Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier:          ZrCodj1DbJqqxHFD3/WJHO62I4btq1Zr5AB8OdKa3Qs=
Subject key identifier:   66:F4:3C:43:C1:8E:A1:64:ED:04:61:69:A2:5D:6B:E0:8C:98:FD:B0
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer:       /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial:       0199FC8FAB46735BB4E231E90916DC481DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:37 +0000
Files and hashes:         1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: hQgQAOu0ueMgc9viYxz10LfKIQwOXK03hOx7c1WcmeY=)
                          2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:ab:46:73:5b:b4:e2:31:e9:09:16:dc:48:1d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Validity
            Not Before: Oct 19 13:01:37 2025 GMT
            Not After : Oct 20 13:01:37 2025 GMT
        Subject: CN=66f43c43c18ea164ed046169a25d6be08c98fdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:22:84:84:ae:15:01:53:91:47:c8:28:8f:
                    dc:6c:b6:1f:51:0e:c3:32:bd:18:6b:a2:74:54:30:
                    bb:00:f0:44:65:58:20:57:6f:7d:ae:c4:e1:6a:18:
                    b4:2e:29:49:06:da:2f:a5:2d:09:d3:c1:1a:29:7f:
                    a3:40:db:1f:47:9b:71:8c:90:73:24:61:45:88:0b:
                    98:02:da:b4:b8:0c:71:ac:86:39:97:01:d9:62:16:
                    ca:20:2f:64:95:19:e6:77:69:fe:a4:71:37:aa:3a:
                    ac:8d:d9:63:c5:c8:25:18:4c:94:cd:b0:77:af:8e:
                    a3:78:a7:d4:d3:d6:21:bf:2e:7a:d3:dd:3d:05:b5:
                    aa:79:c3:a6:76:c6:20:cb:a2:c1:3c:3d:0b:ad:73:
                    00:dd:53:62:70:3a:ed:f1:a4:a7:a6:c8:43:62:df:
                    df:d9:4a:0b:2b:29:e8:70:48:07:9a:09:9e:26:d5:
                    00:eb:8b:62:97:0e:29:f2:23:9c:a2:98:26:68:84:
                    2a:49:39:12:d1:27:4b:d2:e6:db:b5:3a:22:20:83:
                    b0:c0:be:f4:dc:ef:64:49:42:4c:40:0b:53:e1:c4:
                    7a:85:c2:fe:93:d5:c8:84:27:d6:c2:40:dc:03:86:
                    77:fc:67:ad:5e:64:fd:58:66:84:b5:90:a5:cc:06:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:3C:43:C1:8E:A1:64:ED:04:61:69:A2:5D:6B:E0:8C:98:FD:B0
            X509v3 Authority Key Identifier:
                keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:3b:20:56:71:61:56:24:7e:05:33:3f:38:b9:e0:bf:13:
         4b:f2:af:d6:85:bf:b4:63:db:11:24:85:4b:28:94:e9:22:9a:
         b0:90:04:56:b0:ef:e8:33:ef:7d:04:0c:be:16:4a:5d:59:04:
         e4:45:76:bf:73:05:c2:4d:6d:99:5a:bd:39:ed:2a:56:0f:f9:
         4f:20:25:c8:da:3b:4e:7e:4f:79:25:cb:1a:a0:be:b1:9b:4e:
         10:e3:df:ac:9c:47:6a:87:83:4d:83:8c:33:fb:bd:85:7f:96:
         84:40:7c:a3:dc:df:fa:10:ae:ea:cb:66:6a:24:8d:36:45:f3:
         31:92:73:33:25:8a:99:3d:73:51:d5:a8:55:54:d0:64:c8:90:
         07:c5:52:89:42:f9:aa:d0:b0:98:64:9b:5f:7f:f2:2c:44:d7:
         c0:17:0c:ab:f2:a9:f7:59:cc:f5:52:30:44:95:68:e9:33:8a:
         2f:3a:ec:4d:9b:f1:58:46:2b:6d:36:5a:67:68:d6:ea:90:9d:
         6b:6d:29:72:65:0a:0f:69:c3:d9:3d:c8:4c:6f:81:90:5c:4c:
         94:5d:e9:8b:4a:79:0d:9f:66:50:c1:eb:2e:24:1e:70:ea:10:
         24:9a:7f:c3:07:fb:ae:77:e5:3f:82:89:1e:f1:77:c4:da:9d:
         38:a0:a4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6tGc1u04jHpCRbcSB2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTMxZWU5MzZhNmZhNDJmZjNhZjBhNmFlODZjMmM2NjUz
ZGQ1NzMwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
Eyg2NmY0M2M0M2MxOGVhMTY0ZWQwNDYxNjlhMjVkNmJlMDhjOThmZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQihISuFQFTkUfIKI/cbLYfUQ7D
Mr0Ya6J0VDC7APBEZVggV299rsThahi0LilJBtovpS0J08EaKX+jQNsfR5txjJBz
JGFFiAuYAtq0uAxxrIY5lwHZYhbKIC9klRnmd2n+pHE3qjqsjdljxcglGEyUzbB3
r46jeKfU09Yhvy560909BbWqecOmdsYgy6LBPD0LrXMA3VNicDrt8aSnpshDYt/f
2UoLKynocEgHmgmeJtUA64tilw4p8iOcopgmaIQqSTkS0SdL0ubbtToiIIOwwL70
3O9kSUJMQAtT4cR6hcL+k9XIhCfWwkDcA4Z3/GetXmT9WGaEtZClzAYH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb0PEPBjqFk7QRhaaJda+CMmP2wMB8GA1UdIwQY
MBaAFEQTHuk2pvpC/zrwpq6GwsZlPdVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZDQ0ZjItMTcwNi00YmYxLWI3MWQt
NzRjYTM2NDAyYTg1LzEvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xZDQ0ZjItMTcwNi00YmYxLWI3MWQtNzRjYTM2NDAyYTg1
LzEvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5o7IFZx
YVYkfgUzPzi54L8TS/Kv1oW/tGPbESSFSyiU6SKasJAEVrDv6DPvfQQMvhZKXVkE
5EV2v3MFwk1tmVq9Oe0qVg/5TyAlyNo7Tn5PeSXLGqC+sZtOEOPfrJxHaoeDTYOM
M/u9hX+WhEB8o9zf+hCu6stmaiSNNkXzMZJzMyWKmT1zUdWoVVTQZMiQB8VSiUL5
qtCwmGSbX3/yLETXwBcMq/Kp91nM9VIwRJVo6TOKLzrsTZvxWEYrbTZaZ2jW6pCd
a20pcmUKD2nD2T3ITG+BkFxMlF3pi0p5DZ9mUMHrLiQecOoQJJp/wwf7rnflP4KJ
HvF3xNqdOKCkEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:02 2025 by rpki-client