Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          Ygb+qRGm9xCpYkynS3kwHicxbZjl1FI0OiOSCOfjp84=
Subject key identifier:   27:36:E5:10:81:DA:04:E6:AB:45:06:B5:9E:F1:BA:19:92:1C:2D:DD
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       0199FB0EF2D2FDBFDA9FD5F94A05883D2078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 06:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:24 +0000
Files and hashes:         1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: XTxSD6SiDRtzK6BW7YAylrYcLd4yyz/9eEYWeVWs8Sw=)
                          2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f2:d2:fd:bf:da:9f:d5:f9:4a:05:88:3d:20:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: Oct 19 06:01:24 2025 GMT
            Not After : Oct 20 06:01:24 2025 GMT
        Subject: CN=2736e51081da04e6ab4506b59ef1ba19921c2ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:e1:44:c0:9e:79:84:63:be:97:e8:09:2e:
                    6f:21:65:f2:1c:43:88:6f:22:33:54:ae:b2:d0:4a:
                    bc:19:70:7d:48:68:c7:56:01:72:4c:1e:f5:70:14:
                    4d:1b:48:33:d8:66:47:dc:b9:d5:55:71:be:04:5f:
                    8c:4b:62:6a:2b:ca:ff:98:a6:08:e6:2f:9c:34:d3:
                    2b:0e:31:ef:9c:b1:c5:5e:0e:9a:3d:7b:27:68:ff:
                    f0:23:14:03:ec:f9:3e:22:44:62:b7:b1:10:00:dc:
                    c4:53:78:6d:3d:86:dd:0e:24:30:07:00:4a:fd:55:
                    34:94:bb:26:4f:5a:a5:f1:d5:1c:d2:bc:17:be:5b:
                    13:cd:d8:26:93:80:59:3d:f1:fe:87:09:6c:d4:54:
                    d5:11:78:f0:24:d7:9c:d4:4a:67:05:22:94:f9:ad:
                    a1:9e:19:cf:39:d3:86:e3:6d:69:b2:a3:bb:da:38:
                    1f:74:eb:06:92:eb:e9:14:ab:9c:51:40:a4:d7:9a:
                    26:48:35:33:23:1d:ae:0b:4b:8d:1e:68:3e:15:43:
                    4d:88:88:65:c6:08:fe:52:be:bc:29:57:84:b7:61:
                    64:dc:bc:0a:32:14:20:4a:a0:c1:5c:23:ff:48:13:
                    41:19:41:c8:9e:62:ab:e4:63:67:20:3a:13:73:54:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:E5:10:81:DA:04:E6:AB:45:06:B5:9E:F1:BA:19:92:1C:2D:DD
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:82:cb:8d:d2:52:b7:b6:56:04:fc:19:e1:6c:b9:52:8a:4c:
         54:aa:93:34:7d:38:58:22:35:69:f5:20:eb:e1:58:12:ea:74:
         eb:74:61:1e:2e:49:a4:46:69:6c:f1:7a:8c:af:d0:12:d4:e4:
         32:38:3b:1c:77:34:df:8e:8c:08:d3:b7:d3:10:f4:10:56:e0:
         0f:5e:78:f4:96:27:5f:03:ab:01:cd:4b:b3:24:31:12:2d:ec:
         e8:b6:1d:54:5a:a3:a3:34:8c:ee:b9:b6:ed:8a:6c:6b:b0:2a:
         cb:7f:95:2d:48:d6:36:2e:92:02:04:4b:ba:df:72:92:39:41:
         d7:9f:33:64:57:b4:46:39:e0:48:00:16:3c:ae:35:09:1a:97:
         13:46:8f:b8:26:a3:d6:65:aa:bc:33:4b:e9:57:cf:7c:fe:51:
         d3:20:bb:bc:af:dc:2d:94:3d:ad:cc:5d:be:12:23:c7:6f:75:
         88:f4:21:22:46:e0:52:95:02:a5:61:e3:9d:ea:17:01:f8:1f:
         a1:fe:56:90:b0:5e:d9:43:a8:db:b6:64:61:5c:12:a8:db:9a:
         13:ae:82:c6:b7:fe:a6:6a:7e:17:2b:45:73:b0:c5:90:8c:d7:
         0e:1c:b1:f2:b7:aa:28:e8:ca:90:56:66:44:07:96:a3:fa:e4:
         33:8a:57:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DvLS/b/an9X5SgWIPSB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk
ZDNkOTIwHhcNMjUxMDE5MDYwMTI0WhcNMjUxMDIwMDYwMTI0WjAzMTEwLwYDVQQD
EygyNzM2ZTUxMDgxZGEwNGU2YWI0NTA2YjU5ZWYxYmExOTkyMWMyZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApynhRMCeeYRjvpfoCS5vIWXyHEOI
byIzVK6y0Eq8GXB9SGjHVgFyTB71cBRNG0gz2GZH3LnVVXG+BF+MS2JqK8r/mKYI
5i+cNNMrDjHvnLHFXg6aPXsnaP/wIxQD7Pk+IkRit7EQANzEU3htPYbdDiQwBwBK
/VU0lLsmT1ql8dUc0rwXvlsTzdgmk4BZPfH+hwls1FTVEXjwJNec1EpnBSKU+a2h
nhnPOdOG421psqO72jgfdOsGkuvpFKucUUCk15omSDUzIx2uC0uNHmg+FUNNiIhl
xgj+Ur68KVeEt2Fk3LwKMhQgSqDBXCP/SBNBGUHInmKr5GNnIDoTc1Te/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc25RCB2gTmq0UGtZ7xuhmSHC3dMB8GA1UdIwQY
MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt
YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2
LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4LLjdJS
t7ZWBPwZ4Wy5UopMVKqTNH04WCI1afUg6+FYEup063RhHi5JpEZpbPF6jK/QEtTk
Mjg7HHc0346MCNO30xD0EFbgD1549JYnXwOrAc1LsyQxEi3s6LYdVFqjozSM7rm2
7Ypsa7Aqy3+VLUjWNi6SAgRLut9ykjlB158zZFe0RjngSAAWPK41CRqXE0aPuCaj
1mWqvDNL6VfPfP5R0yC7vK/cLZQ9rcxdvhIjx291iPQhIkbgUpUCpWHjneoXAfgf
of5WkLBe2UOo27ZkYVwSqNuaE66Cxrf+pmp+FytFc7DFkIzXDhyx8reqKOjKkFZm
RAeWo/rkM4pXlQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:59 2025 by rpki-client