Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File:                     Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier:          0epwVtXHxoQ++qqhbJ5u9fgirA7EioaMdDeF6Yv5pJU=
Subject key identifier:   1B:89:8D:BF:9B:B6:07:5F:B5:42:B9:84:93:EB:E2:83:6F:5A:CE:CE
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer:       /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial:       0199FC8FAF51E5826B9B5C297BFD32DB8D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number:          1532
Signing time:             Sun 19 Oct 2025 13:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:38 +0000
Files and hashes:         1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
                          2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: LRGIJkex0Yg7TR2sNuDUdWyQIpR5pZAHOsnoAG3ASxA=)
                          3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:af:51:e5:82:6b:9b:5c:29:7b:fd:32:db:8d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
        Validity
            Not Before: Oct 19 13:01:38 2025 GMT
            Not After : Oct 20 13:01:38 2025 GMT
        Subject: CN=1b898dbf9bb6075fb542b98493ebe2836f5acece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:10:71:6f:66:eb:c3:b6:bf:28:94:35:ca:
                    07:60:c1:48:e9:43:91:8c:c8:c2:98:89:c5:8d:2a:
                    64:7b:ea:35:77:86:38:8d:63:6c:65:c0:d2:44:93:
                    08:d2:31:3f:db:46:96:df:19:ac:86:e7:cf:2c:2c:
                    c6:a8:2c:77:a2:f5:14:76:d8:00:5c:bd:f9:00:b7:
                    a8:58:5a:30:6c:ce:7b:64:95:57:ce:82:54:f7:d6:
                    33:73:0f:7b:31:64:f8:87:0a:e6:fb:1f:0d:cd:9f:
                    28:47:3a:45:27:ba:c8:ae:a7:e9:88:e6:de:b4:eb:
                    1a:11:76:ca:22:69:0f:b6:88:c8:e6:7b:77:a7:02:
                    ca:f9:ff:69:96:45:57:1e:8f:a1:50:64:31:b4:9b:
                    e1:19:15:2d:f6:9c:71:fb:f0:76:fa:27:81:e4:47:
                    4c:80:e7:9e:a6:f7:70:4f:0f:5a:60:02:8f:31:37:
                    99:64:29:8f:e7:fd:4f:b8:4c:42:3f:0a:c5:bb:29:
                    e1:c2:f5:99:f4:09:66:0c:3e:19:c7:26:69:ce:19:
                    ec:0e:3c:cd:26:84:fd:98:68:56:79:0e:b5:b6:50:
                    f3:5e:88:fe:c0:b6:67:c9:a0:a0:de:08:ce:c3:30:
                    72:76:6e:e3:b5:91:9b:de:6d:24:67:8b:a9:5f:c0:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:89:8D:BF:9B:B6:07:5F:B5:42:B9:84:93:EB:E2:83:6F:5A:CE:CE
            X509v3 Authority Key Identifier:
                keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:67:c2:12:36:fe:8a:02:0c:05:1a:8f:7a:cd:1a:62:34:f7:
         8a:fa:b8:34:59:cd:f7:b8:9a:f4:e6:55:62:04:b6:a9:5a:41:
         d3:2f:65:75:dd:ce:dd:08:f0:13:db:55:e0:fc:0d:eb:38:ca:
         55:13:38:3b:b0:96:b9:5b:b5:ef:fe:cd:bd:74:34:e9:94:3c:
         18:10:74:6f:3d:6d:12:60:ef:3e:b7:92:b6:37:fd:f0:c7:53:
         03:a8:7d:1a:f3:5b:d9:d4:7d:bb:82:86:85:cc:78:48:69:14:
         24:b8:27:69:23:0e:a2:a2:be:50:92:05:f4:7e:75:e3:22:8b:
         e0:80:c2:6c:a5:ea:38:e8:08:85:33:49:64:57:35:0e:08:ba:
         53:1b:56:ac:7b:d8:ce:38:eb:c3:d0:fb:b2:8e:c8:80:08:ce:
         87:d3:1a:0e:2c:a8:19:2a:76:68:37:d1:ef:60:18:41:b0:90:
         63:a3:5b:f6:5a:24:97:20:53:54:af:cf:e7:dc:2e:62:f0:54:
         03:65:2a:2f:98:4f:6d:af:55:6d:01:29:53:a4:7f:2c:2a:36:
         89:1b:dc:db:72:11:23:72:3f:0c:c2:87:38:40:e8:02:24:17:
         df:58:04:41:b6:d4:77:31:74:79:fa:62:69:69:64:0c:41:ac:
         95:63:4f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j69R5YJrm1wpe/0y240bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi
MjVmZDcwHhcNMjUxMDE5MTMwMTM4WhcNMjUxMDIwMTMwMTM4WjAzMTEwLwYDVQQD
EygxYjg5OGRiZjliYjYwNzVmYjU0MmI5ODQ5M2ViZTI4MzZmNWFjZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VYQcW9m68O2vyiUNcoHYMFI6UOR
jMjCmInFjSpke+o1d4Y4jWNsZcDSRJMI0jE/20aW3xmshufPLCzGqCx3ovUUdtgA
XL35ALeoWFowbM57ZJVXzoJU99Yzcw97MWT4hwrm+x8NzZ8oRzpFJ7rIrqfpiObe
tOsaEXbKImkPtojI5nt3pwLK+f9plkVXHo+hUGQxtJvhGRUt9pxx+/B2+ieB5EdM
gOeepvdwTw9aYAKPMTeZZCmP5/1PuExCPwrFuynhwvWZ9AlmDD4ZxyZpzhnsDjzN
JoT9mGhWeQ61tlDzXoj+wLZnyaCg3gjOwzBydm7jtZGb3m0kZ4upX8DqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuJjb+btgdftUK5hJPr4oNvWs7OMB8GA1UdIwQY
MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt
NGJlZGQzYmQ2ZWExLzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx
LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WfCEjb+
igIMBRqPes0aYjT3ivq4NFnN97ia9OZVYgS2qVpB0y9ldd3O3QjwE9tV4PwN6zjK
VRM4O7CWuVu17/7NvXQ06ZQ8GBB0bz1tEmDvPreStjf98MdTA6h9GvNb2dR9u4KG
hcx4SGkUJLgnaSMOoqK+UJIF9H514yKL4IDCbKXqOOgIhTNJZFc1Dgi6UxtWrHvY
zjjrw9D7so7IgAjOh9MaDiyoGSp2aDfR72AYQbCQY6Nb9loklyBTVK/P59wuYvBU
A2UqL5hPba9VbQEpU6R/LCo2iRvc23IRI3I/DMKHOEDoAiQX31gEQbbUdzF0efpi
aWlkDEGslWNPjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:45 2025 by rpki-client