Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          lhxrqlxWFMLKWL/c1pnqQq73L7oWXY/oSgF9qJRGGQQ=
Subject key identifier:   C9:B1:87:E0:09:BB:62:C5:99:E0:65:49:05:B1:4D:AE:79:F2:7A:B3
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       0199FE7DE82A904BE881341A722B9FD39979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 22:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:28 +0000
Files and hashes:         1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: YL/QxSgUBAGYtGCbEhyGcwn7ddQE0GLolVXdNNOUriA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:e8:2a:90:4b:e8:81:34:1a:72:2b:9f:d3:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Oct 19 22:01:28 2025 GMT
            Not After : Oct 20 22:01:28 2025 GMT
        Subject: CN=c9b187e009bb62c599e0654905b14dae79f27ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:a3:f4:7b:6a:9e:18:f4:3d:fb:2b:93:ba:
                    c8:35:bc:06:e2:b0:9f:6c:1f:ad:9b:97:0e:78:ff:
                    24:cd:0f:bd:43:21:de:57:cf:2c:d8:41:bc:3b:4b:
                    cb:b5:ae:cb:5b:53:80:fe:6e:20:a7:9b:40:f5:fd:
                    8b:04:b4:24:5f:16:6a:73:8d:42:27:99:f2:e1:89:
                    fc:98:21:e1:3d:fc:56:1a:cb:23:52:0a:e1:b6:13:
                    84:f1:d1:59:bb:c5:bb:fb:6e:e7:43:5b:1e:12:fc:
                    46:fa:ad:c4:08:54:ac:16:34:da:d3:13:01:3c:dc:
                    8b:44:5c:7a:bd:23:7b:e6:8e:cb:8b:95:90:e0:95:
                    72:af:81:00:ce:b0:4b:ed:02:b8:84:e1:56:2f:81:
                    ad:e9:ac:73:ad:6a:c2:85:b7:b4:93:07:92:40:cd:
                    c4:ba:f7:c8:3a:d3:c3:0f:67:c0:e1:53:be:45:a9:
                    35:86:ac:bd:48:5f:ca:1d:45:00:c7:40:e7:d8:22:
                    9a:71:cd:60:4d:cc:a2:0d:11:11:fc:1f:27:96:97:
                    78:e9:4e:bb:69:e0:5d:8f:7d:db:6d:7e:ea:79:b4:
                    c2:32:3c:8d:e5:47:a7:b9:67:46:ea:82:b3:a8:91:
                    f5:1d:86:7a:9d:4a:73:94:f3:59:df:7c:3e:8b:58:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:87:E0:09:BB:62:C5:99:E0:65:49:05:B1:4D:AE:79:F2:7A:B3
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:f6:1d:f5:b6:4e:12:c8:2d:56:6d:d8:74:42:8e:93:28:
         c5:61:97:56:05:77:06:47:25:43:df:94:a9:81:c1:45:5f:f5:
         16:f5:49:cb:c7:6f:99:f4:25:95:c2:96:b0:d0:c2:f0:53:b8:
         09:97:61:26:3e:a6:5c:31:42:43:f4:d7:33:66:d9:34:5f:51:
         d1:cb:91:bd:61:b0:4b:a4:dd:60:30:48:93:da:39:45:86:f5:
         8a:2b:90:f8:b3:e8:11:b7:c6:3a:7c:3e:c2:71:13:57:2d:a2:
         b7:e2:70:b1:85:8a:3f:1c:e0:c8:a6:f2:35:d5:67:1a:42:ae:
         86:78:35:54:a0:d0:d3:43:fd:ca:ff:62:dd:3b:82:72:86:d4:
         8b:a0:a9:f7:f2:81:07:c6:11:44:2c:78:ac:9f:86:47:f4:9e:
         71:0e:7c:d2:46:12:80:4f:e3:03:7b:8b:e9:9d:c9:cb:d2:5b:
         2e:60:a7:9a:b6:56:4e:bc:d4:0d:a8:ff:28:39:72:8b:de:32:
         63:37:8b:09:86:1c:d6:98:92:67:fb:1d:b6:66:23:bd:07:2e:
         64:49:9d:5f:97:2b:e4:f4:58:63:08:73:43:06:dd:66:cd:4a:
         86:3b:00:3e:be:a1:0b:b8:fa:ab:6e:43:45:73:5c:0d:d3:0f:
         52:60:a7:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fegqkEvogTQaciuf05l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmYxZTZhNWNjM2MwNjk3NjI5ZjRhZmJiMGIwN2FlNzkx
MzNjNWMwHhcNMjUxMDE5MjIwMTI4WhcNMjUxMDIwMjIwMTI4WjAzMTEwLwYDVQQD
EyhjOWIxODdlMDA5YmI2MmM1OTllMDY1NDkwNWIxNGRhZTc5ZjI3YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Oj9Htqnhj0Pfsrk7rINbwG4rCf
bB+tm5cOeP8kzQ+9QyHeV88s2EG8O0vLta7LW1OA/m4gp5tA9f2LBLQkXxZqc41C
J5ny4Yn8mCHhPfxWGssjUgrhthOE8dFZu8W7+27nQ1seEvxG+q3ECFSsFjTa0xMB
PNyLRFx6vSN75o7Li5WQ4JVyr4EAzrBL7QK4hOFWL4Gt6axzrWrChbe0kweSQM3E
uvfIOtPDD2fA4VO+Rak1hqy9SF/KHUUAx0Dn2CKacc1gTcyiDRER/B8nlpd46U67
aeBdj33bbX7qebTCMjyN5UenuWdG6oKzqJH1HYZ6nUpzlPNZ33w+i1ircwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmxh+AJu2LFmeBlSQWxTa558nqzMB8GA1UdIwQY
MBaAFGb/Hmpcw8Bpdin0r7sLB655EzxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQt
ZWU0Mjc0NWQ4ZmQxLzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQtZWU0Mjc0NWQ4ZmQx
LzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe32HfW2
ThLILVZt2HRCjpMoxWGXVgV3BkclQ9+UqYHBRV/1FvVJy8dvmfQllcKWsNDC8FO4
CZdhJj6mXDFCQ/TXM2bZNF9R0cuRvWGwS6TdYDBIk9o5RYb1iiuQ+LPoEbfGOnw+
wnETVy2it+JwsYWKPxzgyKbyNdVnGkKuhng1VKDQ00P9yv9i3TuCcobUi6Cp9/KB
B8YRRCx4rJ+GR/SecQ580kYSgE/jA3uL6Z3Jy9JbLmCnmrZWTrzUDaj/KDlyi94y
YzeLCYYc1piSZ/sdtmYjvQcuZEmdX5cr5PRYYwhzQwbdZs1KhjsAPr6hC7j6q25D
RXNcDdMPUmCnSA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:35 2025 by rpki-client