Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          swg6+6xm6sulqUMErEzQhw+Xoqp6zl6BtlxUrUlpnE4=
Subject key identifier:   56:46:B7:B2:E6:CA:55:B8:14:86:21:90:3B:5F:62:B0:96:20:23:C4
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       0199FC583B090F9E54E54664AAD2E0F3AEEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          0FBA
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: /VAI19PUVZPR6ZCZiNQLu44F91GSattTAWATLwobjcM=)
                          2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:3b:09:0f:9e:54:e5:46:64:aa:d2:e0:f3:ae:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=5646b7b2e6ca55b8148621903b5f62b0962023c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:63:3f:61:f6:a6:07:bc:2a:96:7e:9f:fa:
                    4c:f3:1c:0f:7f:19:b8:ed:f6:f2:2c:d7:3b:a7:09:
                    b4:42:ee:a9:ee:70:1d:bb:0b:c1:ef:e3:a3:35:f1:
                    a9:54:f7:31:d8:5b:16:5d:f5:35:cb:81:c5:aa:ee:
                    2e:ca:c5:cc:6a:24:2b:f8:cb:c6:3f:b0:22:a1:78:
                    ab:9e:7d:64:8b:d3:55:c5:4c:79:d6:f0:c5:42:40:
                    d0:5f:d9:c5:e0:21:01:45:f5:72:9f:46:69:30:9f:
                    35:45:40:00:5a:ed:d2:9d:0e:78:60:4d:2c:a2:04:
                    ba:cb:b5:58:d2:75:7a:6d:e8:99:9a:ec:ea:87:28:
                    89:69:ea:dd:b8:4c:4f:77:94:cf:7b:04:59:29:75:
                    97:72:cc:45:d8:2a:24:d6:c6:05:81:bf:9d:2e:c6:
                    fa:14:c1:57:2b:fd:75:dd:35:65:7f:97:d4:49:e0:
                    c1:6f:ed:28:f8:e3:96:2b:a2:04:b2:69:84:7f:71:
                    76:c9:51:70:18:c9:92:7a:9f:16:6d:71:11:f7:61:
                    70:88:9a:e2:f3:2c:3a:12:a8:6a:84:21:44:b1:cf:
                    4e:9b:96:73:07:ff:ea:68:5d:20:5f:41:4d:85:f4:
                    0d:74:25:bf:17:d4:44:00:39:e6:a9:70:a1:01:8c:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:B7:B2:E6:CA:55:B8:14:86:21:90:3B:5F:62:B0:96:20:23:C4
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:84:80:a8:74:7d:c4:76:a3:46:3d:00:0f:4a:94:26:67:
         d1:a6:a9:4a:cc:1f:ac:b1:76:55:e3:16:34:71:eb:77:e5:1a:
         0e:4a:1d:7f:fd:64:1d:70:6b:e9:63:f8:3b:99:1f:e9:b0:6f:
         c0:70:8f:df:98:e7:57:85:e6:a9:1e:1b:43:10:5d:06:53:61:
         dd:18:82:dd:50:3f:74:aa:e4:4b:15:b8:7d:64:10:18:93:bc:
         a0:80:39:b4:43:de:bc:fc:19:24:74:ad:43:83:89:c8:03:15:
         57:4e:d7:c0:c3:54:73:7d:5d:15:ee:87:ac:11:48:c5:84:3f:
         5d:ad:bf:58:4a:bd:f7:96:05:3e:a9:08:d6:4f:07:3a:cf:7b:
         57:45:c1:69:d3:37:31:32:07:a8:3e:9d:b3:17:02:7c:04:f3:
         57:93:94:ad:c8:fa:84:32:7b:ef:97:33:2c:c8:6f:e3:a0:cc:
         38:2d:a9:f8:4d:38:0f:85:e7:fb:18:24:fc:3a:c4:83:e2:81:
         ca:16:af:8c:34:31:4f:83:8f:de:4a:e7:9e:c9:90:68:9a:26:
         29:e1:0c:4f:57:24:2f:30:31:6f:f3:63:e9:ba:cd:28:f6:6f:
         da:4a:3e:4d:c5:25:38:0d:44:a8:ee:23:21:43:8e:59:c6:a8:
         6d:65:a7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WDsJD55U5UZkqtLg867uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjUxMDE5MTIwMTA0WhcNMjUxMDIwMTIwMTA0WjAzMTEwLwYDVQQD
Eyg1NjQ2YjdiMmU2Y2E1NWI4MTQ4NjIxOTAzYjVmNjJiMDk2MjAyM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S1jP2H2pge8KpZ+n/pM8xwPfxm4
7fbyLNc7pwm0Qu6p7nAduwvB7+OjNfGpVPcx2FsWXfU1y4HFqu4uysXMaiQr+MvG
P7AioXirnn1ki9NVxUx51vDFQkDQX9nF4CEBRfVyn0ZpMJ81RUAAWu3SnQ54YE0s
ogS6y7VY0nV6beiZmuzqhyiJaerduExPd5TPewRZKXWXcsxF2Cok1sYFgb+dLsb6
FMFXK/113TVlf5fUSeDBb+0o+OOWK6IEsmmEf3F2yVFwGMmSep8WbXER92FwiJri
8yw6EqhqhCFEsc9Om5ZzB//qaF0gX0FNhfQNdCW/F9READnmqXChAYwxcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZGt7LmylW4FIYhkDtfYrCWICPEMB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM46EgKh0
fcR2o0Y9AA9KlCZn0aapSswfrLF2VeMWNHHrd+UaDkodf/1kHXBr6WP4O5kf6bBv
wHCP35jnV4XmqR4bQxBdBlNh3RiC3VA/dKrkSxW4fWQQGJO8oIA5tEPevPwZJHSt
Q4OJyAMVV07XwMNUc31dFe6HrBFIxYQ/Xa2/WEq995YFPqkI1k8HOs97V0XBadM3
MTIHqD6dsxcCfATzV5OUrcj6hDJ775czLMhv46DMOC2p+E04D4Xn+xgk/DrEg+KB
yhavjDQxT4OP3krnnsmQaJomKeEMT1ckLzAxb/Nj6brNKPZv2ko+TcUlOA1EqO4j
IUOOWcaobWWnUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:59 2025 by rpki-client