Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          Eo1+qoSohEXDcVtHiON+mJrh5Xq5528ZV3z8m5rK7As=
Subject key identifier:   9F:46:6B:73:CD:8B:A8:7F:5D:5D:ED:14:90:B1:8B:F0:74:A2:05:AC
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       0199FDA1D5D1598DECB6B9F7F9F947E2BB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          051B
Signing time:             Sun 19 Oct 2025 18:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:05 +0000
Files and hashes:         1: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
                          2: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
                          3: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: qXhaxT3xJwXGsjE9J320aO7k0pn3i0FHXLbTY0ojZxo=)
                          4: lf-trLvA-qDd5zEdeoTS16VXX6g.roa (hash: UkGZWMolhkbNSX35kZCtNaOnC+PwksQdwebe8XEM76U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:d5:d1:59:8d:ec:b6:b9:f7:f9:f9:47:e2:bb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Oct 19 18:01:05 2025 GMT
            Not After : Oct 20 18:01:05 2025 GMT
        Subject: CN=9f466b73cd8ba87f5d5ded1490b18bf074a205ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:c6:3f:63:92:26:b5:49:a9:18:e3:8a:44:
                    8e:33:4a:47:08:c6:a6:3c:bf:a5:5b:a2:d6:74:df:
                    4b:13:ea:51:cc:11:a7:d6:5e:d2:19:d6:b9:45:0d:
                    53:5d:13:c4:96:e9:03:f1:6f:0d:96:cb:26:3c:6a:
                    bb:c1:7a:f8:15:5c:21:6f:8e:da:14:32:c8:ac:ec:
                    2c:b4:fa:68:58:f5:60:a0:93:28:70:77:e6:6b:4e:
                    c6:32:e7:31:4c:15:f9:97:df:f6:3a:63:8c:79:e7:
                    fb:65:05:49:31:95:9c:23:69:33:a6:1c:65:68:a4:
                    fd:c9:69:d1:a0:05:8b:61:ea:12:eb:f5:2e:75:a5:
                    92:e4:22:d0:59:df:2b:1d:5e:73:fc:cf:a3:70:94:
                    ab:d4:b8:37:41:7b:df:f8:11:c3:07:df:9a:76:9d:
                    98:50:ef:da:52:49:6d:1d:b7:93:72:92:19:7c:94:
                    53:2b:da:6d:45:9a:65:e3:cc:a1:d7:b6:1f:98:f4:
                    1c:d9:b8:6c:f3:48:34:e3:2d:c0:7f:a3:3e:4a:71:
                    40:d9:e2:2a:e5:2a:79:ee:e4:aa:74:15:d2:c1:c5:
                    25:9c:7f:c1:bd:35:49:37:83:9f:79:cf:f8:95:4c:
                    8e:5d:b9:c8:5d:fd:02:e1:65:03:1f:5c:f8:90:cc:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:6B:73:CD:8B:A8:7F:5D:5D:ED:14:90:B1:8B:F0:74:A2:05:AC
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:5a:3b:dc:77:9b:41:13:6c:05:5d:a1:61:83:25:a2:ce:
         dd:99:c0:0f:92:51:e1:87:fe:b9:4d:0d:a5:fa:21:35:d6:f5:
         25:79:a8:c4:d6:40:ad:b5:60:b6:07:82:ba:cd:80:cd:4a:0a:
         ca:0e:06:9d:ac:f5:57:b2:9c:b6:c0:c8:e3:f5:36:57:c2:90:
         e6:7c:16:ec:42:a3:17:53:ea:97:4f:e0:e1:ac:7a:f6:ce:f0:
         31:a8:a0:8b:b4:d5:82:65:38:df:bb:85:8e:4b:d7:e2:3d:73:
         3e:4a:ec:f1:88:c0:67:b9:99:ef:78:1e:92:af:5b:5b:58:93:
         39:0f:a0:86:cd:cf:3d:01:9a:31:4a:94:eb:ea:24:b1:11:41:
         1d:59:d8:e6:f0:43:c0:cd:57:95:6e:a6:41:4e:48:e4:d4:f8:
         71:16:6a:38:64:88:50:f6:e9:ef:ab:34:ba:c7:b8:25:1b:4f:
         11:78:81:ed:88:fc:7e:b0:ae:ea:e7:91:88:68:aa:fc:30:ba:
         0d:7e:ad:7a:a1:14:03:54:fc:01:62:be:72:ff:8a:6b:2f:89:
         30:ff:be:3f:2a:1f:f0:1c:ed:d8:68:8a:42:28:8f:43:30:b4:
         79:fa:f6:6e:cc:72:4a:f8:e6:90:16:f8:76:b0:60:44:af:b8:
         53:bc:d4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9odXRWY3strn3+flH4ruUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2
NTI4YmMwHhcNMjUxMDE5MTgwMTA1WhcNMjUxMDIwMTgwMTA1WjAzMTEwLwYDVQQD
Eyg5ZjQ2NmI3M2NkOGJhODdmNWQ1ZGVkMTQ5MGIxOGJmMDc0YTIwNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPGP2OSJrVJqRjjikSOM0pHCMam
PL+lW6LWdN9LE+pRzBGn1l7SGda5RQ1TXRPElukD8W8NlssmPGq7wXr4FVwhb47a
FDLIrOwstPpoWPVgoJMocHfma07GMucxTBX5l9/2OmOMeef7ZQVJMZWcI2kzphxl
aKT9yWnRoAWLYeoS6/UudaWS5CLQWd8rHV5z/M+jcJSr1Lg3QXvf+BHDB9+adp2Y
UO/aUkltHbeTcpIZfJRTK9ptRZpl48yh17YfmPQc2bhs80g04y3Af6M+SnFA2eIq
5Sp57uSqdBXSwcUlnH/BvTVJN4Ofec/4lUyOXbnIXf0C4WUDH1z4kMyIBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Ga3PNi6h/XV3tFJCxi/B0ogWsMB8GA1UdIwQY
MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt
YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj
LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2JaO9x3
m0ETbAVdoWGDJaLO3ZnAD5JR4Yf+uU0NpfohNdb1JXmoxNZArbVgtgeCus2AzUoK
yg4Gnaz1V7KctsDI4/U2V8KQ5nwW7EKjF1Pql0/g4ax69s7wMaigi7TVgmU437uF
jkvX4j1zPkrs8YjAZ7mZ73gekq9bW1iTOQ+ghs3PPQGaMUqU6+oksRFBHVnY5vBD
wM1XlW6mQU5I5NT4cRZqOGSIUPbp76s0use4JRtPEXiB7Yj8frCu6ueRiGiq/DC6
DX6teqEUA1T8AWK+cv+Kay+JMP++Pyof8Bzt2GiKQiiPQzC0efr2bsxySvjmkBb4
drBgRK+4U7zU3g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:19 2025 by rpki-client