Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
File:                     MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft (raw, json)
Hash identifier:          8xX2cOpRm8hYLIs5LGdD+Dnu961+NHwVwJa68m8tnX8=
Subject key identifier:   64:2A:DD:01:52:40:FA:39:2F:60:94:18:C5:BC:B2:58:5D:AB:CC:72
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Certificate issuer:       /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial:       0199FC8F34055B910E1315A45B43D6CC4D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
Manifest number:          16EE
Signing time:             Sun 19 Oct 2025 13:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:07 +0000
Files and hashes:         1: BpfzlhxlnU0b_wY21VYFiA_Y2f4.roa (hash: o5N+9t+Nwi3zWNRrw2+QumzYoa6i699pEUUI3yxOnxo=)
                          2: LdW4WrOP21P3_b9HaGAgjbFCnm8.roa (hash: 99nilYek7YWbcMfWxBc9uJdjyGkwvYVaC06TmFUyQHo=)
                          3: MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl (hash: x/VhMcnlBhD0ruXiLz6YV3Xuk//kLSkX8Q9/BhZsRWI=)
                          4: Z38SMtL5uMOLU0VlRKbXQTIHGyc.roa (hash: R5vGo48cGvAIvWP0YwGxyobaSGbcKYIYG0GtkewB3gM=)
                          5: uma5lpRbalF97EsdiqA4T4DgWE4.roa (hash: KAkNrUANOkXjmLE43dmVtD2jYcR+mjhtBsGBvdtMvlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:34:05:5b:91:0e:13:15:a4:5b:43:d6:cc:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
        Validity
            Not Before: Oct 19 13:01:07 2025 GMT
            Not After : Oct 20 13:01:07 2025 GMT
        Subject: CN=642add015240fa392f609418c5bcb2585dabcc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:19:0c:e9:1e:ba:c0:3c:e9:4c:bd:e2:6f:
                    fe:e5:94:38:66:2f:14:db:ae:af:41:99:26:c6:18:
                    c1:41:d5:9d:1c:4e:bb:f2:02:36:ba:84:5f:4d:bc:
                    93:de:b1:8e:6f:24:84:58:19:1e:f5:c4:62:fa:5f:
                    03:c0:18:c7:c9:c2:2e:a3:ef:b6:d4:b5:1d:3c:5b:
                    8b:d1:32:5e:ad:95:e9:31:53:bd:88:57:13:f5:5f:
                    74:bb:6b:65:af:ea:13:c1:f9:2b:76:76:1f:25:40:
                    5f:fb:9d:44:3a:96:d4:90:88:4a:d7:36:21:e8:10:
                    2f:43:3b:52:d5:16:5d:5d:6d:bb:0d:ff:fe:f8:f7:
                    c4:16:08:76:98:e9:af:af:49:a0:42:8c:f8:b0:ed:
                    01:96:29:52:9f:ab:b5:40:45:28:f4:3f:43:07:ce:
                    e3:96:bd:69:14:3a:17:ed:0b:b8:01:49:09:2d:0f:
                    ff:e0:68:ca:7b:9e:72:44:58:0c:8c:d5:28:16:58:
                    25:02:62:31:7e:df:99:7a:3c:6b:31:d1:7f:cc:b2:
                    36:dd:1b:6c:e1:62:70:ea:42:7d:78:e9:8d:09:24:
                    94:30:d1:9a:98:34:7c:5b:d4:30:60:e6:ff:2f:26:
                    d3:d4:3a:15:f5:22:f2:6d:94:ba:0b:69:9d:97:5e:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2A:DD:01:52:40:FA:39:2F:60:94:18:C5:BC:B2:58:5D:AB:CC:72
            X509v3 Authority Key Identifier:
                keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:11:7e:a3:de:24:a5:86:b8:bd:20:da:2c:18:ae:4b:22:50:
         8e:3d:5c:e9:22:cf:b3:ef:80:12:47:8c:7f:9d:b7:6b:d2:aa:
         ef:f9:e4:0a:96:4f:93:6a:f9:27:ab:19:e7:f6:45:b9:a3:f1:
         cb:35:7f:30:ea:29:b7:66:65:cb:28:9a:39:ac:5f:6a:cd:bd:
         45:59:7d:c1:42:45:f7:71:cb:64:07:87:1b:30:c3:e2:58:7e:
         0d:3c:3b:f1:67:e8:6c:09:a5:33:08:15:4f:85:85:c1:7a:d3:
         5c:20:c8:68:c2:f1:e1:01:dc:f3:af:bc:dc:1c:e7:c1:3e:b6:
         ce:3f:dd:6e:be:64:79:b4:f1:1d:6b:f9:b5:dd:ee:74:1f:7a:
         52:af:3e:24:5b:b7:fe:71:12:64:47:dd:d7:2c:94:0c:3a:e8:
         f0:10:48:71:b2:39:b1:2a:52:25:04:3c:f8:0c:8e:72:37:46:
         29:db:af:17:c4:ab:48:56:ca:08:9f:5b:13:55:a1:29:b2:53:
         d4:f7:e8:0b:c1:b2:08:63:c3:62:07:ff:71:63:c2:98:d5:5d:
         66:6a:30:98:ba:3c:56:19:e9:8d:37:ab:13:6c:b0:fd:0c:c1:
         76:e7:d1:db:7e:c5:a4:aa:df:e2:6e:a4:1a:3a:e8:48:3e:6c:
         64:29:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzQFW5EOExWkW0PWzE0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZWI5YjJkYjRhM2JkZGY4YzkyZmM1MGI5NzEzMDQzZGQ1
NmRjMzgwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD
Eyg2NDJhZGQwMTUyNDBmYTM5MmY2MDk0MThjNWJjYjI1ODVkYWJjYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2UZDOkeusA86Uy94m/+5ZQ4Zi8U
266vQZkmxhjBQdWdHE678gI2uoRfTbyT3rGObySEWBke9cRi+l8DwBjHycIuo++2
1LUdPFuL0TJerZXpMVO9iFcT9V90u2tlr+oTwfkrdnYfJUBf+51EOpbUkIhK1zYh
6BAvQztS1RZdXW27Df/++PfEFgh2mOmvr0mgQoz4sO0BlilSn6u1QEUo9D9DB87j
lr1pFDoX7Qu4AUkJLQ//4GjKe55yRFgMjNUoFlglAmIxft+ZejxrMdF/zLI23Rts
4WJw6kJ9eOmNCSSUMNGamDR8W9QwYOb/LybT1DoV9SLybZS6C2mdl17jaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQq3QFSQPo5L2CUGMW8slhdq8xyMB8GA1UdIwQY
MBaAFDHrmy20o73fjJL8ULlxMEPdVtw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgt
YmQyNGYwMDM1NzhmLzEvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgtYmQyNGYwMDM1Nzhm
LzEvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhF+o94k
pYa4vSDaLBiuSyJQjj1c6SLPs++AEkeMf523a9Kq7/nkCpZPk2r5J6sZ5/ZFuaPx
yzV/MOopt2ZlyyiaOaxfas29RVl9wUJF93HLZAeHGzDD4lh+DTw78WfobAmlMwgV
T4WFwXrTXCDIaMLx4QHc86+83BznwT62zj/dbr5kebTxHWv5td3udB96Uq8+JFu3
/nESZEfd1yyUDDro8BBIcbI5sSpSJQQ8+AyOcjdGKduvF8SrSFbKCJ9bE1WhKbJT
1PfoC8GyCGPDYgf/cWPCmNVdZmowmLo8VhnpjTerE2yw/QzBdufR237FpKrf4m6k
GjroSD5sZClzdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:40 2025 by rpki-client