Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          oj/jH71r2v9FpXm782cUXARGlDat9zKIGjVRRvxjhbE=
Subject key identifier:   1E:72:02:60:67:27:80:1A:4B:BC:E3:83:DC:94:8F:E6:45:33:3F:97
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       0199FF22EE1CA3B981DA8932A6C033615748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          064B
Signing time:             Mon 20 Oct 2025 01:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:43 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: MJJWxHdThaZvi0rdSpdWT+VGJS0YrXGKVz/4NjfSgcQ=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: RDzymZpCcV0bpni3siQGqq1farc.roa (hash: NbY5Sdgr9o+O/ZEjGJenKUtZltIspdl+18YYsBTTJSE=)
                          10: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          11: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          12: X0YGyVP66ZGqkiDVT4gjqfkDpbw.roa (hash: 6i5H9KoMGNY5mA0wdWKUYrifDwq1Buv6W9ygAz3wN8s=)
                          13: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (hash: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=)
                          14: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          15: guLTM5a0sG8d8PuqoNee-jjL86Y.roa (hash: foLzuPt71A9R7m4Zr/AiIAiz2ulaqdDrSGiOeT2DEkU=)
                          16: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          17: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          18: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          19: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          20: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          21: uu7x8ws28T4QdM70FvKBJCd6ke0.roa (hash: mYpdS0B5YDMrQaeH22PB2fPiErznb3n7AJTmk2e5j1U=)
                          22: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          23: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:ee:1c:a3:b9:81:da:89:32:a6:c0:33:61:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Oct 20 01:01:43 2025 GMT
            Not After : Oct 21 01:01:43 2025 GMT
        Subject: CN=1e7202606727801a4bbce383dc948fe645333f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:7a:a7:53:9d:d0:03:ec:f2:a4:68:59:59:
                    2c:0f:c2:b3:20:7a:50:da:2a:44:ae:a5:ba:86:a6:
                    71:50:e2:bc:ba:42:29:5e:71:18:5f:6b:1f:36:26:
                    5c:ad:f6:b2:fa:5f:88:90:8f:ae:d0:bc:a1:b5:01:
                    c4:3c:cb:1b:59:e5:a4:d2:99:55:5a:c3:8e:2a:49:
                    a8:f7:d6:de:83:7a:4f:28:21:14:01:25:1e:90:d9:
                    c9:61:3b:21:c4:6a:84:e1:4a:27:7d:81:24:03:9d:
                    ff:90:d5:19:be:25:20:e0:6e:62:2d:98:94:b5:b2:
                    7a:22:0b:d4:3a:33:7a:91:41:d6:a8:53:45:ca:ec:
                    dc:0e:dd:55:8d:9f:9e:9a:dc:84:67:00:f5:09:9c:
                    8e:27:a6:8a:76:a0:9e:09:b1:98:a5:7f:91:ac:47:
                    33:cd:48:10:b0:c3:7f:b4:87:bd:00:e7:75:39:fc:
                    69:bf:c8:d1:7c:08:67:36:f3:d8:84:d7:d3:72:a8:
                    5b:04:43:31:23:69:67:9e:09:0d:65:3d:b0:b1:3c:
                    aa:20:6b:f8:c7:82:18:1b:4c:d5:3d:b6:48:00:b3:
                    38:9d:b2:ee:78:0e:3f:8b:4d:30:cb:d7:50:85:1c:
                    7c:dc:1f:43:98:53:cb:76:19:b1:8c:08:0c:3a:f0:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:02:60:67:27:80:1A:4B:BC:E3:83:DC:94:8F:E6:45:33:3F:97
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:03:a9:16:4d:5e:a4:39:a3:25:77:09:a8:86:89:f6:df:
         f1:e8:9e:70:6d:da:96:83:bb:f1:a2:ca:f5:fd:71:f1:82:a8:
         13:61:ac:0e:af:90:82:6c:d5:94:05:47:a9:63:b0:2c:e1:d7:
         10:4b:46:2a:69:a7:d0:99:45:7a:f9:d3:a6:f5:4f:89:1b:bd:
         02:2a:8b:22:08:7b:66:64:27:5f:a6:ca:7b:6f:29:fe:47:78:
         0b:a0:f4:b1:be:23:df:25:5e:f5:91:dc:00:25:61:90:3d:37:
         4f:90:a9:e4:38:60:f5:cc:77:d9:4a:4e:72:db:87:a4:0d:d0:
         99:e3:20:01:2a:7c:52:05:80:18:c5:c5:f2:73:62:de:51:47:
         e2:22:e8:3d:54:4a:25:c4:90:aa:30:fe:36:4f:6d:92:c9:08:
         51:0d:29:96:37:d8:a8:fe:94:1b:b9:53:33:f3:74:c9:d5:91:
         b0:65:f6:5c:e1:82:f6:d6:2b:1e:5d:5b:ef:54:3b:76:ec:31:
         ba:8b:a3:11:f3:90:62:86:35:f7:fe:f7:d5:b7:12:77:20:85:
         81:14:ba:31:29:ec:37:03:ed:c9:d6:40:bc:4c:3e:63:77:20:
         dd:2b:5b:f9:9b:56:96:81:48:df:56:fb:5d:be:7f:e7:05:5e:
         3a:0e:02:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Iu4co7mB2okypsAzYVdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUxMDIwMDEwMTQzWhcNMjUxMDIxMDEwMTQzWjAzMTEwLwYDVQQD
EygxZTcyMDI2MDY3Mjc4MDFhNGJiY2UzODNkYzk0OGZlNjQ1MzMzZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzp6p1Od0APs8qRoWVksD8KzIHpQ
2ipErqW6hqZxUOK8ukIpXnEYX2sfNiZcrfay+l+IkI+u0LyhtQHEPMsbWeWk0plV
WsOOKkmo99beg3pPKCEUASUekNnJYTshxGqE4UonfYEkA53/kNUZviUg4G5iLZiU
tbJ6IgvUOjN6kUHWqFNFyuzcDt1VjZ+emtyEZwD1CZyOJ6aKdqCeCbGYpX+RrEcz
zUgQsMN/tIe9AOd1Ofxpv8jRfAhnNvPYhNfTcqhbBEMxI2lnngkNZT2wsTyqIGv4
x4IYG0zVPbZIALM4nbLueA4/i00wy9dQhRx83B9DmFPLdhmxjAgMOvBdbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5yAmBnJ4AaS7zjg9yUj+ZFMz+XMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTsDqRZN
XqQ5oyV3CaiGifbf8eiecG3aloO78aLK9f1x8YKoE2GsDq+QgmzVlAVHqWOwLOHX
EEtGKmmn0JlFevnTpvVPiRu9AiqLIgh7ZmQnX6bKe28p/kd4C6D0sb4j3yVe9ZHc
ACVhkD03T5Cp5Dhg9cx32UpOctuHpA3QmeMgASp8UgWAGMXF8nNi3lFH4iLoPVRK
JcSQqjD+Nk9tkskIUQ0pljfYqP6UG7lTM/N0ydWRsGX2XOGC9tYrHl1b71Q7duwx
uoujEfOQYoY19/731bcSdyCFgRS6MSnsNwPtydZAvEw+Y3cg3Stb+ZtWloFI31b7
Xb5/5wVeOg4Cng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:56 2025 by rpki-client