Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File:                     h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier:          nvAAvEIHUSt1eOwcSfLvExDu2owwOHOGh6zKgicfUZc=
Subject key identifier:   CC:A1:C2:AB:69:45:5F:3B:38:99:EC:6E:90:74:AA:4F:84:3D:D4:E0
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer:       /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial:       0199FC5840EB8A47E7518DB697EB7A1504B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number:          05F9
Signing time:             Sun 19 Oct 2025 12:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:06 +0000
Files and hashes:         1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
                          2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
                          3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: Q1+asZ/UftOGjiYfjlkglKs4FjjYLpxunvf/3B5FIi8=)
                          4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:40:eb:8a:47:e7:51:8d:b6:97:eb:7a:15:04:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
        Validity
            Not Before: Oct 19 12:01:06 2025 GMT
            Not After : Oct 20 12:01:06 2025 GMT
        Subject: CN=cca1c2ab69455f3b3899ec6e9074aa4f843dd4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:3b:e1:02:2a:99:a8:54:52:52:34:35:61:
                    7b:a5:29:ff:ef:2f:f4:33:e1:50:9b:a0:1b:7d:61:
                    65:bb:23:1b:80:e8:37:a0:58:33:c8:27:7a:a9:d0:
                    88:73:da:95:dc:8b:6b:cd:ad:9a:20:ba:bf:50:e6:
                    3e:94:7c:4c:9a:42:22:5d:ea:08:78:11:a0:55:8b:
                    d0:cd:f8:5b:99:7d:b7:f6:18:d6:5d:66:2d:39:e9:
                    0a:e3:89:de:14:70:f1:7a:3f:15:38:0d:07:eb:3b:
                    9c:ae:c8:00:7d:f8:a3:0d:74:5d:64:a7:30:7e:83:
                    3f:18:36:f6:7a:5d:3a:2c:a0:af:6c:94:fb:00:84:
                    78:9f:eb:ef:1f:bd:2f:77:e1:49:79:31:a2:df:da:
                    5c:d1:fc:15:df:9d:ea:4a:b8:6c:a3:3d:02:c7:01:
                    8e:53:82:04:62:91:1d:8c:a7:37:7e:02:38:a0:52:
                    45:df:72:8b:03:9e:1d:ad:c8:4c:db:2a:e8:27:69:
                    2e:e3:18:ad:0d:27:13:e3:e0:3a:38:68:20:f2:e7:
                    46:e1:7d:ad:c0:b1:a0:dd:47:3d:e3:be:84:ba:64:
                    38:89:6c:de:3e:c2:62:5c:aa:19:df:f7:40:9a:00:
                    68:d8:a1:1f:ac:22:03:ea:7f:60:60:04:e3:78:db:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:C2:AB:69:45:5F:3B:38:99:EC:6E:90:74:AA:4F:84:3D:D4:E0
            X509v3 Authority Key Identifier:
                keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:a7:91:26:8d:42:98:a5:3e:20:8a:46:8e:8c:60:06:72:
         4f:b5:6a:51:ba:dc:67:b7:97:fc:c9:77:58:16:4a:d3:94:64:
         3f:14:1f:7f:a2:e0:cf:c4:90:51:d0:ac:12:65:d6:f6:6f:33:
         c2:9b:ed:e7:65:95:03:99:b9:b6:41:08:0e:08:ac:b5:af:94:
         98:f2:c4:9b:e1:04:93:92:f5:77:73:82:09:bd:6d:a0:38:3f:
         92:7f:eb:e6:99:a0:e4:1c:61:49:72:04:21:dc:88:90:70:5a:
         8f:bd:34:e1:11:ca:21:f2:e7:13:7c:60:2a:34:4d:51:0d:57:
         0b:3b:0b:93:a8:eb:7e:13:26:3b:59:04:6a:24:d4:33:a4:42:
         fe:a0:08:ec:a0:c0:7d:4b:16:75:05:ae:c5:bb:5e:cc:c7:2e:
         e6:35:93:b7:9f:7b:4d:b4:05:df:bd:85:d8:f1:72:6f:61:8e:
         eb:9e:e8:3a:8b:fa:53:58:36:63:0b:de:18:17:b4:b1:6b:66:
         ac:bd:0d:4c:20:de:32:99:43:c7:89:29:5a:f2:90:c4:55:d1:
         5c:09:92:e5:5b:ed:83:73:a3:ba:bd:0f:c3:4e:77:5c:f5:78:
         6f:ad:0b:e2:72:c1:1c:d0:6d:1a:54:7e:a2:62:64:fb:15:45:
         dd:a6:bf:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEDrikfnUY22l+t6FQSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1
MDRjYjcwHhcNMjUxMDE5MTIwMTA2WhcNMjUxMDIwMTIwMTA2WjAzMTEwLwYDVQQD
EyhjY2ExYzJhYjY5NDU1ZjNiMzg5OWVjNmU5MDc0YWE0Zjg0M2RkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWo74QIqmahUUlI0NWF7pSn/7y/0
M+FQm6AbfWFluyMbgOg3oFgzyCd6qdCIc9qV3Itrza2aILq/UOY+lHxMmkIiXeoI
eBGgVYvQzfhbmX239hjWXWYtOekK44neFHDxej8VOA0H6zucrsgAffijDXRdZKcw
foM/GDb2el06LKCvbJT7AIR4n+vvH70vd+FJeTGi39pc0fwV353qSrhsoz0CxwGO
U4IEYpEdjKc3fgI4oFJF33KLA54drchM2yroJ2ku4xitDScT4+A6OGgg8udG4X2t
wLGg3Uc9476EumQ4iWzePsJiXKoZ3/dAmgBo2KEfrCID6n9gYATjeNsnXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyhwqtpRV87OJnsbpB0qk+EPdTgMB8GA1UdIwQY
MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt
ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm
LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIH+nkSaN
QpilPiCKRo6MYAZyT7VqUbrcZ7eX/Ml3WBZK05RkPxQff6Lgz8SQUdCsEmXW9m8z
wpvt52WVA5m5tkEIDgista+UmPLEm+EEk5L1d3OCCb1toDg/kn/r5pmg5BxhSXIE
IdyIkHBaj7004RHKIfLnE3xgKjRNUQ1XCzsLk6jrfhMmO1kEaiTUM6RC/qAI7KDA
fUsWdQWuxbtezMcu5jWTt597TbQF372F2PFyb2GO657oOov6U1g2YwveGBe0sWtm
rL0NTCDeMplDx4kpWvKQxFXRXAmS5Vvtg3Ojur0Pw053XPV4b60L4nLBHNBtGlR+
omJk+xVF3aa/eg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:39 2025 by rpki-client