Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          qK222JrAhu9RqUtVHKItwh4ue1IYbGpmarvUS67v2kA=
Subject key identifier:   EF:CA:70:22:DE:A9:EE:EF:50:67:7E:FF:D0:9D:2B:A3:2D:BF:FD:71
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       0199FBEBF2437417F46F92E92A4497C2EF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          17DB
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: 1f-9tUF1QCZIsfJt2ipW4khRx9g.roa (hash: qvsbL3ItSjRr+HrTxGxdX6hRWDpLj1yz143EUSJxB+k=)
                          2: 47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa (hash: mk2gBXTfAFrg1QI3/EfLEXfTmlSexo0wvcwH/k20wTk=)
                          3: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
                          4: 6X_azjUCowht92Zwn9TjsJyCJMY.roa (hash: WTfIxq7Gq9hE4i160D7m7hxcHWcEuqUC8ymhLhoENZU=)
                          5: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
                          6: DfUSjPi2INTZBxoOQDwjln-TPKA.roa (hash: /ysoks/fge7Q4Y/49e0Xa6J+sfHs/2M2DRhW7QPhPZM=)
                          7: FscYqFjraHvELbE2bDX_GeV2HSM.roa (hash: nEqjDMKGSyCyu7mJaJDlkbmcQx/bLcYMyZ0fzhn9wcE=)
                          8: Ik6QwSrfDqHUI7Ij7qbG8q-IHQM.roa (hash: sfqW1SHNQD9LIu80Ra3gYUQ7btog4CT5/tG0jAIfAgU=)
                          9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
                          10: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
                          11: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (hash: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=)
                          12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
                          13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
                          14: PWojxW9iXS1jgfgbFPdUQeVZND0.roa (hash: YToPlOG2G4JuPFJzGtMhxZmKt4Yh4oO1yAxhQTyQoC8=)
                          15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
                          16: Sl1txCYU9DdbNCbQ2vVXAA_9LNU.roa (hash: NNNtBKmCmkesRj5ZlziPlaehQT+qG9xRPKoV7sVJzhk=)
                          17: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
                          18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=)
                          19: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
                          20: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: 6Uh2ATH8qeRZuabeF64sVCZAUmnJ3+CFg6tRyRCf6Gc=)
                          21: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=)
                          22: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
                          23: kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa (hash: irH9QeqTuF37osVFPeokf05FXw+yoOdv4lX5HDy0GLE=)
                          24: n71o-euCGrkY8O3e0CR7o49iC7c.roa (hash: Ni77nUb9wSBLJDB4hHEr5oyLBifZqJmvnhEXMO3zOwA=)
                          25: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=)
                          26: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
                          27: tT6ASrHAosYkp4sWCxMRwoxhYS4.roa (hash: iT5+PFN5V9lv2Ui5UEIdkGr/yriWuv+ENg/CnaGzDgo=)
                          28: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=)
                          29: uZfvttHeYCpTmwGtvthls2GR6Mk.roa (hash: +oUNgtgeFHW/Ao/Yv6Zmwz+f8VUM2x/qnI4Y2b/e5es=)
                          30: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=)
                          31: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
                          32: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
                          33: zLZPib2q4N-wxUBLghJm8S0LpmI.roa (hash: zwKUjOOpiqrym9HQMr4/mJ1TtSF5ArH6j4HJ3LWd0ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f2:43:74:17:f4:6f:92:e9:2a:44:97:c2:ef:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=efca7022dea9eeef50677effd09d2ba32dbffd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:18:49:97:45:dc:0a:1d:d0:43:91:dd:dc:
                    45:fb:3b:24:bf:4e:bc:65:17:35:52:9e:f0:7d:e1:
                    a3:bf:7e:01:8a:f4:41:33:4c:dc:b6:89:cf:b2:bb:
                    df:48:2d:5f:70:44:47:14:7a:44:bb:14:49:03:be:
                    47:70:09:84:44:df:aa:74:1a:06:30:87:1e:a3:a4:
                    1e:70:de:30:19:00:b9:54:19:50:45:ba:71:3b:e5:
                    af:fa:58:31:13:ae:e2:f6:fc:48:47:22:11:0f:17:
                    b3:3e:a8:58:5b:79:8d:db:b4:bc:50:b2:b1:e2:ed:
                    dd:cb:31:41:2d:19:37:9c:94:48:15:4f:22:61:2c:
                    a8:92:55:4b:66:8a:6f:d8:ee:88:54:aa:74:1e:85:
                    36:c5:a3:fd:40:cd:7e:8f:48:26:6c:b3:8c:e7:30:
                    0c:28:94:9a:43:db:e8:94:a0:8d:f7:16:ca:a1:34:
                    30:26:41:f1:8e:d4:12:10:59:3e:2c:a8:22:4a:07:
                    f2:f3:c7:31:dd:b8:6e:98:f1:ec:21:c7:f7:6c:45:
                    4c:73:56:42:53:3b:1b:79:35:3f:d1:a5:f9:1a:d4:
                    c0:93:ef:1f:0d:11:68:55:00:4d:59:a2:d8:d8:f0:
                    21:2e:6e:9c:06:f6:8f:b6:74:91:2d:45:ac:a1:c4:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:70:22:DE:A9:EE:EF:50:67:7E:FF:D0:9D:2B:A3:2D:BF:FD:71
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:9e:86:bf:f0:13:21:dd:ce:37:c9:b3:68:a3:17:91:4b:
         96:6e:4b:d4:63:1f:21:19:06:dd:69:0a:aa:c0:e4:81:8e:74:
         ab:5c:4b:ed:3d:7b:cd:dc:bc:f2:fe:14:2b:a9:41:85:59:fc:
         09:32:ae:65:c7:32:16:32:da:b4:47:a4:49:a4:d3:a7:8d:9a:
         19:0a:ba:93:cd:85:db:71:95:59:d5:7f:51:c7:48:b7:a7:90:
         47:7c:e2:f9:51:31:a9:34:b1:36:d8:91:e0:99:c6:bc:a8:54:
         16:26:d9:3e:45:e7:f6:4a:bb:db:cc:c0:6f:39:b2:ab:37:52:
         37:fe:32:ce:2b:cf:f0:39:2e:7a:d5:77:55:8b:c6:36:0f:2e:
         e0:45:96:06:be:16:f1:90:1c:81:20:b8:f7:20:a1:17:d5:ed:
         2f:88:bd:81:47:1b:db:13:dc:97:56:6e:e7:48:e0:53:3b:85:
         38:06:6b:5a:44:a9:70:3f:32:2f:c6:14:a5:52:ef:d1:ad:e7:
         dc:12:f0:11:28:65:11:3e:00:59:a8:fb:d6:db:26:f0:81:e1:
         e3:58:9e:24:d4:40:1e:4a:18:51:2f:b6:b0:d4:ad:39:de:36:
         39:9e:f8:26:41:ef:f6:f9:41:b1:65:29:8f:a6:3f:7a:03:e6:
         1d:07:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:47 2025 by rpki-client