Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          wjJ4gRqU2j6VZVAMv9+3NGqILrjj5o62LXWDwZiOIA0=
Subject key identifier:   CB:30:A8:02:FA:28:CA:46:6D:95:BE:D9:1F:04:BB:A8:ED:16:A9:7F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019A00A34FAD4754917F9DE68CC2008CD5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          16F5
Signing time:             Mon 20 Oct 2025 08:01:33 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:33 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:33 +0000
Files and hashes:         1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
                          2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
                          3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: SQBQ20acxhdskRAH0DNMFosw5ciLI/Xy7HmdbNPZZJo=)
                          5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:4f:ad:47:54:91:7f:9d:e6:8c:c2:00:8c:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Oct 20 08:01:33 2025 GMT
            Not After : Oct 21 08:01:33 2025 GMT
        Subject: CN=cb30a802fa28ca466d95bed91f04bba8ed16a97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:5c:87:6b:fb:9b:69:5c:ab:00:0f:f9:3f:
                    78:94:e1:99:ac:e7:cf:e8:c2:c3:d3:40:ef:75:fd:
                    20:c6:a2:8f:5b:25:a4:18:5c:86:05:af:d6:f6:5f:
                    fd:e0:90:36:43:dc:89:10:32:af:7c:6a:00:be:d1:
                    07:09:38:56:e1:5c:cc:f0:c4:43:fb:a7:f3:1e:81:
                    e2:79:40:34:b3:e8:66:c0:bd:da:69:a2:29:03:76:
                    79:14:e9:bb:82:fc:ec:ca:7c:88:50:71:b0:af:0a:
                    39:8e:0f:80:10:e0:b6:4d:d7:a5:6f:f7:46:1f:2c:
                    09:00:7d:b3:6d:c0:0a:43:ef:a6:67:24:8d:49:e5:
                    7b:47:bc:07:36:3e:30:65:23:bf:ba:f7:03:fb:44:
                    99:06:fa:13:df:e6:44:d8:29:42:5a:81:30:15:1b:
                    82:b2:f2:d7:70:b3:f8:d8:c5:76:23:8d:1b:a6:a9:
                    e3:da:73:1f:a5:ed:c4:87:0e:66:34:d6:6f:a1:f3:
                    7d:23:27:57:9c:89:35:b0:4e:51:40:35:91:be:07:
                    18:03:46:95:f3:38:6b:8e:29:76:4f:fe:7e:ad:da:
                    a9:3a:93:03:f7:04:e1:04:27:a1:9a:4a:a1:84:83:
                    a2:4d:f9:8f:da:93:4f:23:3c:8f:1c:4a:61:6c:98:
                    5f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:30:A8:02:FA:28:CA:46:6D:95:BE:D9:1F:04:BB:A8:ED:16:A9:7F
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:8e:8c:5f:7e:3b:1f:80:35:3b:ef:f6:c6:fd:60:61:86:
         d0:73:ac:37:fb:77:cf:f2:37:04:b5:3f:bb:27:fb:37:70:9e:
         e7:c5:ba:92:78:ca:98:b8:be:cd:4c:16:fb:d4:8c:86:1b:fa:
         66:a1:da:95:be:74:f4:2b:59:3c:0d:83:02:5c:6c:98:1d:36:
         97:e6:6c:6b:6b:81:64:49:ed:ee:85:ac:1e:80:0c:c3:81:e9:
         2f:30:0f:d0:15:e5:7d:c9:ad:d7:ac:c3:55:ea:2a:02:28:8d:
         ff:04:4d:5a:c1:51:98:76:48:be:a0:bd:69:5a:84:e9:7c:ad:
         b1:e9:2c:7e:a9:48:68:c0:0c:0d:11:f3:70:39:93:3e:3a:80:
         fe:b9:b9:92:fe:1b:98:13:2e:30:8c:ff:d5:2b:36:5f:65:54:
         4c:5e:4e:2d:e6:b6:73:67:aa:09:92:f5:d5:8c:ea:b9:81:98:
         16:73:cb:7d:3f:20:49:fe:dd:69:f4:ad:e5:ec:55:71:33:20:
         3f:f9:08:0d:6f:e9:30:9b:bb:02:2a:20:9d:fd:4c:9b:1c:4c:
         54:12:96:74:7b:e1:34:47:e1:68:0c:4c:56:e9:b0:9d:dc:af:
         68:a7:7a:56:26:97:74:f7:10:44:3d:ad:6a:14:b8:41:28:21:
         28:83:ab:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo0+tR1SRf53mjMIAjNXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi
M2FhZWYwHhcNMjUxMDIwMDgwMTMzWhcNMjUxMDIxMDgwMTMzWjAzMTEwLwYDVQQD
EyhjYjMwYTgwMmZhMjhjYTQ2NmQ5NWJlZDkxZjA0YmJhOGVkMTZhOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuANch2v7m2lcqwAP+T94lOGZrOfP
6MLD00Dvdf0gxqKPWyWkGFyGBa/W9l/94JA2Q9yJEDKvfGoAvtEHCThW4VzM8MRD
+6fzHoHieUA0s+hmwL3aaaIpA3Z5FOm7gvzsynyIUHGwrwo5jg+AEOC2Tdelb/dG
HywJAH2zbcAKQ++mZySNSeV7R7wHNj4wZSO/uvcD+0SZBvoT3+ZE2ClCWoEwFRuC
svLXcLP42MV2I40bpqnj2nMfpe3Ehw5mNNZvofN9IydXnIk1sE5RQDWRvgcYA0aV
8zhrjil2T/5+rdqpOpMD9wThBCehmkqhhIOiTfmP2pNPIzyPHEphbJhfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMswqAL6KMpGbZW+2R8Eu6jtFql/MB8GA1UdIwQY
MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt
ZGZjYmRmM2IxMDU4LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4
LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk2OjF9+
Ox+ANTvv9sb9YGGG0HOsN/t3z/I3BLU/uyf7N3Ce58W6knjKmLi+zUwW+9SMhhv6
ZqHalb509CtZPA2DAlxsmB02l+Zsa2uBZEnt7oWsHoAMw4HpLzAP0BXlfcmt16zD
VeoqAiiN/wRNWsFRmHZIvqC9aVqE6XytseksfqlIaMAMDRHzcDmTPjqA/rm5kv4b
mBMuMIz/1Ss2X2VUTF5OLea2c2eqCZL11YzquYGYFnPLfT8gSf7dafSt5exVcTMg
P/kIDW/pMJu7Aiognf1MmxxMVBKWdHvhNEfhaAxMVumwndyvaKd6ViaXdPcQRD2t
ahS4QSghKIOrPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:50 2025 by rpki-client