Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File:                     IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier:          rnKqyGolfrafF6iNRVDj05yFySgvK1pI5/m22v3vfxA=
Subject key identifier:   49:B4:ED:E5:E8:FB:59:D8:21:45:60:4A:5D:9A:5D:27:16:4B:C5:F0
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer:       /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial:       0199FF225D48D0981209A9BE740405866F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 01:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:06 +0000
Files and hashes:         1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: /8yLx+wkVhDSVr+SZ1d9ul6DJjBGOlQjUhGQAz7euQQ=)
                          2: cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa (hash: c0tlMuDM/vPMybXrB0sIatVwyL/aO7RZmUvD1wZIObw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:5d:48:d0:98:12:09:a9:be:74:04:05:86:6f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
        Validity
            Not Before: Oct 20 01:01:06 2025 GMT
            Not After : Oct 21 01:01:06 2025 GMT
        Subject: CN=49b4ede5e8fb59d82145604a5d9a5d27164bc5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:26:14:7d:f2:b0:b3:88:7c:48:7c:8d:43:
                    7e:80:54:2d:b0:25:7d:0f:15:a4:56:f8:43:ec:50:
                    64:f7:73:23:7c:84:b7:ee:3d:ad:b1:e9:d3:77:f4:
                    8d:69:12:62:81:dc:96:cb:92:07:50:89:44:23:c0:
                    11:1c:af:c1:a8:65:9e:50:ea:97:63:bf:48:96:5d:
                    be:22:5a:99:82:a5:3e:69:c9:47:e9:5b:aa:e7:6a:
                    9d:00:29:d2:f8:85:ca:09:9f:ff:70:07:44:c5:5b:
                    c6:dc:de:f4:cc:79:71:65:17:67:d9:61:7b:72:8f:
                    8e:02:fa:e2:66:a2:42:56:f7:a6:ad:d4:18:09:44:
                    d4:ff:55:a9:b4:8b:09:d3:94:4a:14:ec:fa:dd:0d:
                    87:c0:f5:e2:78:3b:50:74:8b:bb:a0:fa:7e:4b:ad:
                    66:06:65:a6:d1:15:b6:67:95:88:27:4b:1d:8e:74:
                    d9:25:65:81:cf:02:86:98:fe:2b:94:fa:11:44:a7:
                    37:e5:43:d5:40:2c:be:7f:8d:f8:61:f4:e8:e3:c8:
                    5b:d1:fd:ec:4a:6f:39:ea:3e:43:4f:72:cd:41:8f:
                    20:65:bf:43:82:f4:e6:7e:d5:24:86:8c:60:63:23:
                    a9:34:b1:98:c9:22:ad:fd:f3:d3:98:e2:0d:45:05:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:ED:E5:E8:FB:59:D8:21:45:60:4A:5D:9A:5D:27:16:4B:C5:F0
            X509v3 Authority Key Identifier:
                keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:80:41:71:d7:0b:8c:59:35:45:b5:f8:5e:61:74:b8:2b:0c:
         6f:fa:d5:41:d7:65:f5:a9:b0:81:f8:69:35:65:97:ed:1b:44:
         f1:80:4f:e2:7e:a9:6b:c2:44:34:eb:e7:aa:32:22:84:ce:da:
         da:67:b3:19:c5:57:5e:51:10:b1:7d:05:73:d6:f8:4e:31:c1:
         cc:ff:bb:16:6c:f3:69:d8:ab:0f:ef:ee:fe:cb:89:0b:61:ef:
         c2:95:b6:52:9e:22:e9:ed:9f:66:35:bb:8a:02:73:9f:50:4a:
         08:3e:88:ad:d8:4b:72:cc:40:fb:5a:84:ac:19:18:59:2d:fe:
         24:7b:5d:42:4c:e3:0b:da:e3:5f:d6:af:4f:41:6b:8b:bd:c7:
         96:c4:f9:6d:b1:1b:83:84:79:27:13:6f:9c:78:0a:5c:f6:46:
         6d:a9:15:79:7b:ef:b2:fa:1b:87:ba:25:b6:4b:17:9c:e5:a8:
         11:c5:04:c8:62:4c:b5:87:1b:4f:66:32:89:38:37:31:80:87:
         86:d9:34:88:8d:a9:6c:1d:49:3f:2b:a2:8b:41:30:2f:39:ed:
         c9:3c:7d:4e:42:fc:d8:8c:29:9a:37:22:08:16:1b:75:e6:6a:
         6b:8e:2f:ae:f0:36:ad:06:4d:61:f9:41:d0:f5:ef:55:57:61:
         e0:23:db:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Il1I0JgSCam+dAQFhm9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTI4ZTU1MDMxNDEzOGY5ZDgzYTI4YjJkNjY2ZTliODc0
NGI1MTAwHhcNMjUxMDIwMDEwMTA2WhcNMjUxMDIxMDEwMTA2WjAzMTEwLwYDVQQD
Eyg0OWI0ZWRlNWU4ZmI1OWQ4MjE0NTYwNGE1ZDlhNWQyNzE2NGJjNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGAmFH3ysLOIfEh8jUN+gFQtsCV9
DxWkVvhD7FBk93MjfIS37j2tsenTd/SNaRJigdyWy5IHUIlEI8ARHK/BqGWeUOqX
Y79Ill2+IlqZgqU+aclH6Vuq52qdACnS+IXKCZ//cAdExVvG3N70zHlxZRdn2WF7
co+OAvriZqJCVvemrdQYCUTU/1WptIsJ05RKFOz63Q2HwPXieDtQdIu7oPp+S61m
BmWm0RW2Z5WIJ0sdjnTZJWWBzwKGmP4rlPoRRKc35UPVQCy+f434YfTo48hb0f3s
Sm856j5DT3LNQY8gZb9DgvTmftUkhoxgYyOpNLGYySKt/fPTmOINRQUUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm07eXo+1nYIUVgSl2aXScWS8XwMB8GA1UdIwQY
MBaAFCLijlUDFBOPnYOiiy1mbpuHRLUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYt
NGQyMDljMzI4OGFiLzEvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYtNGQyMDljMzI4OGFi
LzEvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIBBcdcL
jFk1RbX4XmF0uCsMb/rVQddl9amwgfhpNWWX7RtE8YBP4n6pa8JENOvnqjIihM7a
2mezGcVXXlEQsX0Fc9b4TjHBzP+7FmzzadirD+/u/suJC2HvwpW2Up4i6e2fZjW7
igJzn1BKCD6IrdhLcsxA+1qErBkYWS3+JHtdQkzjC9rjX9avT0Fri73HlsT5bbEb
g4R5JxNvnHgKXPZGbakVeXvvsvobh7oltksXnOWoEcUEyGJMtYcbT2YyiTg3MYCH
htk0iI2pbB1JPyuii0EwLzntyTx9TkL82IwpmjciCBYbdeZqa44vrvA2rQZNYflB
0PXvVVdh4CPbDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:55 2025 by rpki-client