Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File:                     Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier:          RlKQ11FH7nu7G3hA+RRqNr8JNT7SMTKooOJIU5yHtMI=
Subject key identifier:   D5:2C:42:73:B7:37:95:EF:20:61:33:10:CB:26:09:CF:35:62:EA:CF
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer:       /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial:       0199FAD7FD2C8D2DE5F4355417666B2DF5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number:          16F3
Signing time:             Sun 19 Oct 2025 05:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:23 +0000
Files and hashes:         1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
                          2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: bFpqzY8iRhIqGUM5X1Bh4hHjZn0jmJq5XNliHWfpMwA=)
                          3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:fd:2c:8d:2d:e5:f4:35:54:17:66:6b:2d:f5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
        Validity
            Not Before: Oct 19 05:01:23 2025 GMT
            Not After : Oct 20 05:01:23 2025 GMT
        Subject: CN=d52c4273b73795ef20613310cb2609cf3562eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:cb:61:04:24:3b:e6:3d:3e:fa:43:27:c3:
                    05:dd:de:a1:53:9a:ad:43:d4:c5:9b:4e:0f:25:f3:
                    e8:ee:dc:7f:84:a2:a6:72:38:fb:59:4e:01:43:3a:
                    15:da:06:c4:53:cf:9f:60:a5:4c:ef:6e:cb:f4:0f:
                    68:6d:d3:a3:7d:e6:a5:7a:38:8d:14:aa:1f:95:72:
                    af:e9:a8:08:c2:bd:25:82:3d:9a:42:75:9b:9c:a4:
                    fc:18:ef:f9:5d:8b:ff:68:97:b4:54:55:6d:a3:f8:
                    4d:64:92:7d:5c:3f:93:8d:eb:db:f8:95:d1:1b:31:
                    70:8b:35:6b:55:4f:ff:8b:b8:81:ad:4e:c3:fe:05:
                    f4:02:db:df:b1:73:05:f5:52:23:eb:c6:d6:50:ff:
                    44:8b:b6:66:8b:65:e7:a6:79:5e:16:d0:8e:99:4a:
                    e5:ae:7c:15:29:ba:a3:87:f4:b8:48:5a:f4:6b:f9:
                    2f:2f:89:37:8e:8c:4d:a7:75:dc:07:6d:53:6e:27:
                    d4:b4:3e:e4:f2:bd:80:c8:00:73:20:25:3e:f6:3d:
                    c2:26:f4:93:c7:33:61:68:59:d4:4d:1a:40:fa:c2:
                    c6:a7:6f:5e:3f:93:a9:f6:81:66:37:44:3f:6f:26:
                    8f:14:3b:37:b4:74:d1:b6:fb:3b:2c:eb:dc:29:91:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2C:42:73:B7:37:95:EF:20:61:33:10:CB:26:09:CF:35:62:EA:CF
            X509v3 Authority Key Identifier:
                keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:d7:cf:f3:30:03:1c:1f:2c:1b:6b:09:c0:c5:33:63:77:
         08:e9:4d:bb:e3:af:67:8b:db:0a:37:c8:8e:85:fe:1f:22:78:
         cf:33:37:74:f3:07:11:b1:6c:3c:94:a7:91:6f:0f:86:df:97:
         98:11:52:f9:65:ec:9f:27:81:ea:cd:4c:26:de:b2:0e:f8:01:
         6f:8a:4b:93:a6:5a:03:6c:23:83:5f:7d:b0:4d:8c:47:23:7b:
         c3:32:88:96:78:20:bd:b2:63:ad:fe:d2:bd:21:71:63:33:97:
         fb:4d:e7:39:a2:51:79:d3:e7:a2:23:c5:f7:92:3a:39:d3:ed:
         16:56:bf:e2:8e:48:5b:f3:b0:e4:ce:7d:4c:a5:76:6b:42:11:
         14:3f:0e:a8:e4:c2:0f:61:be:6d:d7:85:b8:f3:a3:e4:61:ad:
         26:30:e5:ed:c6:50:c2:11:83:f5:25:f4:b9:b4:26:9e:d7:bb:
         22:2a:ae:53:9b:c2:d5:4f:ad:55:99:17:5f:2b:2c:6c:4b:d6:
         73:04:0b:ab:19:80:ef:64:06:4c:ad:ae:93:43:c9:12:18:37:
         a1:0a:09:95:61:d6:92:ac:5d:b7:5d:f8:ee:d6:65:cb:91:59:
         98:29:1d:44:bc:61:53:2c:3c:48:66:de:2e:c3:3f:09:32:dd:
         b5:2b:f0:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/0sjS3l9DVUF2ZrLfXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx
ZDc5ZWMwHhcNMjUxMDE5MDUwMTIzWhcNMjUxMDIwMDUwMTIzWjAzMTEwLwYDVQQD
EyhkNTJjNDI3M2I3Mzc5NWVmMjA2MTMzMTBjYjI2MDljZjM1NjJlYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVfLYQQkO+Y9PvpDJ8MF3d6hU5qt
Q9TFm04PJfPo7tx/hKKmcjj7WU4BQzoV2gbEU8+fYKVM727L9A9obdOjfealejiN
FKoflXKv6agIwr0lgj2aQnWbnKT8GO/5XYv/aJe0VFVto/hNZJJ9XD+Tjevb+JXR
GzFwizVrVU//i7iBrU7D/gX0AtvfsXMF9VIj68bWUP9Ei7Zmi2XnpnleFtCOmUrl
rnwVKbqjh/S4SFr0a/kvL4k3joxNp3XcB21TbifUtD7k8r2AyABzICU+9j3CJvST
xzNhaFnUTRpA+sLGp29eP5Op9oFmN0Q/byaPFDs3tHTRtvs7LOvcKZFfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUsQnO3N5XvIGEzEMsmCc81YurPMB8GA1UdIwQY
MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt
ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0
LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2fXz/Mw
AxwfLBtrCcDFM2N3COlNu+OvZ4vbCjfIjoX+HyJ4zzM3dPMHEbFsPJSnkW8Pht+X
mBFS+WXsnyeB6s1MJt6yDvgBb4pLk6ZaA2wjg199sE2MRyN7wzKIlnggvbJjrf7S
vSFxYzOX+03nOaJRedPnoiPF95I6OdPtFla/4o5IW/Ow5M59TKV2a0IRFD8OqOTC
D2G+bdeFuPOj5GGtJjDl7cZQwhGD9SX0ubQmnte7IiquU5vC1U+tVZkXXyssbEvW
cwQLqxmA72QGTK2uk0PJEhg3oQoJlWHWkqxdt1347tZly5FZmCkdRLxhUyw8SGbe
LsM/CTLdtSvwzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:46 2025 by rpki-client