Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          cq4+ksrwAseNjRWmK3F/E16F9w9DkgamH84V35iX40Y=
Subject key identifier:   C8:E7:1B:B2:B2:8E:26:7F:6E:40:31:7B:0B:D0:45:B3:8B:28:D7:B4
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       0199FB45C30969BA00F5012BDE8C830C149B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          0252
Signing time:             Sun 19 Oct 2025 07:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:17 +0000
Files and hashes:         1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
                          2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: 5kVs8pYr/Pb2w/xuhNhDMywVRR/nKNITiYTJH8cWX1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c3:09:69:ba:00:f5:01:2b:de:8c:83:0c:14:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Oct 19 07:01:17 2025 GMT
            Not After : Oct 20 07:01:17 2025 GMT
        Subject: CN=c8e71bb2b28e267f6e40317b0bd045b38b28d7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:92:b1:b7:4f:a6:a0:32:e3:70:0a:d5:37:
                    1c:15:c7:a9:e8:3c:20:a1:29:eb:69:0d:7d:ab:0d:
                    0f:97:45:83:f8:35:04:94:c7:75:5a:5b:d0:95:19:
                    a1:82:00:24:46:54:b0:6e:09:29:70:3c:fe:cc:b7:
                    fe:5c:b4:27:b2:1b:53:ac:00:1c:cf:4b:56:65:0a:
                    02:15:b1:f0:76:5e:36:48:e0:d1:62:a8:12:ff:81:
                    b2:10:e2:eb:fe:e4:a7:43:23:68:d4:1f:79:27:1c:
                    df:bb:ea:20:21:33:8d:f1:7c:09:57:79:98:1f:d8:
                    70:ea:a2:40:2c:b3:72:bb:c8:f1:e6:99:8d:50:32:
                    7b:68:92:cd:26:57:8a:69:e3:4f:05:13:70:a4:c4:
                    6b:25:c8:3c:35:c4:ae:db:4e:77:48:5c:07:84:1c:
                    69:17:87:3b:4a:00:5b:b8:9d:a8:68:7e:f0:8c:8c:
                    6a:83:cb:f4:35:be:76:ad:c7:30:2f:d7:7d:80:21:
                    e4:6e:95:5b:a6:bf:68:85:b1:4e:e9:75:1c:da:78:
                    8c:75:e6:cd:75:66:8f:8a:84:15:b0:b8:a6:58:f3:
                    f4:6b:36:86:15:a3:6a:38:eb:85:75:59:3d:fc:54:
                    db:4c:f7:ab:e5:74:01:f5:79:8c:cb:3d:d0:db:7f:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:1B:B2:B2:8E:26:7F:6E:40:31:7B:0B:D0:45:B3:8B:28:D7:B4
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:1a:a4:08:9b:dc:30:0b:8e:50:40:e4:c9:b2:1c:d3:75:88:
         43:6d:3d:2c:12:e5:99:06:4b:a9:87:2c:31:da:4c:36:57:54:
         d7:fa:d7:2b:7e:63:cc:4a:f2:30:31:5a:16:a7:04:a4:79:79:
         c9:b7:cb:2c:0a:77:5a:16:54:7d:80:0e:73:8b:8e:dc:45:bb:
         1b:6a:97:78:a0:c4:7a:51:7f:fe:83:c9:0d:3c:ad:70:cd:07:
         e8:c3:82:47:27:53:4c:f2:b6:ed:66:15:cb:91:2c:a5:34:23:
         82:b2:ea:a6:b9:05:8e:bb:ee:01:98:64:48:dd:b4:06:97:66:
         ec:02:03:da:4b:37:cc:ef:7e:17:32:7a:8d:ca:3c:af:50:ff:
         59:7f:a7:f7:44:be:27:17:27:c7:b8:d2:f1:f7:6e:e6:a4:34:
         93:56:0a:14:20:2b:3a:0f:85:cc:b2:61:8e:a5:0c:5b:7a:7a:
         9a:e3:e2:21:da:08:d2:fe:de:3e:69:fb:95:d6:36:2f:7d:e3:
         ac:bb:92:bd:5b:bb:18:0b:c7:e0:20:38:9c:2b:c7:51:4a:4d:
         62:08:d2:59:48:0b:15:4d:bc:9d:77:f4:94:80:af:44:8c:78:
         f5:5b:ca:fd:0a:b7:51:e0:f8:85:26:c2:4f:03:9f:a3:8d:96:
         03:67:f2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RcMJaboA9QEr3oyDDBSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkM2IyMzkxZjQ3MjZjMWFhODlkNWVkM2QwNDA4MjMy
NTIzNTUwHhcNMjUxMDE5MDcwMTE3WhcNMjUxMDIwMDcwMTE3WjAzMTEwLwYDVQQD
EyhjOGU3MWJiMmIyOGUyNjdmNmU0MDMxN2IwYmQwNDViMzhiMjhkN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/2SsbdPpqAy43AK1TccFcep6Dwg
oSnraQ19qw0Pl0WD+DUElMd1WlvQlRmhggAkRlSwbgkpcDz+zLf+XLQnshtTrAAc
z0tWZQoCFbHwdl42SODRYqgS/4GyEOLr/uSnQyNo1B95Jxzfu+ogITON8XwJV3mY
H9hw6qJALLNyu8jx5pmNUDJ7aJLNJleKaeNPBRNwpMRrJcg8NcSu2053SFwHhBxp
F4c7SgBbuJ2oaH7wjIxqg8v0Nb52rccwL9d9gCHkbpVbpr9ohbFO6XUc2niMdebN
dWaPioQVsLimWPP0azaGFaNqOOuFdVk9/FTbTPer5XQB9XmMyz3Q23/CSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjnG7KyjiZ/bkAxewvQRbOLKNe0MB8GA1UdIwQY
MBaAFFd807I5H0cmwaqJ1e09BAgjJSNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEt
MDBmZDA1ZDNjZDFkLzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEtMDBmZDA1ZDNjZDFk
LzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4BqkCJvc
MAuOUEDkybIc03WIQ209LBLlmQZLqYcsMdpMNldU1/rXK35jzEryMDFaFqcEpHl5
ybfLLAp3WhZUfYAOc4uO3EW7G2qXeKDEelF//oPJDTytcM0H6MOCRydTTPK27WYV
y5EspTQjgrLqprkFjrvuAZhkSN20Bpdm7AID2ks3zO9+FzJ6jco8r1D/WX+n90S+
Jxcnx7jS8fdu5qQ0k1YKFCArOg+FzLJhjqUMW3p6muPiIdoI0v7ePmn7ldY2L33j
rLuSvVu7GAvH4CA4nCvHUUpNYgjSWUgLFU28nXf0lICvRIx49VvK/Qq3UeD4hSbC
TwOfo42WA2fyCQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client