Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          4ig+sOYs5e6/bNVzi1D2XTdQ8fv7C2vOXf/+yhARQ8Q=
Subject key identifier:   84:33:71:8D:E6:1E:A5:A6:69:86:98:76:88:E5:44:48:DE:27:3F:91
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       019A0110C2B81B293C3DD18453DC7577B345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          16EF
Signing time:             Mon 20 Oct 2025 10:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:06 +0000
Files and hashes:         1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: 9QIYuLVoH5FIiOzlzVv2PN4npPo0W+xscRMQeL5pKt4=)
                          2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
                          3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:c2:b8:1b:29:3c:3d:d1:84:53:dc:75:77:b3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: Oct 20 10:01:06 2025 GMT
            Not After : Oct 21 10:01:06 2025 GMT
        Subject: CN=8433718de61ea5a66986987688e54448de273f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:93:6a:d3:c5:ea:96:2b:7d:7e:c1:aa:e2:
                    63:7b:02:49:a9:ad:b0:e4:52:5e:60:d3:35:8c:d5:
                    a1:31:0f:7d:9f:42:00:9d:e7:67:b5:ff:f8:8f:4c:
                    83:43:8a:c5:58:72:3f:4f:c0:95:07:5a:8b:7c:ad:
                    a0:31:de:f9:39:4a:f2:7b:b5:8f:c0:f5:06:ad:b3:
                    41:98:94:5c:6c:b1:95:d7:4a:5b:2c:8d:e8:84:cc:
                    90:0a:94:84:13:91:2b:83:1f:25:da:7a:06:9b:57:
                    8e:8f:f7:6e:85:ee:65:9d:e9:32:91:39:99:69:70:
                    e6:e9:4e:7e:1d:76:94:b6:54:72:e6:97:f7:26:9e:
                    5b:3a:71:c3:8d:7b:43:b7:fe:02:61:82:36:94:c9:
                    5d:ac:c2:c1:a1:47:dc:66:71:4e:1f:fc:de:46:f8:
                    0f:bc:12:5b:90:8e:fc:cf:a0:ee:77:54:e8:ce:f0:
                    6c:f8:60:59:13:bc:34:42:00:a6:e8:27:ee:f8:a4:
                    8a:da:dc:9d:9d:0c:b1:5c:b1:9a:18:6c:28:2e:93:
                    2b:fa:15:65:69:fe:fc:57:77:63:33:96:e3:ba:8b:
                    b2:66:4c:f3:73:82:aa:c5:ec:7d:76:31:35:e8:0b:
                    07:a4:bb:6b:31:25:bf:3e:ca:a7:ea:2c:a4:92:0a:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:33:71:8D:E6:1E:A5:A6:69:86:98:76:88:E5:44:48:DE:27:3F:91
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:14:0a:9a:51:03:b4:30:ba:ab:62:c8:e7:8d:17:b7:9d:39:
         2e:fb:ec:82:89:41:c0:eb:b2:88:ea:d1:19:70:1b:8d:73:e4:
         08:7c:e2:64:e6:dd:bf:84:16:e9:5a:49:68:3c:84:71:fc:2b:
         e3:fb:1d:a0:6e:a0:77:89:d1:58:19:bb:b6:7e:6e:c5:f0:1e:
         ed:b3:a3:a6:b7:25:aa:be:0c:ba:a0:ce:f4:83:79:6c:78:30:
         80:86:72:9e:f0:d9:df:be:e2:e8:f5:3a:a3:5c:7b:d1:f6:bd:
         b0:2a:7b:a4:c6:c8:54:f2:c0:c5:6b:42:9f:43:6a:66:42:9d:
         77:e7:b8:14:dd:95:ca:1b:6c:49:99:89:3d:81:a4:fe:29:a5:
         eb:20:d8:2d:58:fc:cd:85:69:84:77:34:87:54:48:74:b6:e6:
         0f:6a:9d:99:8f:ab:49:1e:bc:ad:cb:6e:4a:38:71:b2:54:1c:
         88:ca:30:e5:62:de:83:6e:26:88:79:15:0e:56:d0:c8:b6:00:
         98:67:ad:01:9f:76:36:9b:b1:e3:e0:4b:91:49:3b:f2:7a:e3:
         67:41:70:73:75:aa:fa:df:ba:5e:2e:b2:54:58:8f:bd:4c:28:
         dc:c8:3f:dd:15:98:8e:10:74:13:cf:43:84:94:64:54:f6:e3:
         ce:9b:4a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEMK4Gyk8PdGEU9x1d7NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjUxMDIwMTAwMTA2WhcNMjUxMDIxMTAwMTA2WjAzMTEwLwYDVQQD
Eyg4NDMzNzE4ZGU2MWVhNWE2Njk4Njk4NzY4OGU1NDQ0OGRlMjczZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6TatPF6pYrfX7BquJjewJJqa2w
5FJeYNM1jNWhMQ99n0IAnedntf/4j0yDQ4rFWHI/T8CVB1qLfK2gMd75OUrye7WP
wPUGrbNBmJRcbLGV10pbLI3ohMyQCpSEE5Ergx8l2noGm1eOj/duhe5lnekykTmZ
aXDm6U5+HXaUtlRy5pf3Jp5bOnHDjXtDt/4CYYI2lMldrMLBoUfcZnFOH/zeRvgP
vBJbkI78z6Dud1TozvBs+GBZE7w0QgCm6Cfu+KSK2tydnQyxXLGaGGwoLpMr+hVl
af78V3djM5bjuouyZkzzc4Kqxex9djE16AsHpLtrMSW/Psqn6iykkgrq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQzcY3mHqWmaYaYdojlREjeJz+RMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRQKmlED
tDC6q2LI540Xt505LvvsgolBwOuyiOrRGXAbjXPkCHziZObdv4QW6VpJaDyEcfwr
4/sdoG6gd4nRWBm7tn5uxfAe7bOjprclqr4MuqDO9IN5bHgwgIZynvDZ377i6PU6
o1x70fa9sCp7pMbIVPLAxWtCn0NqZkKdd+e4FN2VyhtsSZmJPYGk/iml6yDYLVj8
zYVphHc0h1RIdLbmD2qdmY+rSR68rctuSjhxslQciMow5WLeg24miHkVDlbQyLYA
mGetAZ92Npux4+BLkUk78nrjZ0Fwc3Wq+t+6Xi6yVFiPvUwo3Mg/3RWYjhB0E89D
hJRkVPbjzptK6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:07 2025 by rpki-client