Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          OcPKhy/9yGI9DLIH2IK3sixyQCRc5KGU6Nc1gDNwkZk=
Subject key identifier:   D1:19:46:1F:74:85:6D:B3:EA:E6:1B:00:02:34:31:A7:94:DC:57:68
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       0199FC58941ADD4F7593EE98DE3C7F083FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          15B9
Signing time:             Sun 19 Oct 2025 12:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:27 +0000
Files and hashes:         1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
                          2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
                          3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: cVeTVuv+iGmp/jD0eOuwSK6YyhEI59ulPmsHRMpMmss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:94:1a:dd:4f:75:93:ee:98:de:3c:7f:08:3f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: Oct 19 12:01:27 2025 GMT
            Not After : Oct 20 12:01:27 2025 GMT
        Subject: CN=d119461f74856db3eae61b00023431a794dc5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:4f:93:3f:77:d9:fd:81:e8:5c:86:81:62:
                    ca:60:87:12:98:5e:f2:04:c8:d2:10:00:74:4d:85:
                    6e:b1:b8:85:39:d7:0c:1e:1b:7d:24:35:8b:55:38:
                    8e:4d:d9:25:f1:b6:88:13:43:22:a2:44:9c:bf:22:
                    9d:1b:e2:42:99:52:6a:ac:c3:8d:5e:fe:51:1b:cf:
                    58:73:f5:6e:79:0c:b6:f9:37:c1:ba:ba:24:14:7f:
                    17:30:2c:ae:5a:4f:ab:29:a0:c6:7f:8e:45:81:2f:
                    18:ec:19:6d:2f:11:b1:42:c9:fa:79:06:1d:ad:d6:
                    ab:43:e6:1c:f1:8f:be:15:c0:93:2a:29:00:ca:4d:
                    94:e9:08:fc:16:1e:70:10:bb:35:58:94:20:84:b0:
                    25:17:5f:e4:dd:e1:b4:0f:ea:3f:cd:86:35:c3:d1:
                    64:ff:10:46:87:bf:68:96:7f:fb:c6:c4:06:f7:b2:
                    ca:9e:db:f3:a6:20:73:02:9d:85:ef:b9:f0:6b:2c:
                    60:d3:23:f2:51:d6:e0:e5:19:b6:5e:13:31:a0:76:
                    f4:8e:98:c6:85:15:f3:b0:5e:3b:70:05:db:89:76:
                    0f:c9:0f:b1:3f:40:84:3c:d6:d6:a9:56:5a:55:ea:
                    15:89:b3:97:76:6a:5e:1e:95:9d:c2:fb:ab:da:d7:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:46:1F:74:85:6D:B3:EA:E6:1B:00:02:34:31:A7:94:DC:57:68
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:c5:58:37:53:5b:7d:f4:07:46:0f:d1:a4:e5:85:a1:aa:
         42:2d:35:4a:e7:81:f7:32:d8:6b:6d:07:78:e8:19:7f:a2:f1:
         9e:b9:70:e9:4c:e0:7a:08:97:8e:7b:96:2c:0d:26:8a:a4:08:
         6b:78:2f:1b:cf:9a:40:a3:6e:b2:df:22:30:ab:fa:0f:f9:21:
         06:02:10:e5:b9:56:e4:06:ae:ee:06:d6:d4:d8:87:7d:ab:9d:
         04:8d:e5:86:f0:7b:a2:5b:87:e0:8d:bd:cb:e1:a0:d8:76:0f:
         42:0a:e3:84:84:ec:a2:ee:30:e4:a6:93:4c:d7:c7:c7:ba:d2:
         c7:d3:ab:1e:d0:87:17:ec:08:12:e7:7a:4e:85:a3:f5:c4:ba:
         3a:af:86:f1:6f:27:17:08:8a:01:f1:fc:b5:08:0e:5b:c5:34:
         bb:fc:e8:ee:27:ce:81:28:31:d6:c5:1f:05:d7:82:29:24:82:
         00:8a:78:66:22:5e:37:6e:68:df:79:02:1a:27:aa:37:1a:c9:
         85:99:72:0d:f6:82:31:38:85:4a:f2:98:6a:e4:bf:36:31:9b:
         ed:87:e1:2b:be:ac:c8:58:8e:42:ab:67:46:e6:46:ba:7e:5d:
         05:80:07:87:3e:a2:a5:d3:5d:1c:22:13:11:63:b6:dd:be:23:
         2e:87:ef:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJQa3U91k+6Y3jx/CD/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm
NjIyNGEwHhcNMjUxMDE5MTIwMTI3WhcNMjUxMDIwMTIwMTI3WjAzMTEwLwYDVQQD
EyhkMTE5NDYxZjc0ODU2ZGIzZWFlNjFiMDAwMjM0MzFhNzk0ZGM1NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh1Pkz932f2B6FyGgWLKYIcSmF7y
BMjSEAB0TYVusbiFOdcMHht9JDWLVTiOTdkl8baIE0MiokScvyKdG+JCmVJqrMON
Xv5RG89Yc/VueQy2+TfBurokFH8XMCyuWk+rKaDGf45FgS8Y7BltLxGxQsn6eQYd
rdarQ+Yc8Y++FcCTKikAyk2U6Qj8Fh5wELs1WJQghLAlF1/k3eG0D+o/zYY1w9Fk
/xBGh79oln/7xsQG97LKntvzpiBzAp2F77nwayxg0yPyUdbg5Rm2XhMxoHb0jpjG
hRXzsF47cAXbiXYPyQ+xP0CEPNbWqVZaVeoVibOXdmpeHpWdwvur2tdsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEZRh90hW2z6uYbAAI0MaeU3FdoMB8GA1UdIwQY
MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt
YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1
LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWnFWDdT
W330B0YP0aTlhaGqQi01SueB9zLYa20HeOgZf6Lxnrlw6UzgegiXjnuWLA0miqQI
a3gvG8+aQKNust8iMKv6D/khBgIQ5blW5Aau7gbW1NiHfaudBI3lhvB7oluH4I29
y+Gg2HYPQgrjhITsou4w5KaTTNfHx7rSx9OrHtCHF+wIEud6ToWj9cS6Oq+G8W8n
FwiKAfH8tQgOW8U0u/zo7ifOgSgx1sUfBdeCKSSCAIp4ZiJeN25o33kCGieqNxrJ
hZlyDfaCMTiFSvKYauS/NjGb7YfhK76syFiOQqtnRuZGun5dBYAHhz6ipdNdHCIT
EWO23b4jLofv4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:13 2025 by rpki-client