Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File:                     _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier:          VKocWN4XQe0ZUSi9DGN/33qBtEV/M144/Aj3i7WoQFc=
Subject key identifier:   36:09:DD:94:28:E3:A3:F8:72:41:E6:34:01:E9:7A:C2:4D:C2:48:47
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer:       /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial:       0199FFC7BB98A22D7B3CA152BC153975EF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number:          13E4
Signing time:             Mon 20 Oct 2025 04:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:43 +0000
Files and hashes:         1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: 1Vnswx8dPqiJGRoMd5CbVU3wzg2aXvcfQ9jKHUgUrN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:bb:98:a2:2d:7b:3c:a1:52:bc:15:39:75:ef:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
        Validity
            Not Before: Oct 20 04:01:43 2025 GMT
            Not After : Oct 21 04:01:43 2025 GMT
        Subject: CN=3609dd9428e3a3f87241e63401e97ac24dc24847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:e0:0a:f5:28:85:48:47:38:6a:eb:53:e8:
                    eb:2e:d7:6f:6e:43:f7:27:89:50:57:f5:8b:2d:6c:
                    ec:00:8e:b5:ec:37:0a:80:07:91:96:4a:4d:51:c8:
                    25:83:bc:3f:19:00:de:b9:31:cf:4f:f1:ae:eb:13:
                    1b:a9:7d:eb:82:cf:4a:58:be:1b:0a:52:76:1f:93:
                    68:7a:e1:e4:a5:cf:9c:e8:6e:54:c8:06:19:f5:ea:
                    66:2f:9a:cd:62:b0:2a:b0:da:ce:fb:33:85:8e:ad:
                    b9:16:8d:30:66:61:6b:fb:11:52:71:f1:49:10:03:
                    99:e1:98:31:34:fd:a0:20:83:31:ea:40:3c:b4:09:
                    90:fb:56:c0:b5:26:39:74:8b:5d:2c:1f:b0:75:ce:
                    de:fe:c5:6d:5b:0b:76:9a:f3:70:79:9f:0b:67:93:
                    52:e2:41:c1:f0:d7:06:23:bf:45:a9:8a:d0:09:6b:
                    c3:db:b9:b7:56:00:e9:60:02:8a:40:2d:33:5f:65:
                    fb:46:f1:70:85:0d:9a:bf:41:48:24:65:70:83:3a:
                    74:b0:0b:45:52:f1:84:e5:4b:cd:a4:33:35:16:d8:
                    56:19:c3:a4:5e:55:61:dd:f4:49:ce:46:51:d5:9a:
                    f2:56:40:99:23:29:1b:1e:6e:55:33:4e:f7:39:82:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:DD:94:28:E3:A3:F8:72:41:E6:34:01:E9:7A:C2:4D:C2:48:47
            X509v3 Authority Key Identifier:
                keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:39:2d:35:7f:69:13:c5:2c:60:22:05:d0:8c:13:54:72:
         5b:72:f0:c3:58:9a:c6:31:bc:37:0b:22:79:3b:3e:16:6b:af:
         be:03:1a:72:d7:c6:ed:01:e5:8a:a3:5e:c9:49:31:6f:c2:44:
         60:d4:6b:00:9a:39:a4:a9:61:04:da:5f:9e:5e:6a:0b:1b:c9:
         ff:ab:71:98:83:05:0d:06:a8:2a:30:29:1b:38:6c:c3:2a:76:
         91:6d:ec:49:7a:a5:31:fa:19:2d:23:e0:0c:3f:45:3c:c4:db:
         24:a7:ab:31:94:c9:1f:28:3a:c4:fd:18:8a:98:37:60:30:63:
         4e:50:b7:09:f8:a3:25:d5:69:d4:9b:e8:67:6d:cb:cb:f5:8c:
         b6:16:83:fc:33:64:4d:3c:83:57:07:26:b6:58:df:de:43:c7:
         c8:af:d9:53:62:f5:98:d3:f8:1e:82:54:af:fa:47:32:cf:0b:
         e8:d3:34:90:51:cf:5a:e9:a6:a8:7e:63:fd:07:08:0e:89:11:
         ec:84:76:5e:7e:fd:3e:26:ad:e9:d1:b1:28:91:5b:7f:94:d2:
         2d:4a:e8:72:5e:af:3a:f7:d7:ce:b4:e5:84:3f:d4:9b:da:d1:
         ff:2c:67:d6:53:34:99:78:dd:1e:03:4c:bb:9b:ef:36:6e:b1:
         85:26:3f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x7uYoi17PKFSvBU5de9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmMwNDg1NTQwMGYzMGQ4ZDgzY2Q5YWNhODU2OGZjN2Y0
YTAxODgwHhcNMjUxMDIwMDQwMTQzWhcNMjUxMDIxMDQwMTQzWjAzMTEwLwYDVQQD
EygzNjA5ZGQ5NDI4ZTNhM2Y4NzI0MWU2MzQwMWU5N2FjMjRkYzI0ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVbgCvUohUhHOGrrU+jrLtdvbkP3
J4lQV/WLLWzsAI617DcKgAeRlkpNUcglg7w/GQDeuTHPT/Gu6xMbqX3rgs9KWL4b
ClJ2H5NoeuHkpc+c6G5UyAYZ9epmL5rNYrAqsNrO+zOFjq25Fo0wZmFr+xFScfFJ
EAOZ4ZgxNP2gIIMx6kA8tAmQ+1bAtSY5dItdLB+wdc7e/sVtWwt2mvNweZ8LZ5NS
4kHB8NcGI79FqYrQCWvD27m3VgDpYAKKQC0zX2X7RvFwhQ2av0FIJGVwgzp0sAtF
UvGE5UvNpDM1FthWGcOkXlVh3fRJzkZR1ZryVkCZIykbHm5VM073OYJU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYJ3ZQo46P4ckHmNAHpesJNwkhHMB8GA1UdIwQY
MBaAFPwsBIVUAPMNjYPNmsqFaPx/SgGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lNzM3NWUtNmFjNS00YzhiLTk1ZjMt
NGVjYTRjOWFmNGI1LzEvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9lNzM3NWUtNmFjNS00YzhiLTk1ZjMtNGVjYTRjOWFmNGI1
LzEvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx45LTV/
aRPFLGAiBdCME1RyW3Lww1iaxjG8NwsieTs+FmuvvgMactfG7QHliqNeyUkxb8JE
YNRrAJo5pKlhBNpfnl5qCxvJ/6txmIMFDQaoKjApGzhswyp2kW3sSXqlMfoZLSPg
DD9FPMTbJKerMZTJHyg6xP0Yipg3YDBjTlC3CfijJdVp1JvoZ23Ly/WMthaD/DNk
TTyDVwcmtljf3kPHyK/ZU2L1mNP4HoJUr/pHMs8L6NM0kFHPWummqH5j/QcIDokR
7IR2Xn79Piat6dGxKJFbf5TSLUrocl6vOvfXzrTlhD/Um9rR/yxn1lM0mXjdHgNM
u5vvNm6xhSY/Fw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:57 2025 by rpki-client