Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File:                     4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier:          t4FOh9LN/v1fb29Ks/aS+xEzTnLLj5aOjKqWofbg0jU=
Subject key identifier:   47:52:50:3A:01:46:E0:29:C0:23:E0:E6:5B:5F:9A:05:48:05:A1:F8
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer:       /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial:       0199FC5863FA785BC392C1DE1C409B712DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number:          0D9E
Signing time:             Sun 19 Oct 2025 12:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:15 +0000
Files and hashes:         1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: 4kOluKfswArPQQKk0LJ5iOyl491v7VAe4bRFWBFqU3M=)
                          2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:63:fa:78:5b:c3:92:c1:de:1c:40:9b:71:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
        Validity
            Not Before: Oct 19 12:01:15 2025 GMT
            Not After : Oct 20 12:01:15 2025 GMT
        Subject: CN=4752503a0146e029c023e0e65b5f9a054805a1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:e2:9a:db:a4:d9:e0:a2:21:5e:1f:bc:6e:
                    23:ce:f0:d9:67:77:c5:54:95:fc:dd:55:3b:d3:7a:
                    eb:90:46:a5:5e:6f:04:80:a2:bc:77:b7:50:59:1d:
                    28:e4:a2:19:cc:d3:66:cd:f2:15:eb:dd:8d:b1:05:
                    fb:a1:6a:ab:80:80:83:84:22:8c:85:91:7a:6a:40:
                    b4:c6:eb:3e:6c:08:8b:2f:65:11:ac:2b:f0:24:67:
                    0c:9b:b1:a9:fa:f0:22:27:48:fa:29:9e:c2:1e:c7:
                    93:6e:80:68:ae:d5:3b:8d:37:ec:21:c4:4b:a0:49:
                    b1:84:06:c9:fe:68:b7:e2:2e:fb:ef:e1:52:6e:b9:
                    b2:3b:8e:87:fd:90:81:da:06:39:b9:67:34:26:ed:
                    8f:f1:d5:ad:48:ed:0e:1b:d1:3d:db:e3:78:77:f4:
                    3d:16:13:33:7c:5c:d6:d3:94:a5:bf:94:57:c6:8a:
                    ec:8c:66:c7:7b:2f:63:5f:0d:6e:47:60:08:02:ac:
                    c4:e0:e8:d6:11:bb:09:af:a7:72:e7:4b:16:31:61:
                    23:25:44:5a:aa:05:55:9a:51:59:0b:47:61:68:67:
                    6b:b8:7a:62:f6:4b:1f:9a:69:1c:4f:f3:40:a6:7c:
                    e2:2a:34:e3:2c:08:74:5c:1c:63:94:13:1b:4b:98:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:50:3A:01:46:E0:29:C0:23:E0:E6:5B:5F:9A:05:48:05:A1:F8
            X509v3 Authority Key Identifier:
                keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:e1:a6:aa:01:df:65:51:f6:26:46:cb:ce:8b:da:1d:8c:
         ee:a1:f8:c4:4a:b4:90:cf:0e:98:fb:ea:24:d4:e5:d3:84:a2:
         0f:3c:4a:a8:84:d4:2b:55:d7:86:64:05:2f:d9:5c:c5:ae:39:
         93:c0:9e:a5:5c:6e:ed:25:25:cf:34:be:94:3d:54:d6:50:a6:
         24:39:16:cd:cb:d1:06:f7:1e:45:16:b4:4d:ba:94:80:f9:e5:
         8f:74:8f:1f:92:89:07:95:25:f8:48:8f:43:ea:aa:c2:25:1f:
         a7:2a:31:72:b5:01:07:cc:e3:fa:66:01:32:a8:bc:72:da:4b:
         83:e2:f1:d0:1a:4a:e2:dd:6f:e0:c3:ea:60:0c:1d:58:1a:17:
         f8:a6:f4:28:7a:40:1c:76:45:f3:63:87:1c:90:d1:20:07:55:
         18:d8:19:fa:b9:39:46:52:c3:14:75:93:2f:ad:e1:28:fa:50:
         48:8d:71:12:f5:58:a7:08:89:7e:90:2f:7c:88:3e:b2:53:54:
         04:de:7d:bd:0f:6d:6e:cf:2a:25:e5:cb:23:ff:4e:e8:09:c2:
         7e:eb:95:55:cf:4a:73:fe:b1:3f:74:0c:05:80:84:7b:d2:7e:
         21:2f:53:a8:b0:2a:60:8f:af:72:1d:f4:9e:92:6a:3e:7e:03:
         89:4f:d2:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGP6eFvDksHeHECbcS3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5
YWZjYjYwHhcNMjUxMDE5MTIwMTE1WhcNMjUxMDIwMTIwMTE1WjAzMTEwLwYDVQQD
Eyg0NzUyNTAzYTAxNDZlMDI5YzAyM2UwZTY1YjVmOWEwNTQ4MDVhMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA547imtuk2eCiIV4fvG4jzvDZZ3fF
VJX83VU703rrkEalXm8EgKK8d7dQWR0o5KIZzNNmzfIV692NsQX7oWqrgICDhCKM
hZF6akC0xus+bAiLL2URrCvwJGcMm7Gp+vAiJ0j6KZ7CHseTboBortU7jTfsIcRL
oEmxhAbJ/mi34i777+FSbrmyO46H/ZCB2gY5uWc0Ju2P8dWtSO0OG9E92+N4d/Q9
FhMzfFzW05Slv5RXxorsjGbHey9jXw1uR2AIAqzE4OjWEbsJr6dy50sWMWEjJURa
qgVVmlFZC0dhaGdruHpi9ksfmmkcT/NApnziKjTjLAh0XBxjlBMbS5h40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdSUDoBRuApwCPg5ltfmgVIBaH4MB8GA1UdIwQY
MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt
NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj
LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASajhpqoB
32VR9iZGy86L2h2M7qH4xEq0kM8OmPvqJNTl04SiDzxKqITUK1XXhmQFL9lcxa45
k8CepVxu7SUlzzS+lD1U1lCmJDkWzcvRBvceRRa0TbqUgPnlj3SPH5KJB5Ul+EiP
Q+qqwiUfpyoxcrUBB8zj+mYBMqi8ctpLg+Lx0BpK4t1v4MPqYAwdWBoX+Kb0KHpA
HHZF82OHHJDRIAdVGNgZ+rk5RlLDFHWTL63hKPpQSI1xEvVYpwiJfpAvfIg+slNU
BN59vQ9tbs8qJeXLI/9O6AnCfuuVVc9Kc/6xP3QMBYCEe9J+IS9TqLAqYI+vch30
npJqPn4DiU/S9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:11 2025 by rpki-client