Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
File:                     Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json)
Hash identifier:          iZPcuuR3sDt2bdDlJ+YYte+ZUAkKpIqL8POIPWRgfCk=
Subject key identifier:   36:98:D4:F3:8F:B5:54:A1:5C:CD:0C:AD:D1:67:CF:5A:27:28:4A:A8
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Certificate issuer:       /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial:       0199FBB36521EEA58F0F96A893266FE52002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
Manifest number:          0197
Signing time:             Sun 19 Oct 2025 09:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:01 +0000
Files and hashes:         1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: 5T27wkM7e43dbXd5Z9Nh6FI28+I/B5a+/EKHWwC3Acs=)
                          2: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (hash: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:65:21:ee:a5:8f:0f:96:a8:93:26:6f:e5:20:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
        Validity
            Not Before: Oct 19 09:01:01 2025 GMT
            Not After : Oct 20 09:01:01 2025 GMT
        Subject: CN=3698d4f38fb554a15ccd0cadd167cf5a27284aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:e0:e2:03:34:d1:0c:42:d3:db:c5:13:35:
                    92:fa:9c:c8:5b:af:48:b1:04:39:2c:23:3d:91:51:
                    3b:7e:1d:e7:c9:40:5a:69:44:40:2b:fd:1a:b1:5a:
                    be:eb:92:48:0e:29:2a:aa:ae:b4:8f:ad:65:2c:ec:
                    ce:64:ae:d0:e9:9e:4d:39:e3:92:42:51:ae:2e:ed:
                    3f:74:a4:cb:bc:f4:aa:46:9f:4d:65:b8:c7:a4:80:
                    fa:c5:99:95:0a:42:7a:c5:87:ab:34:0c:42:e5:0f:
                    1f:07:b3:05:0f:4e:75:fa:09:16:7e:29:38:57:4a:
                    4f:d3:4d:0c:04:31:01:dc:a2:7c:6e:ce:e5:6f:9a:
                    11:29:06:a7:8d:b8:30:00:09:08:c5:a9:cc:25:8b:
                    63:4d:f0:1b:93:0f:b2:1e:58:51:68:03:10:74:6c:
                    47:ba:12:4a:c4:ad:91:4a:4a:36:fb:70:16:3c:9b:
                    10:e5:90:ab:fd:25:0c:29:1e:bd:8d:f4:fb:18:31:
                    49:9a:28:fc:9e:10:5a:57:89:ee:83:e8:12:60:ec:
                    5b:63:a4:17:41:fa:d2:db:73:08:57:6b:72:4c:d4:
                    99:11:7e:51:8a:5d:11:d6:cf:46:a3:da:a0:fa:53:
                    c5:1f:5b:cc:dd:12:df:ca:7e:32:5d:32:f8:12:0c:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:98:D4:F3:8F:B5:54:A1:5C:CD:0C:AD:D1:67:CF:5A:27:28:4A:A8
            X509v3 Authority Key Identifier:
                keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:0c:5e:99:12:22:e6:64:0f:b5:b4:8e:eb:0f:80:50:ff:
         e5:60:26:3d:7d:f2:6f:82:99:f7:cd:84:70:d7:45:71:fc:ef:
         38:11:8e:ef:18:8a:70:5b:ee:28:ba:d5:ab:9a:9c:a8:0e:b1:
         96:a0:01:f9:d4:2a:1e:9b:d8:52:39:48:ee:7b:7e:60:94:40:
         73:61:b5:fb:1d:47:92:f1:b5:5d:ef:df:b9:cc:93:f8:21:cf:
         57:7a:c5:e8:19:09:de:43:a0:94:20:64:76:79:71:8e:6d:41:
         6b:4e:d6:ee:a0:aa:db:57:56:01:cc:9e:0f:8b:73:ea:35:3d:
         fa:cb:2c:e2:bf:1a:a2:eb:03:8e:ed:00:c8:85:00:ba:13:bf:
         1b:b2:fd:2d:0e:8d:63:da:2e:e5:25:b5:53:14:c3:e5:f1:30:
         b9:3a:12:57:35:08:f6:58:f5:84:13:53:55:b3:a2:ce:72:c0:
         22:15:4b:d0:32:8a:eb:ad:5b:2d:2d:a4:52:d2:99:ab:fd:57:
         36:2f:69:66:d3:de:f7:1a:a5:f2:e0:1f:09:d2:bf:33:5e:c3:
         2f:1e:0c:51:8a:0d:c1:65:5f:7a:34:cb:ce:37:21:f2:1a:84:
         78:e3:44:c3:36:04:35:7e:84:a4:19:35:05:58:4b:95:89:32:
         fe:a5:ad:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2Uh7qWPD5aokyZv5SACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw
MDI3MjEwHhcNMjUxMDE5MDkwMTAxWhcNMjUxMDIwMDkwMTAxWjAzMTEwLwYDVQQD
EygzNjk4ZDRmMzhmYjU1NGExNWNjZDBjYWRkMTY3Y2Y1YTI3Mjg0YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybvg4gM00QxC09vFEzWS+pzIW69I
sQQ5LCM9kVE7fh3nyUBaaURAK/0asVq+65JIDikqqq60j61lLOzOZK7Q6Z5NOeOS
QlGuLu0/dKTLvPSqRp9NZbjHpID6xZmVCkJ6xYerNAxC5Q8fB7MFD051+gkWfik4
V0pP000MBDEB3KJ8bs7lb5oRKQanjbgwAAkIxanMJYtjTfAbkw+yHlhRaAMQdGxH
uhJKxK2RSko2+3AWPJsQ5ZCr/SUMKR69jfT7GDFJmij8nhBaV4nug+gSYOxbY6QX
QfrS23MIV2tyTNSZEX5Ril0R1s9Go9qg+lPFH1vM3RLfyn4yXTL4EgyV5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaY1POPtVShXM0MrdFnz1onKEqoMB8GA1UdIwQY
MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt
NGI0NmYzZDMzNzNmLzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm
LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAsMXpkS
IuZkD7W0jusPgFD/5WAmPX3yb4KZ982EcNdFcfzvOBGO7xiKcFvuKLrVq5qcqA6x
lqAB+dQqHpvYUjlI7nt+YJRAc2G1+x1HkvG1Xe/fucyT+CHPV3rF6BkJ3kOglCBk
dnlxjm1Ba07W7qCq21dWAcyeD4tz6jU9+sss4r8aousDju0AyIUAuhO/G7L9LQ6N
Y9ou5SW1UxTD5fEwuToSVzUI9lj1hBNTVbOiznLAIhVL0DKK661bLS2kUtKZq/1X
Ni9pZtPe9xql8uAfCdK/M17DLx4MUYoNwWVfejTLzjch8hqEeONEwzYENX6EpBk1
BVhLlYky/qWtKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:22 2025 by rpki-client