Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          TkAhezfmzMF/12jKJv3cbpkm18pHlUU8cfLmQ8kcD/0=
Subject key identifier:   97:8F:CA:4B:FE:65:73:E6:96:69:19:34:0D:FC:FC:F0:88:99:29:D5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       0199FE0FF6C2C5ECFCDE7A7D41B1DA42931F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 20:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:23 +0000
Files and hashes:         1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
                          2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
                          3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: I1UZRABsBN+WYWGG4v4IZ5EU2CZyLygxuMPGlzQLIfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:f6:c2:c5:ec:fc:de:7a:7d:41:b1:da:42:93:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Oct 19 20:01:23 2025 GMT
            Not After : Oct 20 20:01:23 2025 GMT
        Subject: CN=978fca4bfe6573e6966919340dfcfcf0889929d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:9d:6b:be:a9:5e:37:c4:a1:e5:e8:42:72:
                    7b:92:be:6b:a4:e8:ff:fd:42:32:74:2e:d4:68:a3:
                    61:fd:7b:59:46:16:87:b9:e0:9a:86:30:5a:01:9c:
                    03:45:66:82:51:92:a7:e4:eb:c5:05:a9:04:89:46:
                    16:a9:fd:eb:07:07:ef:9a:ac:a7:af:9e:37:b6:16:
                    0a:04:7f:8a:a8:f6:08:16:68:e2:ca:31:eb:2c:08:
                    a1:97:9b:d2:00:da:51:f6:33:17:8b:68:cf:5e:27:
                    89:e7:a2:e4:37:fa:83:a4:cf:d7:bb:ad:61:a2:ad:
                    fa:d3:ed:09:40:7f:54:f1:e4:e6:35:9c:32:54:45:
                    31:a4:ce:a5:c2:a0:9f:e6:6a:a0:f9:74:26:03:91:
                    a9:9c:e6:52:85:a8:39:55:3a:29:3c:1f:4d:ee:6f:
                    6b:33:82:b5:e3:f7:98:0a:b7:6e:3a:d1:e7:33:63:
                    f1:1a:87:b3:c9:d8:3b:a2:dc:dd:a0:7f:91:42:5b:
                    7d:13:62:37:98:e6:42:dc:90:70:3a:9e:6b:21:d3:
                    2a:90:5e:79:60:8f:de:8a:ad:a7:87:71:0a:e4:24:
                    69:ff:7d:04:35:d4:80:49:24:8b:3c:21:72:49:c8:
                    db:3b:84:cc:6d:3f:28:f8:b2:f4:9f:f6:2c:3c:89:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8F:CA:4B:FE:65:73:E6:96:69:19:34:0D:FC:FC:F0:88:99:29:D5
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:58:7d:f0:d3:4c:12:42:c3:23:d9:c5:48:ce:04:65:ae:
         7b:50:35:f8:f9:cc:6e:a3:28:32:cc:42:e3:74:98:92:a2:a2:
         f7:08:57:fe:56:be:c7:5d:4c:fc:ed:eb:8d:03:b4:8c:d1:44:
         f2:f0:3d:29:7c:a8:91:ba:20:72:b7:48:60:a1:56:70:d3:6e:
         78:24:4b:74:f5:c1:6c:d8:51:76:02:7a:df:cc:45:3f:26:34:
         3e:82:94:32:e6:7c:e3:c0:a3:68:be:9a:1d:42:28:b4:ba:51:
         43:6b:67:b5:12:84:63:e9:c1:91:81:6a:7c:56:d6:0a:fc:a1:
         cb:9a:87:dc:1c:41:88:bb:3c:9e:b5:46:0a:20:eb:8e:31:16:
         02:a7:4a:ec:8e:c8:7b:aa:dc:e0:27:d5:73:e2:44:6a:cb:f9:
         92:71:da:b5:a6:d9:c9:3a:6c:64:2a:15:08:38:71:99:c5:4c:
         a3:3d:e3:f0:7c:ca:39:16:5c:34:5b:64:b2:aa:67:ce:1c:e2:
         c0:87:f7:49:69:3e:0e:41:4f:76:be:b0:64:30:43:41:6d:d8:
         0b:08:89:10:71:7c:6c:d0:aa:51:99:21:e7:18:18:8f:b8:78:
         53:d2:dc:96:ea:d2:36:90:45:e9:ae:11:b1:e0:df:19:67:e0:
         ef:8e:d6:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D/bCxez83np9QbHaQpMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjUxMDE5MjAwMTIzWhcNMjUxMDIwMjAwMTIzWjAzMTEwLwYDVQQD
Eyg5NzhmY2E0YmZlNjU3M2U2OTY2OTE5MzQwZGZjZmNmMDg4OTkyOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFqda76pXjfEoeXoQnJ7kr5rpOj/
/UIydC7UaKNh/XtZRhaHueCahjBaAZwDRWaCUZKn5OvFBakEiUYWqf3rBwfvmqyn
r543thYKBH+KqPYIFmjiyjHrLAihl5vSANpR9jMXi2jPXieJ56LkN/qDpM/Xu61h
oq360+0JQH9U8eTmNZwyVEUxpM6lwqCf5mqg+XQmA5GpnOZShag5VTopPB9N7m9r
M4K14/eYCrduOtHnM2PxGoezydg7otzdoH+RQlt9E2I3mOZC3JBwOp5rIdMqkF55
YI/eiq2nh3EK5CRp/30ENdSASSSLPCFyScjbO4TMbT8o+LL0n/YsPIntkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJePykv+ZXPmlmkZNA38/PCImSnVMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/9YffDT
TBJCwyPZxUjOBGWue1A1+PnMbqMoMsxC43SYkqKi9whX/la+x11M/O3rjQO0jNFE
8vA9KXyokbogcrdIYKFWcNNueCRLdPXBbNhRdgJ638xFPyY0PoKUMuZ848CjaL6a
HUIotLpRQ2tntRKEY+nBkYFqfFbWCvyhy5qH3BxBiLs8nrVGCiDrjjEWAqdK7I7I
e6rc4CfVc+JEasv5knHatabZyTpsZCoVCDhxmcVMoz3j8HzKORZcNFtksqpnzhzi
wIf3SWk+DkFPdr6wZDBDQW3YCwiJEHF8bNCqUZkh5xgYj7h4U9LclurSNpBF6a4R
seDfGWfg747W5w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:11 2025 by rpki-client