Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File:                     nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier:          4xhDrImtu5Sh8e8/N3Hb/9nZ2aFUGre/38E87FV80fM=
Subject key identifier:   9F:B2:CF:91:B5:25:B3:00:61:CC:D7:AF:71:E8:82:42:61:17:4A:53
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       0199FE46F6C73D64994F6DA65BBA8333A830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 21:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:27 +0000
Files and hashes:         1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=)
                          2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=)
                          3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=)
                          4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=)
                          5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=)
                          6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=)
                          7: boQOxWTekJ3fuliQX6wA5NrzcDw.roa (hash: iBt1fZb/eDFa0+FbNgFw1iaoZwq8Lef/jP1ErHsxE5U=)
                          8: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=)
                          9: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=)
                          10: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: rJIH9I3E66irxceNPVCoFrrxCouyb4BOal6i7FgZmyI=)
                          11: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=)
                          12: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:f6:c7:3d:64:99:4f:6d:a6:5b:ba:83:33:a8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Oct 19 21:01:27 2025 GMT
            Not After : Oct 20 21:01:27 2025 GMT
        Subject: CN=9fb2cf91b525b30061ccd7af71e8824261174a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:dc:75:1e:3c:e1:33:c2:bb:8c:28:eb:db:
                    68:7e:d1:b2:c2:53:b0:09:a5:cd:9a:90:3e:65:b7:
                    69:bf:46:e0:28:41:f7:85:94:43:97:d0:b6:08:9a:
                    e6:65:ab:57:5e:34:27:10:0b:9a:20:3e:13:85:78:
                    b3:36:d5:dc:79:ab:a7:c2:f6:27:78:60:c0:e3:ba:
                    c2:54:17:cb:c0:c3:b5:18:a2:29:e6:04:e6:ea:a9:
                    e5:fa:04:85:26:fb:6f:79:b4:ea:8a:7e:32:2e:bb:
                    b6:54:25:79:12:bd:64:5a:33:7a:e6:07:b5:63:f6:
                    43:b5:46:8e:da:5a:82:fc:e0:b0:8a:b7:a9:cc:f9:
                    d7:0e:3c:49:0d:4b:2c:ff:63:00:88:bc:0a:aa:0d:
                    89:49:ca:d4:fd:8c:e7:5b:cf:b5:01:11:87:a6:d9:
                    ea:ad:76:55:1e:8d:b4:cc:e7:c0:6b:a1:d3:42:30:
                    13:f6:e8:6e:3f:b9:ff:1e:5b:17:c5:8f:4d:05:62:
                    01:59:89:41:9a:c1:22:03:04:16:4d:82:ca:c5:0d:
                    fd:79:ba:a8:16:cb:4b:f0:00:41:44:4f:96:1d:48:
                    74:44:55:ce:b9:04:51:19:f4:60:fa:d9:bc:11:36:
                    32:b2:67:a1:bf:dc:89:e3:68:5b:a4:fb:48:3a:db:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:CF:91:B5:25:B3:00:61:CC:D7:AF:71:E8:82:42:61:17:4A:53
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:9e:65:fe:cc:f6:05:2f:33:1a:84:c0:6a:9a:e1:99:1a:
         50:37:d7:a0:86:19:af:ed:18:61:d0:0a:84:b7:89:9d:7e:b0:
         bc:ce:55:69:75:e7:b1:63:a0:34:e3:02:a7:cd:9d:a5:76:e8:
         01:b1:05:7d:7b:28:1b:58:5d:1f:86:9d:2e:ae:0a:6c:39:2a:
         9c:20:d5:98:31:1d:8a:c6:f7:19:db:44:09:58:cc:ec:99:87:
         15:9b:22:a9:90:1f:b7:3b:b9:25:e9:68:26:f5:f7:5e:7f:1b:
         73:73:12:e3:05:78:ba:6f:e7:24:c1:5a:68:43:fa:18:2e:d0:
         66:c6:f9:66:1c:fd:f2:6d:de:3a:2f:30:ec:63:36:a9:16:ce:
         73:02:b3:24:38:76:c0:89:eb:ed:0f:d6:b2:6c:02:d2:ce:25:
         38:45:15:0a:b3:be:b5:aa:d2:5c:f1:05:6a:e4:bd:20:ad:dd:
         54:89:7f:ee:b6:e5:77:07:37:43:0b:ec:53:06:23:33:67:93:
         c9:5f:3a:ac:a9:f2:54:26:64:c4:61:62:24:2a:1f:a9:e4:9a:
         a4:da:f8:e5:db:10:45:36:1e:96:bb:97:66:e6:76:77:f4:a0:
         f4:9d:c5:85:f7:72:e3:c4:ed:e1:7c:79:55:a0:39:29:6e:bc:
         53:c7:24:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RvbHPWSZT22mW7qDM6gwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm
NmM3MzEwHhcNMjUxMDE5MjEwMTI3WhcNMjUxMDIwMjEwMTI3WjAzMTEwLwYDVQQD
Eyg5ZmIyY2Y5MWI1MjViMzAwNjFjY2Q3YWY3MWU4ODI0MjYxMTc0YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/cdR484TPCu4wo69toftGywlOw
CaXNmpA+Zbdpv0bgKEH3hZRDl9C2CJrmZatXXjQnEAuaID4ThXizNtXceaunwvYn
eGDA47rCVBfLwMO1GKIp5gTm6qnl+gSFJvtvebTqin4yLru2VCV5Er1kWjN65ge1
Y/ZDtUaO2lqC/OCwirepzPnXDjxJDUss/2MAiLwKqg2JScrU/YznW8+1ARGHptnq
rXZVHo20zOfAa6HTQjAT9uhuP7n/HlsXxY9NBWIBWYlBmsEiAwQWTYLKxQ39ebqo
FstL8ABBRE+WHUh0RFXOuQRRGfRg+tm8ETYysmehv9yJ42hbpPtIOtsLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+yz5G1JbMAYczXr3HogkJhF0pTMB8GA1UdIwQY
MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt
Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1
LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5SeZf7M
9gUvMxqEwGqa4ZkaUDfXoIYZr+0YYdAKhLeJnX6wvM5VaXXnsWOgNOMCp82dpXbo
AbEFfXsoG1hdH4adLq4KbDkqnCDVmDEdisb3GdtECVjM7JmHFZsiqZAftzu5Jelo
JvX3Xn8bc3MS4wV4um/nJMFaaEP6GC7QZsb5Zhz98m3eOi8w7GM2qRbOcwKzJDh2
wInr7Q/WsmwC0s4lOEUVCrO+tarSXPEFauS9IK3dVIl/7rbldwc3QwvsUwYjM2eT
yV86rKnyVCZkxGFiJCofqeSapNr45dsQRTYelruXZuZ2d/Sg9J3Fhfdy48Tt4Xx5
VaA5KW68U8ckgA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:54 2025 by rpki-client