Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File:                     dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier:          7eL3sM7mnUqyBdC2keBHF4aqUwoxx/OVWLUPFOMEyfI=
Subject key identifier:   8B:A6:4F:99:00:3D:3F:EB:8B:8B:E4:AF:88:95:FE:C3:97:15:3E:12
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer:       /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial:       0199FC21E03B878DB5DDF046C65C0011851A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 11:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:42 +0000
Files and hashes:         1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
                          2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
                          3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: Mjv/vWgu3HCPpk1V7M6A4vzmEfA55jOPgUcz1uQZiyk=)
                          4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:e0:3b:87:8d:b5:dd:f0:46:c6:5c:00:11:85:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
        Validity
            Not Before: Oct 19 11:01:42 2025 GMT
            Not After : Oct 20 11:01:42 2025 GMT
        Subject: CN=8ba64f99003d3feb8b8be4af8895fec397153e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:3d:ca:1d:28:3b:bd:bd:9e:43:2b:af:89:
                    14:a6:c9:51:ae:e5:20:d4:f2:bb:1f:72:9a:6b:fa:
                    b3:8a:0d:e4:25:25:41:05:29:33:c2:d2:61:07:90:
                    c5:b8:81:00:b0:8d:6c:4c:e7:44:fe:fc:2e:bd:b7:
                    7b:d8:de:21:29:cc:bc:92:25:47:24:47:a1:fc:fb:
                    83:d1:06:78:bc:74:21:a5:0a:46:ba:13:6e:2a:5d:
                    40:8b:af:50:93:57:f4:40:44:e7:d7:ff:97:88:0c:
                    5d:cc:ec:ac:10:15:84:e9:60:4f:44:b3:9d:d8:74:
                    35:97:16:0a:1e:6d:14:c5:b5:92:a6:eb:17:5a:49:
                    a0:2c:2b:a2:83:bc:00:97:b5:8c:22:5c:ac:30:d1:
                    f8:ab:6c:84:4f:d4:21:19:29:b4:86:8b:aa:74:56:
                    18:85:71:d9:e2:e5:76:0f:0b:88:df:fa:b2:22:cf:
                    4b:89:5b:f4:c6:00:5c:cb:7d:d4:0b:17:96:85:e1:
                    07:90:a4:39:30:5a:59:7d:fc:5a:53:40:3d:14:55:
                    3c:70:28:44:fc:2a:79:0b:bd:83:c6:42:3e:16:58:
                    73:42:01:da:cd:74:41:0d:61:0b:11:e0:e6:3a:05:
                    21:31:62:ac:48:52:c9:3d:61:c0:96:8f:ab:6b:af:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A6:4F:99:00:3D:3F:EB:8B:8B:E4:AF:88:95:FE:C3:97:15:3E:12
            X509v3 Authority Key Identifier:
                keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:22:ee:a8:20:b0:17:e2:5b:97:71:78:ca:ea:b9:fa:d8:aa:
         bd:e2:8a:80:c8:45:80:dc:4e:8b:c6:29:e8:3a:3c:84:c1:41:
         80:5a:40:be:35:6c:dc:97:75:38:0a:dd:0f:80:e4:61:7a:1e:
         68:a5:9a:c9:70:09:e1:16:49:60:ee:fe:ab:82:63:31:9b:b2:
         68:96:fb:91:49:6f:ae:cc:4b:9a:c1:ac:96:37:14:c9:96:3a:
         22:f5:60:92:04:f6:a9:39:50:9f:d7:5c:c9:fd:1e:ea:d7:4d:
         9e:bd:67:ee:4c:4a:4a:15:13:dd:3f:3c:3a:16:17:ad:04:1e:
         2f:2f:f8:32:fe:bd:6b:35:16:a2:ff:0b:c4:6d:c9:66:eb:94:
         7f:7d:1b:50:eb:0c:cb:f3:1f:76:31:9d:b4:56:c4:d6:d4:17:
         87:69:61:b1:79:3b:21:08:7a:ce:e3:56:24:5a:cb:2d:bb:5e:
         72:2a:2d:26:8f:f4:10:10:83:c6:b8:18:81:85:c3:10:e1:63:
         33:28:89:6c:c5:2d:be:b0:7c:00:2c:71:78:a2:2a:e1:46:5d:
         fd:38:a4:11:51:e9:4d:d2:35:4f:ba:39:76:51:51:2e:07:6e:
         85:d4:a8:fb:09:50:84:97:0b:60:d7:7d:6f:ae:eb:46:ca:97:
         ab:4b:50:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IeA7h4213fBGxlwAEYUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj
OTYwZWMwHhcNMjUxMDE5MTEwMTQyWhcNMjUxMDIwMTEwMTQyWjAzMTEwLwYDVQQD
Eyg4YmE2NGY5OTAwM2QzZmViOGI4YmU0YWY4ODk1ZmVjMzk3MTUzZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoc9yh0oO729nkMrr4kUpslRruUg
1PK7H3Kaa/qzig3kJSVBBSkzwtJhB5DFuIEAsI1sTOdE/vwuvbd72N4hKcy8kiVH
JEeh/PuD0QZ4vHQhpQpGuhNuKl1Ai69Qk1f0QETn1/+XiAxdzOysEBWE6WBPRLOd
2HQ1lxYKHm0UxbWSpusXWkmgLCuig7wAl7WMIlysMNH4q2yET9QhGSm0houqdFYY
hXHZ4uV2DwuI3/qyIs9LiVv0xgBcy33UCxeWheEHkKQ5MFpZffxaU0A9FFU8cChE
/Cp5C72DxkI+FlhzQgHazXRBDWELEeDmOgUhMWKsSFLJPWHAlo+ra6+YuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIumT5kAPT/ri4vkr4iV/sOXFT4SMB8GA1UdIwQY
MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt
Y2YxNzQwODIzNDAwLzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw
LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCLuqCCw
F+Jbl3F4yuq5+tiqveKKgMhFgNxOi8Yp6Do8hMFBgFpAvjVs3Jd1OArdD4DkYXoe
aKWayXAJ4RZJYO7+q4JjMZuyaJb7kUlvrsxLmsGsljcUyZY6IvVgkgT2qTlQn9dc
yf0e6tdNnr1n7kxKShUT3T88OhYXrQQeLy/4Mv69azUWov8LxG3JZuuUf30bUOsM
y/MfdjGdtFbE1tQXh2lhsXk7IQh6zuNWJFrLLbteciotJo/0EBCDxrgYgYXDEOFj
MyiJbMUtvrB8ACxxeKIq4UZd/TikEVHpTdI1T7o5dlFRLgduhdSo+wlQhJcLYNd9
b67rRsqXq0tQAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client