Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File:                     IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier:          L+2GEw3NSlddRn5/EVfNnSvw1T+YfxMxQHILgzlIGec=
Subject key identifier:   E5:8B:D2:14:5A:AA:8A:55:B1:98:1B:D6:01:50:F2:1F:78:5A:83:35
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer:       /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial:       0199FB4619797C9EC582614D20F110F931D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number:          13EE
Signing time:             Sun 19 Oct 2025 07:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:39 +0000
Files and hashes:         1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
                          2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: ZJ5BTlYTgJOdM/Q80EvbgUUBGGS5IDkPlOwGLLpJ4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:19:79:7c:9e:c5:82:61:4d:20:f1:10:f9:31:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
        Validity
            Not Before: Oct 19 07:01:39 2025 GMT
            Not After : Oct 20 07:01:39 2025 GMT
        Subject: CN=e58bd2145aaa8a55b1981bd60150f21f785a8335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:3e:e0:a5:5f:20:fc:ed:28:7f:dd:61:aa:
                    c5:13:54:8b:17:11:62:24:aa:6d:eb:d9:0d:cf:00:
                    51:6d:64:38:df:04:cd:de:fe:a6:1d:0f:98:fd:06:
                    81:a5:29:2c:a4:e9:42:d7:0f:72:04:6e:af:0b:21:
                    35:bf:38:db:4d:d0:57:be:f2:7b:ba:c0:08:59:36:
                    09:c6:e3:35:ec:e8:6f:0b:f6:2b:bb:5d:09:9d:8c:
                    d7:1a:85:5e:28:e3:7c:25:d4:3c:0a:6b:cf:56:d5:
                    d0:6a:17:47:00:72:6c:78:7b:39:f7:ed:87:0c:2b:
                    fd:44:6c:af:bf:7f:43:c3:ce:f7:90:a8:ac:c1:cc:
                    a1:ec:1e:d0:00:f4:51:3f:f4:c7:b7:25:cc:1b:3d:
                    40:a3:10:73:e5:87:cc:07:0a:5f:00:1c:77:92:0d:
                    b8:d7:78:cc:f3:dc:7c:a6:35:5a:bd:57:78:f1:29:
                    33:37:05:c4:12:a4:9b:58:99:37:04:b0:dc:59:ec:
                    51:38:67:d6:77:47:18:3f:bf:5a:29:76:39:69:a4:
                    40:2e:9a:78:7a:1a:5a:aa:d4:fb:e1:d4:db:30:6a:
                    14:ad:ca:68:07:9e:d2:f5:ed:6f:6c:bb:f5:c9:74:
                    80:b1:e8:10:6c:00:ee:ac:9c:1a:06:7c:9b:38:11:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:D2:14:5A:AA:8A:55:B1:98:1B:D6:01:50:F2:1F:78:5A:83:35
            X509v3 Authority Key Identifier:
                keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:59:38:f0:3a:c9:13:de:04:e5:38:db:d4:4d:8f:14:08:45:
         02:a4:f8:a2:5b:d8:3d:7f:e1:f4:9d:11:06:38:a7:2d:81:ed:
         5c:82:75:cc:d7:34:20:1d:09:67:9e:4d:3d:82:d3:37:b9:4c:
         f0:8a:c9:31:e8:27:24:0e:bd:ae:b8:12:da:ab:49:bc:11:08:
         5b:2d:67:d1:62:21:2f:38:da:c1:db:b5:9a:03:a9:ac:dc:54:
         61:b4:e0:8b:a1:04:7e:c2:a4:6a:96:cc:05:18:fa:d6:7f:c7:
         c4:04:3a:1b:a0:71:0b:12:0a:44:82:64:a5:be:21:f8:7a:1f:
         9f:92:b1:1e:e7:d6:6f:fe:8c:56:d2:8f:9b:33:d4:79:08:af:
         f9:8d:e6:9f:94:fc:46:77:20:70:ff:93:65:37:0c:ab:0b:93:
         de:40:ae:12:7c:37:c3:65:67:b9:a2:f4:08:e7:1d:d4:31:22:
         ff:36:c2:5f:4f:88:81:37:16:74:61:b0:35:34:a1:4c:82:ba:
         ca:4c:ea:fc:14:9f:39:ce:f1:d3:b2:c7:d2:40:78:7c:0f:f6:
         93:6e:7e:e6:31:27:32:e9:fb:56:3a:5c:6d:e0:d9:72:5b:ed:
         55:0a:6e:78:48:94:70:53:91:5b:94:7a:a9:8e:41:df:95:f8:
         cd:fb:3e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rhl5fJ7FgmFNIPEQ+THZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDYzNjczOTAyMjRhMDc2ODRkNzk3N2Y5MTY1YTA5NTBm
MDNkNTQwHhcNMjUxMDE5MDcwMTM5WhcNMjUxMDIwMDcwMTM5WjAzMTEwLwYDVQQD
EyhlNThiZDIxNDVhYWE4YTU1YjE5ODFiZDYwMTUwZjIxZjc4NWE4MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8A+4KVfIPztKH/dYarFE1SLFxFi
JKpt69kNzwBRbWQ43wTN3v6mHQ+Y/QaBpSkspOlC1w9yBG6vCyE1vzjbTdBXvvJ7
usAIWTYJxuM17OhvC/Yru10JnYzXGoVeKON8JdQ8CmvPVtXQahdHAHJseHs59+2H
DCv9RGyvv39Dw873kKiswcyh7B7QAPRRP/THtyXMGz1AoxBz5YfMBwpfABx3kg24
13jM89x8pjVavVd48SkzNwXEEqSbWJk3BLDcWexROGfWd0cYP79aKXY5aaRALpp4
ehpaqtT74dTbMGoUrcpoB57S9e1vbLv1yXSAsegQbADurJwaBnybOBGi2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWL0hRaqopVsZgb1gFQ8h94WoM1MB8GA1UdIwQY
MBaAFCBGNnOQIkoHaE15d/kWWglQ8D1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgt
YzhmYzYxNjM5NDJiLzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgtYzhmYzYxNjM5NDJi
LzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVk48DrJ
E94E5Tjb1E2PFAhFAqT4olvYPX/h9J0RBjinLYHtXIJ1zNc0IB0JZ55NPYLTN7lM
8IrJMegnJA69rrgS2qtJvBEIWy1n0WIhLzjawdu1mgOprNxUYbTgi6EEfsKkapbM
BRj61n/HxAQ6G6BxCxIKRIJkpb4h+Hofn5KxHufWb/6MVtKPmzPUeQiv+Y3mn5T8
RncgcP+TZTcMqwuT3kCuEnw3w2VnuaL0COcd1DEi/zbCX0+IgTcWdGGwNTShTIK6
ykzq/BSfOc7x07LH0kB4fA/2k25+5jEnMun7VjpcbeDZclvtVQpueEiUcFORW5R6
qY5B35X4zfs+cA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:56 2025 by rpki-client