Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
File:                     4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json)
Hash identifier:          JolDYwRTdNAMyvR7q/oQK4DE2is3V6hJ56ssg6RFqtE=
Subject key identifier:   77:E3:A0:C0:5D:05:18:06:38:78:35:90:D7:40:98:B9:11:11:91:9B
Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
Certificate issuer:       /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Certificate serial:       0199FB7CA4875C29377B3F68D3E6FF0545CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
Manifest number:          95
Signing time:             Sun 19 Oct 2025 08:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:13 +0000
Files and hashes:         1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: et2dnMofDO5zNVmajTRqN4L5/i1V1xW5ee8RdFoEr3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a4:87:5c:29:37:7b:3f:68:d3:e6:ff:05:45:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
        Validity
            Not Before: Oct 19 08:01:13 2025 GMT
            Not After : Oct 20 08:01:13 2025 GMT
        Subject: CN=77e3a0c05d05180638783590d74098b91111919b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:5b:5b:41:58:93:3b:4d:8b:f8:a5:a8:c0:
                    26:ae:01:30:c2:23:8c:ac:59:10:46:16:61:f7:3e:
                    bf:03:0d:77:65:47:46:da:9c:7c:9b:82:d8:13:22:
                    53:f5:85:ce:9c:3f:f9:ac:e8:79:33:41:b6:94:65:
                    d2:e5:26:b4:af:8f:01:84:46:f8:a9:8c:1b:11:ea:
                    5b:04:b3:0f:fe:f4:f4:a8:3b:e8:53:69:b1:94:ae:
                    65:7e:d6:44:10:7e:7e:b2:94:b7:2d:28:d1:fc:e0:
                    de:72:28:0b:58:a2:bf:90:44:d2:c1:a8:9d:92:4f:
                    51:d2:47:0c:9a:71:93:d7:d6:48:fe:0a:b1:2f:51:
                    fa:f9:e8:fe:bf:52:7f:3a:90:0e:3b:b8:59:c7:73:
                    95:3b:76:01:89:7e:54:63:ef:f6:b5:51:9f:c6:f7:
                    e9:a5:34:c9:4b:0f:a9:54:92:8e:4e:c9:a9:26:99:
                    4f:d4:e4:87:02:31:69:71:a0:75:6c:81:fc:48:3b:
                    88:4a:88:c8:a4:cc:c3:98:53:7c:a1:df:99:3b:a1:
                    17:a7:92:12:e1:97:e1:ee:1d:4a:79:76:7e:bc:61:
                    fc:6d:0c:86:c1:1b:48:ec:a4:47:75:23:90:54:57:
                    f1:9e:21:ba:d9:17:42:0c:92:6a:2c:7a:20:1a:12:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E3:A0:C0:5D:05:18:06:38:78:35:90:D7:40:98:B9:11:11:91:9B
            X509v3 Authority Key Identifier:
                keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:29:95:7e:df:3a:2f:34:53:85:1e:0b:af:8e:62:c3:f2:
         84:a4:41:98:70:02:43:98:c9:9a:cb:9e:f9:07:4e:b4:74:e1:
         f5:f6:5d:3d:7c:20:17:9e:c8:1b:41:a9:81:b1:16:f9:d5:56:
         76:66:de:d7:4b:bc:0d:af:a2:a1:d9:47:81:ab:17:0c:07:f0:
         17:c9:b4:09:a0:b3:23:0c:1e:2f:73:4f:82:15:b4:71:ed:09:
         dd:e0:78:fb:8a:c8:88:0c:1c:78:83:67:6d:b5:13:ec:88:8d:
         50:05:16:20:ea:9f:de:7b:c7:35:16:bf:62:3f:72:51:e4:72:
         4c:83:69:f6:05:02:d6:a8:06:25:b3:1d:05:b7:90:4b:44:3f:
         04:ff:b8:7a:02:9a:c4:97:bc:19:87:8b:8c:07:6e:65:da:05:
         95:6b:62:e8:44:23:d1:25:f3:19:9a:ad:77:49:0c:52:f2:ba:
         d9:3f:99:12:aa:a2:41:26:f9:f8:79:a1:2d:6b:21:a5:04:00:
         fe:8e:f5:54:2d:1b:b8:cb:3d:12:c3:76:b0:2f:a1:69:a3:b4:
         bc:70:d9:bb:d9:c0:36:c6:13:ee:82:c3:9f:a4:7e:c0:f1:95:
         2c:1a:d8:e9:d0:b0:76:a4:9f:8a:d2:bd:44:96:2b:bb:4b:6b:
         5c:35:69:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKSHXCk3ez9o0+b/BUXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTVmZjAwNWFhMjY2OTFjN2UzMzBlYmY5YzFjNGMxYWU1
NDk0ZDQwHhcNMjUxMDE5MDgwMTEzWhcNMjUxMDIwMDgwMTEzWjAzMTEwLwYDVQQD
Eyg3N2UzYTBjMDVkMDUxODA2Mzg3ODM1OTBkNzQwOThiOTExMTE5MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB5bW0FYkztNi/ilqMAmrgEwwiOM
rFkQRhZh9z6/Aw13ZUdG2px8m4LYEyJT9YXOnD/5rOh5M0G2lGXS5Sa0r48BhEb4
qYwbEepbBLMP/vT0qDvoU2mxlK5lftZEEH5+spS3LSjR/ODecigLWKK/kETSwaid
kk9R0kcMmnGT19ZI/gqxL1H6+ej+v1J/OpAOO7hZx3OVO3YBiX5UY+/2tVGfxvfp
pTTJSw+pVJKOTsmpJplP1OSHAjFpcaB1bIH8SDuISojIpMzDmFN8od+ZO6EXp5IS
4Zfh7h1KeXZ+vGH8bQyGwRtI7KRHdSOQVFfxniG62RdCDJJqLHogGhKeCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfjoMBdBRgGOHg1kNdAmLkREZGbMB8GA1UdIwQY
MBaAFOAV/wBaomaRx+Mw6/nBxMGuVJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYt
ZGVlMzE3ZWVjMmY3LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYtZGVlMzE3ZWVjMmY3
LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrAplX7f
Oi80U4UeC6+OYsPyhKRBmHACQ5jJmsue+QdOtHTh9fZdPXwgF57IG0GpgbEW+dVW
dmbe10u8Da+iodlHgasXDAfwF8m0CaCzIwweL3NPghW0ce0J3eB4+4rIiAwceINn
bbUT7IiNUAUWIOqf3nvHNRa/Yj9yUeRyTINp9gUC1qgGJbMdBbeQS0Q/BP+4egKa
xJe8GYeLjAduZdoFlWti6EQj0SXzGZqtd0kMUvK62T+ZEqqiQSb5+HmhLWshpQQA
/o71VC0buMs9EsN2sC+haaO0vHDZu9nANsYT7oLDn6R+wPGVLBrY6dCwdqSfitK9
RJYru0trXDVpqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:34 2025 by rpki-client