Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          ufXWnbl/UEWUMy4tm4oKBJi/5Y5COR/unlCesM3xY/w=
Subject key identifier:   FF:E1:8B:A6:94:78:EB:3D:B8:40:B1:D1:5F:6B:E8:6E:A7:FB:E8:95
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       0199FC58BB692B79E31AFD9275CCBB793C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          16DD
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: Gz7AEMN2H+9g6feND06ZwhLjQfEA/7nGJS70qErJe2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bb:69:2b:79:e3:1a:fd:92:75:cc:bb:79:3c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=ffe18ba69478eb3db840b1d15f6be86ea7fbe895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:72:18:95:bb:d7:41:1b:44:84:e3:0a:c9:
                    c7:d7:5f:da:61:cd:0d:6c:35:a3:f2:31:ce:78:c7:
                    dd:11:43:21:97:e1:8b:5e:7b:ea:2a:ec:0b:74:66:
                    6b:b3:5d:e0:94:cc:3f:11:79:87:af:a7:10:4b:16:
                    82:65:0d:06:e7:79:13:aa:5e:4a:b0:42:61:8f:99:
                    27:1b:31:84:a3:20:ce:8e:e3:d8:76:99:dc:65:e1:
                    53:ce:0c:9a:95:d2:74:8b:cf:66:e1:b2:f7:f1:cf:
                    45:1e:78:dd:5b:8e:54:84:a5:57:71:8e:a7:eb:2b:
                    e5:2a:18:88:46:b7:91:ea:cf:be:96:5b:60:cb:fe:
                    14:36:f6:ab:62:12:da:a5:4b:e1:2b:86:91:69:ec:
                    d5:24:61:a9:92:85:77:1e:a4:fd:e1:9c:52:13:f7:
                    15:09:1e:af:68:92:88:66:05:60:d6:26:aa:04:6d:
                    58:9c:dd:7a:5d:76:17:49:6f:df:8e:40:10:6f:06:
                    64:fd:bc:70:81:58:6e:c3:f2:f3:a5:20:c1:9c:0a:
                    7b:c4:08:43:df:11:2f:8f:37:4c:7f:ab:22:53:c5:
                    56:0f:ca:df:9f:51:a5:fd:0d:0c:e6:3a:41:36:6c:
                    53:fd:f7:b3:e1:d2:8e:d8:78:82:3d:04:47:b9:79:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:8B:A6:94:78:EB:3D:B8:40:B1:D1:5F:6B:E8:6E:A7:FB:E8:95
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:0c:e0:d0:2f:59:ba:bd:5f:eb:da:b9:56:27:19:c5:7d:
         d3:89:45:28:40:b6:03:f0:1b:65:02:4d:34:b6:a5:eb:75:8a:
         82:f4:b5:cd:25:26:63:36:d5:1c:b3:8d:be:fd:9b:95:40:f8:
         64:99:ee:9d:5b:97:00:f1:63:b9:29:6b:dc:b6:30:45:10:f4:
         6a:ea:9c:00:78:86:89:f8:d9:c8:48:b2:df:c6:7c:1b:e9:7f:
         cd:f1:54:fc:3a:1b:c4:89:6e:ed:43:fa:8d:77:3d:00:f9:12:
         d5:c4:9f:f6:c3:bb:6a:31:97:a1:81:2e:a6:b1:de:88:6e:2a:
         a6:51:f1:98:f2:23:fc:f1:fd:44:0a:1d:e0:9e:e5:20:07:d8:
         79:5d:a5:d8:bc:31:32:83:b4:20:48:7c:63:a5:c1:b8:7c:33:
         63:b0:14:c7:85:61:0f:61:fa:76:f9:f2:01:3c:95:ae:78:7e:
         8d:0d:ce:4f:b3:fe:01:c2:f0:a0:c1:8d:9e:76:e1:7c:33:00:
         19:86:7b:9e:95:aa:27:1c:63:f5:a9:21:13:b0:0a:7f:38:6f:
         ba:33:ee:a4:9b:a0:e0:94:10:53:f5:fd:b7:0f:0a:af:77:22:
         48:8c:46:c8:f1:ad:82:64:fd:ff:06:74:05:29:ff:f7:fb:74:
         90:96:37:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLtpK3njGv2Sdcy7eTwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDc5NGY5OTZhYzVhM2YwMmI1NmE3NWMxNDk0OTQwM2Qw
MmFjNjQwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
EyhmZmUxOGJhNjk0NzhlYjNkYjg0MGIxZDE1ZjZiZTg2ZWE3ZmJlODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmhyGJW710EbRITjCsnH11/aYc0N
bDWj8jHOeMfdEUMhl+GLXnvqKuwLdGZrs13glMw/EXmHr6cQSxaCZQ0G53kTql5K
sEJhj5knGzGEoyDOjuPYdpncZeFTzgyaldJ0i89m4bL38c9FHnjdW45UhKVXcY6n
6yvlKhiIRreR6s++lltgy/4UNvarYhLapUvhK4aRaezVJGGpkoV3HqT94ZxSE/cV
CR6vaJKIZgVg1iaqBG1YnN16XXYXSW/fjkAQbwZk/bxwgVhuw/LzpSDBnAp7xAhD
3xEvjzdMf6siU8VWD8rfn1Gl/Q0M5jpBNmxT/fez4dKO2HiCPQRHuXlrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/hi6aUeOs9uECx0V9r6G6n++iVMB8GA1UdIwQY
MBaAFNdHlPmWrFo/ArVqdcFJSUA9AqxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYt
OGQ2YjZhYjYxYjc1LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYtOGQ2YjZhYjYxYjc1
LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt0M4NAv
Wbq9X+vauVYnGcV904lFKEC2A/AbZQJNNLal63WKgvS1zSUmYzbVHLONvv2blUD4
ZJnunVuXAPFjuSlr3LYwRRD0auqcAHiGifjZyEiy38Z8G+l/zfFU/DobxIlu7UP6
jXc9APkS1cSf9sO7ajGXoYEuprHeiG4qplHxmPIj/PH9RAod4J7lIAfYeV2l2Lwx
MoO0IEh8Y6XBuHwzY7AUx4VhD2H6dvnyATyVrnh+jQ3OT7P+AcLwoMGNnnbhfDMA
GYZ7npWqJxxj9akhE7AKfzhvujPupJug4JQQU/X9tw8Kr3ciSIxGyPGtgmT9/wZ0
BSn/9/t0kJY3rw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:56 2025 by rpki-client