Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File:                     cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier:          XpFLLgdLrXb/LYbQiwUglYiHg8QJ0090rDV3IS8/tQs=
Subject key identifier:   9F:32:CE:88:6E:A4:AE:07:FE:61:51:7D:A8:C2:96:F6:81:7E:9B:FB
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       0199FAD7F507BAABC9A761D418D32449E3FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 05:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:20 +0000
Files and hashes:         1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=)
                          2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=)
                          3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=)
                          4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=)
                          5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=)
                          6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=)
                          7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=)
                          8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=)
                          9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=)
                          10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=)
                          11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=)
                          12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: BbYj5QGQutsDSpMJ5qTieUzoztnROgcLa8i4twzrAHY=)
                          13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=)
                          14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=)
                          15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=)
                          16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:f5:07:ba:ab:c9:a7:61:d4:18:d3:24:49:e3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Oct 19 05:01:20 2025 GMT
            Not After : Oct 20 05:01:20 2025 GMT
        Subject: CN=9f32ce886ea4ae07fe61517da8c296f6817e9bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:0e:35:25:88:d7:31:9e:ae:e4:6c:d6:4b:
                    6c:70:61:9f:4d:6e:f8:69:9d:6f:fb:25:8c:2c:2a:
                    7d:d9:d2:bf:d9:b7:47:1b:2d:1d:bf:bc:15:e5:ac:
                    3c:65:a9:d6:1d:e7:c6:1c:a3:e6:cc:14:d5:e2:fa:
                    8f:a4:85:87:42:7e:5b:92:fb:a0:e6:2e:29:c6:a8:
                    06:16:5c:cc:8d:e4:85:83:f4:b3:62:12:02:15:cc:
                    23:1c:5e:51:03:d3:db:eb:15:b4:8d:20:3d:ec:57:
                    72:5d:70:ae:30:e2:38:c4:b9:25:9c:9b:aa:21:ee:
                    7f:18:74:1c:69:85:68:4a:4b:ad:38:2e:53:ae:db:
                    d4:54:b7:6b:5b:17:f1:50:38:94:2b:c9:48:67:7b:
                    b4:ab:10:c0:bc:62:f7:a6:b9:2f:ea:68:56:46:e0:
                    65:03:1e:fe:df:08:76:b2:12:a1:17:0f:3d:9e:cd:
                    0e:63:8a:54:72:29:1d:68:f4:64:7b:19:65:3a:55:
                    11:7b:35:50:91:0e:8f:e0:d3:8f:da:48:6f:76:08:
                    75:05:0d:eb:53:69:22:a0:0b:20:5d:68:92:d9:a2:
                    ba:e1:91:96:cc:7a:b5:b0:a8:22:9c:80:94:91:8a:
                    43:14:c8:47:7f:2b:d4:b5:a2:a5:5a:60:87:5a:23:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:CE:88:6E:A4:AE:07:FE:61:51:7D:A8:C2:96:F6:81:7E:9B:FB
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:40:ce:2c:d7:3b:f5:e3:92:3b:2c:14:52:96:70:ff:48:
         d3:e8:0e:1b:e9:89:a3:b0:b3:46:ab:e3:22:77:39:e6:61:6e:
         c1:b8:91:d9:75:08:5d:31:90:09:46:d0:97:b0:8d:97:a5:83:
         d2:e6:3d:bc:a9:6f:65:a7:74:1a:b0:c6:4f:3b:3f:c0:f7:2c:
         87:76:8e:14:ad:23:f6:b0:b7:64:50:76:5a:ac:d0:e1:4c:ce:
         59:60:19:14:87:d4:c2:bd:ba:37:dd:85:db:fd:7e:0d:47:e3:
         e9:c8:61:81:a7:26:6c:06:e6:51:56:60:8f:3c:d6:1b:63:79:
         41:b1:0b:15:73:d7:e4:7c:55:84:8a:0e:d2:d5:d0:05:fb:c3:
         c5:60:9a:fa:5b:9c:71:9e:26:fc:a5:29:72:15:e1:f6:64:f5:
         c7:13:e3:79:fa:1a:2b:63:32:14:c5:f4:0e:0f:a4:54:15:f3:
         0d:de:48:e9:8b:ac:23:08:09:f5:fb:19:57:5b:57:ee:2a:e2:
         2d:d8:1e:6e:3b:d4:ba:c3:81:c4:95:b1:d3:41:21:05:44:19:
         b5:4c:79:00:83:98:06:bf:3f:fe:29:2d:27:c9:43:55:0b:09:
         a4:4f:a0:27:44:d6:38:d7:7c:1f:a2:f4:26:d4:d8:ca:fe:30:
         56:0e:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:25 2025 by rpki-client