Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File:                     fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier:          CuqogS0aUefDfMy8O0Fsa/5Duq3xlOJ2laSrAJtAlEE=
Subject key identifier:   34:4E:69:50:C0:D2:F5:DA:84:9D:95:49:7A:B1:30:7E:1C:A7:98:8F
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       0199FC219B4C6114A695946700470BB8346C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: Acu7rxJV7dpg1UdyfggDo20nOlqR3IQCGd0Cu5TREpc=)
                          2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:9b:4c:61:14:a6:95:94:67:00:47:0b:b8:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=344e6950c0d2f5da849d95497ab1307e1ca7988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:20:25:8a:f3:c9:ee:f2:29:37:56:42:c2:
                    2c:1e:e8:74:09:20:99:38:37:59:79:9f:e2:c3:e1:
                    3c:07:f1:c5:f2:0d:8c:f0:b8:63:22:55:f8:ed:16:
                    ff:94:58:8d:c1:66:7a:85:67:e1:0a:75:ef:f0:78:
                    3b:d3:a4:11:db:8b:0f:42:10:c9:69:41:c1:e1:54:
                    39:bd:7c:f8:95:ca:71:7d:e4:f5:62:e5:12:41:cf:
                    f2:7f:63:c6:e5:59:b7:d4:d6:00:0d:fb:20:35:6b:
                    39:34:1a:ee:09:49:91:d9:97:86:09:2e:86:f6:a3:
                    3a:88:1a:ae:35:8c:c5:c6:4a:ca:28:82:27:19:7b:
                    58:f0:53:5c:1d:38:e7:90:31:f7:d9:1e:9b:4f:04:
                    08:9f:2f:81:c4:9a:45:56:7f:15:21:7d:92:bb:21:
                    50:ec:84:5c:26:66:3b:99:a8:d4:1c:e6:a4:e7:ce:
                    43:28:ac:12:7b:01:4d:59:47:7e:27:8f:14:8e:65:
                    5a:b1:ac:28:0e:d3:91:86:86:a3:d7:54:1c:2b:57:
                    82:a2:c0:42:1c:0b:3e:5d:c1:ca:b8:4e:77:3a:19:
                    41:ec:a2:55:72:bc:a2:d9:0b:e1:b2:5b:22:f7:96:
                    b8:b1:de:fd:51:bf:45:6f:04:70:8d:a9:c3:5a:44:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:69:50:C0:D2:F5:DA:84:9D:95:49:7A:B1:30:7E:1C:A7:98:8F
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:33:5a:ed:52:ea:de:29:79:30:c6:ff:f7:55:9f:ab:58:
         36:ae:d7:cd:dc:59:92:4f:bf:bc:7f:a6:30:f2:00:f8:98:14:
         ca:0d:0c:2c:06:ab:05:4f:a7:26:df:21:b9:f7:31:ea:b4:03:
         90:d7:f2:b4:c4:eb:71:15:e2:fd:61:72:69:99:c6:d4:cd:eb:
         4c:43:48:6e:58:4b:5e:07:ac:c7:63:be:e7:ec:b3:1f:54:fc:
         8a:38:4a:26:d9:a2:8b:9c:78:95:d1:87:38:ca:5d:b8:11:3c:
         00:fa:59:56:a0:c1:4c:56:78:14:d3:72:a2:7e:f3:a4:07:4e:
         e3:18:16:f5:87:16:ea:24:50:75:c6:d5:5f:2e:87:38:cf:e1:
         b0:db:b4:f9:f2:ce:68:e3:09:b0:d9:f6:ae:3d:b0:a8:ff:02:
         3a:a6:31:6f:1e:21:dd:53:22:42:56:c9:ce:a1:39:bf:cd:e2:
         87:3b:8b:2f:66:b9:90:c9:88:7c:d3:a9:0c:aa:9a:37:56:bb:
         03:9c:76:b6:4e:98:fb:2e:31:b9:c2:87:4f:9a:fd:78:97:50:
         32:db:48:84:e7:c5:a5:04:19:6e:c2:3b:03:82:b0:ad:bc:3e:
         f0:e2:80:e9:a5:21:05:5f:15:c9:b4:72:63:86:47:61:f5:5c:
         44:23:68:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZtMYRSmlZRnAEcLuDRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmFlODBjZGU1Y2Q3NjljOGYxNDRlNmMyNjYxMTNiZmFl
ZGVjM2UwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD
EygzNDRlNjk1MGMwZDJmNWRhODQ5ZDk1NDk3YWIxMzA3ZTFjYTc5ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+QgJYrzye7yKTdWQsIsHuh0CSCZ
ODdZeZ/iw+E8B/HF8g2M8LhjIlX47Rb/lFiNwWZ6hWfhCnXv8Hg706QR24sPQhDJ
aUHB4VQ5vXz4lcpxfeT1YuUSQc/yf2PG5Vm31NYADfsgNWs5NBruCUmR2ZeGCS6G
9qM6iBquNYzFxkrKKIInGXtY8FNcHTjnkDH32R6bTwQIny+BxJpFVn8VIX2SuyFQ
7IRcJmY7majUHOak585DKKwSewFNWUd+J48UjmVasawoDtORhoaj11QcK1eCosBC
HAs+XcHKuE53OhlB7KJVcryi2Qvhslsi95a4sd79Ub9FbwRwjanDWkTQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDROaVDA0vXahJ2VSXqxMH4cp5iPMB8GA1UdIwQY
MBaAFH0q6AzeXNdpyPFE5sJmETv67ew+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hMmVhNTEtODdhNi00ODE0LTliODIt
Mjc4Y2JiMGI0ZTczLzEvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hMmVhNTEtODdhNi00ODE0LTliODItMjc4Y2JiMGI0ZTcz
LzEvZlNyb0RONWMxMm5JOFVUbXdtWVJPX3J0N0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1QzWu1S
6t4peTDG//dVn6tYNq7XzdxZkk+/vH+mMPIA+JgUyg0MLAarBU+nJt8hufcx6rQD
kNfytMTrcRXi/WFyaZnG1M3rTENIblhLXgesx2O+5+yzH1T8ijhKJtmii5x4ldGH
OMpduBE8APpZVqDBTFZ4FNNyon7zpAdO4xgW9YcW6iRQdcbVXy6HOM/hsNu0+fLO
aOMJsNn2rj2wqP8COqYxbx4h3VMiQlbJzqE5v83ihzuLL2a5kMmIfNOpDKqaN1a7
A5x2tk6Y+y4xucKHT5r9eJdQMttIhOfFpQQZbsI7A4Kwrbw+8OKA6aUhBV8VybRy
Y4ZHYfVcRCNo+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client