Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          u5fIY03VmBX8oVXYt5daMtiVyvlE0owHp4IDLFXhLic=
Subject key identifier:   EF:80:B4:4B:5E:8B:B7:59:1E:32:0F:C7:AB:0E:C8:F7:DD:64:93:16
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       0199FCC623E1DEE7B9D2FDD34B670BFB8091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          07C9
Signing time:             Sun 19 Oct 2025 14:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:07 +0000
Files and hashes:         1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=)
                          2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: KrheFhn1DMNLK3hVNpH5cxEq6K0NNV7euRWRVzafKRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:23:e1:de:e7:b9:d2:fd:d3:4b:67:0b:fb:80:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Oct 19 14:01:07 2025 GMT
            Not After : Oct 20 14:01:07 2025 GMT
        Subject: CN=ef80b44b5e8bb7591e320fc7ab0ec8f7dd649316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:36:7f:8c:a8:ad:97:ea:6a:e0:f2:a0:61:
                    63:8c:56:0c:eb:5d:ce:bb:f6:61:5a:57:51:a7:bc:
                    41:43:7a:80:b0:bf:8a:97:b3:1e:2f:6d:11:43:29:
                    4f:28:d1:01:6b:17:4d:62:e1:d7:95:16:ce:f5:0c:
                    38:99:4d:82:7d:db:59:d4:4d:4b:1b:85:c2:77:2d:
                    9d:54:cd:74:42:0d:ba:5f:05:bb:72:48:68:e1:4b:
                    ce:10:88:f0:fe:80:c5:0b:32:fa:94:74:fd:f7:0e:
                    be:e4:de:04:10:5f:f1:8d:1e:a0:13:d6:64:fa:0a:
                    15:ac:8e:d1:88:a1:a3:15:b5:1f:0a:b3:68:c3:cd:
                    fe:7f:de:b9:5c:f3:0b:59:61:fa:00:8e:33:d0:1b:
                    82:9c:84:fc:21:bf:0a:4a:17:6a:c2:a2:a8:af:46:
                    e7:eb:1d:b7:7d:be:cf:6c:62:13:e4:7c:39:86:7c:
                    0c:c5:dc:b5:26:a3:50:c2:7e:a5:c2:88:a5:a5:f5:
                    d1:80:ee:f9:3b:4b:1d:9f:b9:2f:da:dc:ef:00:d8:
                    43:49:5f:09:5b:18:92:63:c7:be:d8:2f:cb:85:07:
                    15:7b:35:6a:56:15:ac:d5:58:46:86:da:8d:da:75:
                    46:b6:fd:07:e1:bb:a1:b8:38:d1:3a:17:19:a2:b5:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:B4:4B:5E:8B:B7:59:1E:32:0F:C7:AB:0E:C8:F7:DD:64:93:16
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:a4:20:59:c4:ec:c2:b6:a1:89:25:e7:71:53:73:61:bc:
         d0:83:96:5a:8b:04:ea:c2:90:c1:55:f4:3f:96:8f:00:f7:ca:
         4b:6c:b4:6e:74:69:22:af:31:0a:7a:99:8f:1f:0d:cb:c9:9b:
         95:83:e6:fa:1a:dc:3e:4d:56:33:26:79:20:95:db:f4:f4:9e:
         3d:3b:64:e9:59:bf:30:fb:87:fc:f2:f1:ab:5f:b5:a7:a1:68:
         49:28:19:fd:6e:17:06:48:25:c9:65:e9:bf:eb:53:4f:ae:f5:
         bd:8b:67:2e:bb:c5:d3:1c:d7:ac:85:46:e6:b7:8d:79:27:89:
         8f:75:8d:05:59:ba:1a:6c:23:6e:99:80:c1:20:58:f1:5a:bc:
         85:4c:4a:de:34:e0:6b:24:7a:07:4d:25:f0:b0:b4:3b:4a:3a:
         2a:ea:d5:59:7a:b6:30:33:cc:48:15:71:f2:b5:47:47:9e:22:
         57:69:9d:78:7d:83:12:9b:df:f4:c8:f4:46:bd:9d:09:f5:aa:
         8d:83:81:5a:06:9a:0d:fe:99:bc:46:62:9e:9e:52:1b:a1:21:
         53:f8:1f:1b:aa:06:84:73:49:54:1d:00:d4:3e:b7:18:4c:81:
         54:16:eb:e4:97:9f:f2:d5:df:81:6e:e1:fd:a0:d2:41:bf:75:
         73:73:bd:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiPh3ue50v3TS2cL+4CRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5
ZDNkM2MwHhcNMjUxMDE5MTQwMTA3WhcNMjUxMDIwMTQwMTA3WjAzMTEwLwYDVQQD
EyhlZjgwYjQ0YjVlOGJiNzU5MWUzMjBmYzdhYjBlYzhmN2RkNjQ5MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFM2f4yorZfqauDyoGFjjFYM613O
u/ZhWldRp7xBQ3qAsL+Kl7MeL20RQylPKNEBaxdNYuHXlRbO9Qw4mU2CfdtZ1E1L
G4XCdy2dVM10Qg26XwW7ckho4UvOEIjw/oDFCzL6lHT99w6+5N4EEF/xjR6gE9Zk
+goVrI7RiKGjFbUfCrNow83+f965XPMLWWH6AI4z0BuCnIT8Ib8KShdqwqKor0bn
6x23fb7PbGIT5Hw5hnwMxdy1JqNQwn6lwoilpfXRgO75O0sdn7kv2tzvANhDSV8J
WxiSY8e+2C/LhQcVezVqVhWs1VhGhtqN2nVGtv0H4buhuDjROhcZorVqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+AtEtei7dZHjIPx6sOyPfdZJMWMB8GA1UdIwQY
MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt
MDk3MzI0ZGQ5ZWM4LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4
LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKKkIFnE
7MK2oYkl53FTc2G80IOWWosE6sKQwVX0P5aPAPfKS2y0bnRpIq8xCnqZjx8Ny8mb
lYPm+hrcPk1WMyZ5IJXb9PSePTtk6Vm/MPuH/PLxq1+1p6FoSSgZ/W4XBkglyWXp
v+tTT671vYtnLrvF0xzXrIVG5reNeSeJj3WNBVm6GmwjbpmAwSBY8Vq8hUxK3jTg
ayR6B00l8LC0O0o6KurVWXq2MDPMSBVx8rVHR54iV2mdeH2DEpvf9Mj0Rr2dCfWq
jYOBWgaaDf6ZvEZinp5SG6EhU/gfG6oGhHNJVB0A1D63GEyBVBbr5Jef8tXfgW7h
/aDSQb91c3O9qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:04 2025 by rpki-client