SJ7l7FalvV9UXjl30uVY+HLieEH2fe5sr09gzuWmNJsAm7OF8UvO
asHl3gHOu1+YoAykYZh7tSPX0bj2ekR7BYUwzPHfnCLtVZEgn7x69JcdlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcdjt0AS8f4PHSrqtJdI0XDKUVRMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEI08mcb
eaUOnM+CXyY5kdWg1atERRqNvzrF01UX13H6FucZSt4XWUaTcMpoVqs3IrAdrPWe
SRH6A00JCkEAf7gxk6xqyiInjMfSzrPHlIvApPaMBXohRRHcTUNHCuWRu1hpCeZd
Q+hu80izrsZr7f4WLueiPwdnbL320C532H2HBZem0Ckqj7wYUrzO4Res4asnmbtQ
UeG6MvS4FO+SXlhMHHk4NTkxj7RuJkEVnsxc87CJ3xWacLOG/PLusDygWc4duLmO
hpucpicuiVX+kj87VNe5ApRSgh0qj22uc94H/SNOKdMYx0mAYchbVZtVMsO6lWMU
oyeqVJia9BhIzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:28:23 2025 by rpki-client