Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File:                     sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier:          AST9YnKL0yspG61q8NJW9LU9QaChILJK2H5QBIe5KK8=
Subject key identifier:   23:4C:A0:CF:6E:37:84:E1:60:A7:A6:1E:EA:6A:C0:CC:E2:F4:04:4B
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer:       /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial:       0199FC590B89F36DC42538600A7EF89F9607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:58 +0000
Files and hashes:         1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=)
                          2: Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa (hash: TLo7HXxLeEPCaG6doyM8ItbshKpgy+E58r0ur/ZFDhw=)
                          3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: lNSR5B7jOKeEV2ff5npFM1juCLIPL+hRpgjeJaRFRdc=)
                          4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0b:89:f3:6d:c4:25:38:60:0a:7e:f8:9f:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
        Validity
            Not Before: Oct 19 12:01:58 2025 GMT
            Not After : Oct 20 12:01:58 2025 GMT
        Subject: CN=234ca0cf6e3784e160a7a61eea6ac0cce2f4044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:0a:04:cc:8b:c6:52:f8:c7:68:bf:1c:f2:
                    42:ce:4b:bb:1e:60:d6:cd:7e:87:d4:67:9f:e4:29:
                    0c:bc:6b:89:33:c5:9f:08:a1:27:fb:fd:d6:61:ff:
                    a3:da:57:53:36:7d:bd:ec:ea:31:34:d1:ad:ed:60:
                    bf:d8:0c:75:0b:29:d8:34:10:6a:af:b1:84:d4:5a:
                    1b:9a:a8:61:52:25:de:dc:5a:16:70:bc:fa:7d:e2:
                    36:ff:48:87:68:83:2e:59:5d:f7:49:8e:2e:60:c0:
                    00:e8:b0:a8:3c:3f:4a:41:73:1d:9d:ea:4c:3e:97:
                    ae:70:b6:28:11:61:f1:5c:48:c3:bb:62:7b:ed:2d:
                    0f:6a:99:6a:72:68:34:1a:17:33:9d:5c:98:b0:1d:
                    79:a2:d1:73:7f:6e:75:74:3a:9f:25:13:78:ff:e0:
                    ba:2d:cc:81:b3:bf:05:fa:05:0f:63:5f:aa:b8:df:
                    19:53:b3:49:7c:0a:83:8d:d5:0b:ec:e2:ea:07:0c:
                    62:64:0f:d5:c5:e9:be:b6:f8:65:12:e3:74:2f:54:
                    b4:97:13:02:c6:f9:57:89:6a:92:da:6f:67:34:5a:
                    0c:5e:b4:54:c0:93:40:de:5b:d8:ed:ff:2b:fc:e5:
                    a6:e5:c1:5e:8c:42:1f:4a:70:e9:52:7d:b3:95:12:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4C:A0:CF:6E:37:84:E1:60:A7:A6:1E:EA:6A:C0:CC:E2:F4:04:4B
            X509v3 Authority Key Identifier:
                keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:64:bf:8f:e5:eb:21:c7:d2:3c:f6:3f:92:1f:6e:8b:d0:5c:
         5f:e1:24:9e:57:3b:fb:37:ca:bd:98:4a:98:b6:44:d5:51:91:
         6e:c8:1c:02:43:c3:52:bd:04:bf:3b:6a:e4:30:54:f4:0f:d0:
         81:f9:a1:dc:b6:a4:a1:55:e7:a9:6d:ae:5f:56:51:d8:87:db:
         10:67:14:c5:a4:f5:d7:22:b5:8e:60:9e:af:f8:58:f6:e5:07:
         6e:15:38:53:e7:13:b0:1d:8e:35:05:38:28:2d:4b:76:07:01:
         a6:7d:19:9f:fc:85:f0:a0:b9:c6:60:94:77:a6:61:e4:69:55:
         54:63:19:1c:46:47:86:95:62:71:b7:3b:f7:38:44:1a:71:a7:
         4a:9c:84:c2:a0:2d:15:82:3f:61:a6:fa:62:81:42:7a:01:47:
         10:b9:f4:ee:a9:56:2e:85:ae:c5:eb:7d:24:3d:14:e8:96:4b:
         a7:95:a8:fe:7f:6f:59:64:97:8d:5e:83:13:dc:e1:09:98:28:
         d0:49:16:dc:01:58:38:51:aa:93:70:e3:45:8a:75:40:a1:07:
         f6:b8:96:b8:f7:5d:1a:f8:ac:db:3f:3f:7f:3a:be:bd:9a:10:
         b8:34:a4:77:51:c6:8b:85:8a:5d:28:0a:a7:42:7d:56:cb:3b:
         e8:0d:9a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQuJ823EJThgCn74n5YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzUzNzc5MDFhNzg3MWQzYmZmN2E3MDI3N2EyZjRlMmZj
MGUyNzcwHhcNMjUxMDE5MTIwMTU4WhcNMjUxMDIwMTIwMTU4WjAzMTEwLwYDVQQD
EygyMzRjYTBjZjZlMzc4NGUxNjBhN2E2MWVlYTZhYzBjY2UyZjQwNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XUKBMyLxlL4x2i/HPJCzku7HmDW
zX6H1Gef5CkMvGuJM8WfCKEn+/3WYf+j2ldTNn297OoxNNGt7WC/2Ax1CynYNBBq
r7GE1FobmqhhUiXe3FoWcLz6feI2/0iHaIMuWV33SY4uYMAA6LCoPD9KQXMdnepM
PpeucLYoEWHxXEjDu2J77S0Paplqcmg0GhcznVyYsB15otFzf251dDqfJRN4/+C6
LcyBs78F+gUPY1+quN8ZU7NJfAqDjdUL7OLqBwxiZA/Vxem+tvhlEuN0L1S0lxMC
xvlXiWqS2m9nNFoMXrRUwJNA3lvY7f8r/OWm5cFejEIfSnDpUn2zlRKrzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNMoM9uN4ThYKemHupqwMzi9ARLMB8GA1UdIwQY
MBaAFLE1N3kBp4cdO/96cCd6L04vwOJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUt
OTEyMDQ3MTUzZTAxLzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUtOTEyMDQ3MTUzZTAx
LzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWS/j+Xr
IcfSPPY/kh9ui9BcX+Eknlc7+zfKvZhKmLZE1VGRbsgcAkPDUr0Evztq5DBU9A/Q
gfmh3LakoVXnqW2uX1ZR2IfbEGcUxaT11yK1jmCer/hY9uUHbhU4U+cTsB2ONQU4
KC1LdgcBpn0Zn/yF8KC5xmCUd6Zh5GlVVGMZHEZHhpVicbc79zhEGnGnSpyEwqAt
FYI/Yab6YoFCegFHELn07qlWLoWuxet9JD0U6JZLp5Wo/n9vWWSXjV6DE9zhCZgo
0EkW3AFYOFGqk3DjRYp1QKEH9riWuPddGvis2z8/fzq+vZoQuDSkd1HGi4WKXSgK
p0J9Vss76A2aBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:04 2025 by rpki-client