Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File:                     9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier:          ph63iTcYVom3T8Z1iMzz5UBbf2ouM8wE7gelyG/zZOs=
Subject key identifier:   CA:C2:02:CA:DE:6B:F4:DA:DF:7B:82:EB:7E:B1:AF:1D:33:20:34:D9
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer:       /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial:       0199FEEB9B878636F12298DFC32BA605AF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number:          0907
Signing time:             Mon 20 Oct 2025 00:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:17 +0000
Files and hashes:         1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: dSOdB1TOPeYzL+n28G0aBFGyeELxR9MBPhUv//ZhaH0=)
                          2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
                          3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:9b:87:86:36:f1:22:98:df:c3:2b:a6:05:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
        Validity
            Not Before: Oct 20 00:01:17 2025 GMT
            Not After : Oct 21 00:01:17 2025 GMT
        Subject: CN=cac202cade6bf4dadf7b82eb7eb1af1d332034d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:ee:2e:69:4b:a6:24:74:3e:68:dc:ea:c2:
                    66:13:f1:8e:a4:fa:24:bc:b2:62:74:79:fa:37:b3:
                    59:30:91:40:bc:9d:b9:c5:43:2b:ce:82:bf:1a:03:
                    ae:40:2b:55:af:27:e7:21:e0:e1:e2:20:f3:ce:bd:
                    5b:b0:ac:75:c7:67:fe:89:7e:7c:7f:14:a6:b5:99:
                    96:8c:da:8b:6e:21:94:82:c2:ab:3e:9c:3d:56:4a:
                    bf:fd:fc:4f:0b:4a:7f:8c:dc:3d:f3:93:75:5e:ec:
                    cd:47:9e:a5:73:57:a0:12:32:04:b2:24:86:b6:62:
                    b2:3b:40:23:63:a3:55:bf:5d:ac:4d:f9:09:ab:ad:
                    c0:d6:4b:46:67:dc:da:99:12:b1:20:80:75:86:f1:
                    ce:a4:19:2a:f5:e9:94:51:52:14:e7:68:cd:16:9a:
                    d8:a3:77:54:6d:fa:55:bb:d1:bb:3b:fd:f7:a3:15:
                    41:a1:1f:bc:15:16:31:fd:43:d0:ca:0e:5b:96:22:
                    82:60:80:53:30:09:9c:a8:bd:88:98:66:81:50:a3:
                    fe:20:53:90:fd:42:2e:00:3c:49:83:80:fb:03:2f:
                    34:b2:92:d7:97:2b:71:6b:de:1a:ff:93:f7:ed:8f:
                    73:12:d6:43:95:61:14:d4:92:94:59:8b:9d:1d:e9:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C2:02:CA:DE:6B:F4:DA:DF:7B:82:EB:7E:B1:AF:1D:33:20:34:D9
            X509v3 Authority Key Identifier:
                keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:7b:e0:e9:8c:80:86:27:17:cd:52:d6:28:09:54:99:aa:
         d3:d6:00:7c:0e:70:b3:fe:3a:08:1e:e8:9d:85:c8:a7:66:97:
         a5:bb:82:86:ca:72:a6:7d:33:65:6b:31:2f:fc:5a:ad:2c:75:
         25:5f:01:fd:07:52:91:fa:aa:59:b9:23:7d:7c:6c:64:fd:a8:
         d4:17:ee:4e:d9:1d:86:07:7f:4a:a0:35:82:a2:bd:fa:52:c6:
         ef:94:ce:18:72:26:bb:95:59:bf:eb:5b:61:8c:df:cf:53:a3:
         16:18:65:f7:08:fa:45:18:db:fd:b4:6b:86:69:52:26:94:d5:
         f9:ae:e2:06:ae:c4:3b:39:48:4f:2c:5a:0c:17:ab:e7:7f:0b:
         a9:76:10:90:7a:36:0f:39:6f:1a:e1:32:46:b1:48:80:51:6c:
         40:85:f6:72:c2:07:56:81:e6:20:96:8e:d9:e4:42:31:25:df:
         ee:18:05:c8:3e:53:7c:4a:ac:3e:14:7e:71:50:41:8c:50:c9:
         d5:88:9b:af:0f:5c:2a:a2:ae:43:5b:92:08:b4:23:80:1d:18:
         d0:34:b5:c0:ae:36:ad:3a:c0:fc:6f:c4:7f:dd:70:84:0d:e6:
         f6:72:ef:03:b6:be:96:20:90:d0:6f:dd:49:fb:4e:90:00:e0:
         05:c1:63:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+65uHhjbxIpjfwyumBa9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjUxMDIwMDAwMTE3WhcNMjUxMDIxMDAwMTE3WjAzMTEwLwYDVQQD
EyhjYWMyMDJjYWRlNmJmNGRhZGY3YjgyZWI3ZWIxYWYxZDMzMjAzNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUbuLmlLpiR0Pmjc6sJmE/GOpPok
vLJidHn6N7NZMJFAvJ25xUMrzoK/GgOuQCtVryfnIeDh4iDzzr1bsKx1x2f+iX58
fxSmtZmWjNqLbiGUgsKrPpw9Vkq//fxPC0p/jNw985N1XuzNR56lc1egEjIEsiSG
tmKyO0AjY6NVv12sTfkJq63A1ktGZ9zamRKxIIB1hvHOpBkq9emUUVIU52jNFprY
o3dUbfpVu9G7O/33oxVBoR+8FRYx/UPQyg5bliKCYIBTMAmcqL2ImGaBUKP+IFOQ
/UIuADxJg4D7Ay80spLXlytxa94a/5P37Y9zEtZDlWEU1JKUWYudHennqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrCAsrea/Ta33uC636xrx0zIDTZMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeR74OmM
gIYnF81S1igJVJmq09YAfA5ws/46CB7onYXIp2aXpbuChspypn0zZWsxL/xarSx1
JV8B/QdSkfqqWbkjfXxsZP2o1BfuTtkdhgd/SqA1gqK9+lLG75TOGHImu5VZv+tb
YYzfz1OjFhhl9wj6RRjb/bRrhmlSJpTV+a7iBq7EOzlITyxaDBer538LqXYQkHo2
DzlvGuEyRrFIgFFsQIX2csIHVoHmIJaO2eRCMSXf7hgFyD5TfEqsPhR+cVBBjFDJ
1Yibrw9cKqKuQ1uSCLQjgB0Y0DS1wK42rTrA/G/Ef91whA3m9nLvA7a+liCQ0G/d
SftOkADgBcFjSg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:07 2025 by rpki-client