Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File:                     04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier:          rdbfWXD12TwdJ/Ny/1goHgdW0wpXWk98xHp5EJ+fm+8=
Subject key identifier:   29:42:D9:E8:15:CB:A7:3F:B2:E8:73:A0:76:40:60:9F:C8:DE:F9:A2
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer:       /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial:       0199FAD7CB10D85EF3D6430D3F508A384865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number:          13F3
Signing time:             Sun 19 Oct 2025 05:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:10 +0000
Files and hashes:         1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: ISK7zNrzR3LyJjkAAJwUpdPFBXpnoOMxYq52FVRr358=)
                          2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:cb:10:d8:5e:f3:d6:43:0d:3f:50:8a:38:48:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
        Validity
            Not Before: Oct 19 05:01:10 2025 GMT
            Not After : Oct 20 05:01:10 2025 GMT
        Subject: CN=2942d9e815cba73fb2e873a07640609fc8def9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:61:d9:90:6d:62:e5:a6:41:d6:e3:50:3e:
                    4b:66:0a:18:6f:f0:49:6c:4e:ed:2c:2d:0b:82:a5:
                    bb:80:44:80:84:c6:48:c6:d1:3d:22:dd:f2:22:14:
                    07:ce:0c:f4:99:43:62:72:d8:df:45:87:d1:ef:6f:
                    bf:6f:a8:ea:2d:f7:b0:9a:ba:36:81:76:94:5c:a7:
                    20:e7:5e:ac:a9:f3:71:67:b0:5b:66:09:16:a5:7b:
                    f6:a7:6a:a1:89:32:58:06:c8:17:ad:3e:46:d2:7a:
                    dc:c0:16:2a:99:d9:8b:70:fd:7d:b0:7a:a8:b9:25:
                    2a:63:f4:07:5b:47:19:d0:aa:3c:1a:fb:11:54:ef:
                    d5:11:ae:70:3e:3e:a3:0d:ce:dd:53:d4:ec:ae:85:
                    e8:41:07:b4:e8:f8:e1:d1:b5:bf:1c:8b:82:80:72:
                    a8:10:20:16:d9:ed:eb:a9:16:bd:72:ad:eb:f1:9b:
                    e3:90:85:4e:e2:6e:af:80:53:d1:3d:a3:ad:21:aa:
                    2e:6f:60:a3:48:05:21:a2:fa:45:0c:85:0e:80:8c:
                    bb:a9:0c:f9:1a:17:18:41:03:b9:49:24:3b:97:40:
                    10:9f:2d:42:0b:84:6a:4c:b7:ab:3a:fc:91:cd:f6:
                    b7:20:31:30:f4:d1:5f:a2:6c:1b:97:d2:0a:d1:96:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:D9:E8:15:CB:A7:3F:B2:E8:73:A0:76:40:60:9F:C8:DE:F9:A2
            X509v3 Authority Key Identifier:
                keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:5b:9b:95:5a:e9:ec:d2:50:f0:87:cf:5b:bd:52:cc:b9:
         be:71:3e:a4:38:6e:e7:0b:20:99:14:ed:57:e1:10:bf:b6:68:
         17:c2:46:7d:63:74:dd:95:ac:a5:ce:c8:78:a2:b5:72:52:fe:
         c4:ca:a3:d6:9c:34:c7:44:45:9c:80:33:37:9c:a7:2f:02:8c:
         88:09:41:fd:51:cc:da:8f:1b:97:5b:6c:c9:19:c6:39:62:63:
         a6:bc:88:d0:e6:09:c9:d4:a9:48:76:0c:12:03:b0:2b:b5:00:
         8f:2d:4c:95:df:f4:2e:71:2b:63:bf:da:bc:d4:10:07:65:ce:
         08:9c:d1:de:fc:f3:0d:1a:b9:be:16:fe:0b:86:0c:53:70:28:
         27:bc:b5:51:f4:b7:c6:69:6f:59:c9:f7:1f:79:63:55:a2:a1:
         7b:35:c4:43:82:5e:88:39:84:8f:e7:bc:52:f7:f5:45:f2:42:
         45:76:47:d8:ad:a9:17:99:33:7e:6f:7c:c7:94:b4:4e:bb:5e:
         47:66:7e:39:e8:14:1f:34:ef:a1:a7:ef:72:64:e8:80:32:fa:
         d9:6d:58:fe:96:1b:e2:6c:21:6a:ba:7e:62:9e:fd:20:73:b8:
         43:72:50:bb:53:e8:ef:fb:3f:1f:7e:b8:38:65:4e:fa:40:2d:
         c7:66:3b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618sQ2F7z1kMNP1CKOEhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3
ZWM4MGUwHhcNMjUxMDE5MDUwMTEwWhcNMjUxMDIwMDUwMTEwWjAzMTEwLwYDVQQD
EygyOTQyZDllODE1Y2JhNzNmYjJlODczYTA3NjQwNjA5ZmM4ZGVmOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIRh2ZBtYuWmQdbjUD5LZgoYb/BJ
bE7tLC0LgqW7gESAhMZIxtE9It3yIhQHzgz0mUNictjfRYfR72+/b6jqLfewmro2
gXaUXKcg516sqfNxZ7BbZgkWpXv2p2qhiTJYBsgXrT5G0nrcwBYqmdmLcP19sHqo
uSUqY/QHW0cZ0Ko8GvsRVO/VEa5wPj6jDc7dU9TsroXoQQe06Pjh0bW/HIuCgHKo
ECAW2e3rqRa9cq3r8ZvjkIVO4m6vgFPRPaOtIaoub2CjSAUhovpFDIUOgIy7qQz5
GhcYQQO5SSQ7l0AQny1CC4RqTLerOvyRzfa3IDEw9NFfomwbl9IK0Zb2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClC2egVy6c/suhzoHZAYJ/I3vmiMB8GA1UdIwQY
MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt
MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh
LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCdbm5Va
6ezSUPCHz1u9Usy5vnE+pDhu5wsgmRTtV+EQv7ZoF8JGfWN03ZWspc7IeKK1clL+
xMqj1pw0x0RFnIAzN5ynLwKMiAlB/VHM2o8bl1tsyRnGOWJjpryI0OYJydSpSHYM
EgOwK7UAjy1Mld/0LnErY7/avNQQB2XOCJzR3vzzDRq5vhb+C4YMU3AoJ7y1UfS3
xmlvWcn3H3ljVaKhezXEQ4JeiDmEj+e8Uvf1RfJCRXZH2K2pF5kzfm98x5S0Trte
R2Z+OegUHzTvoafvcmTogDL62W1Y/pYb4mwharp+Yp79IHO4Q3JQu1Po7/s/H364
OGVO+kAtx2Y7rg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client