Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          HfVoJdaycsALkzU3xufFlVypKQqsq3QFcQKuwJSswrk=
Subject key identifier:   34:74:5F:4A:E6:B2:61:01:DB:13:9E:A0:B3:B5:A3:1C:02:07:3B:8F
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       0199FC8F785E995A5ECCFDC6FB5AE8D792C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          0888
Signing time:             Sun 19 Oct 2025 13:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:24 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: sHHAWwcnxpSAOgVNcONzHu73C1QfIpJb+QPya38l46s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:78:5e:99:5a:5e:cc:fd:c6:fb:5a:e8:d7:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: Oct 19 13:01:24 2025 GMT
            Not After : Oct 20 13:01:24 2025 GMT
        Subject: CN=34745f4ae6b26101db139ea0b3b5a31c02073b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:8e:51:87:58:f0:47:f2:76:88:e2:f8:62:
                    77:6f:4f:b4:9a:e7:dc:79:ef:4e:ad:6d:3d:92:d0:
                    b6:24:33:d0:5e:a4:f3:9c:eb:bb:0a:39:14:00:f0:
                    6d:14:4a:34:57:11:b9:b4:3b:9d:cb:fe:19:f3:ef:
                    9e:c5:ba:f2:0c:10:3b:ab:66:b8:6f:27:64:dc:28:
                    bf:f4:06:b7:7e:77:98:38:cc:34:56:48:f9:21:07:
                    7c:c2:6a:33:d2:54:84:7c:5f:2c:08:b8:a9:35:59:
                    cd:a7:70:c8:b1:37:60:eb:57:18:f0:98:22:a3:36:
                    f2:15:3e:bf:40:7d:ce:2c:1c:8f:08:a8:a4:7a:59:
                    dd:0e:a3:2c:90:67:5c:3a:16:e4:02:73:a3:3f:fa:
                    98:c4:83:e9:4d:f9:d7:dd:b5:bf:b1:23:0f:67:3d:
                    de:9d:cf:c5:f9:dc:f4:18:43:20:e9:ab:4e:f7:61:
                    26:83:c6:de:44:bf:6a:c3:79:d7:3d:82:00:5d:f0:
                    6b:17:bb:7f:1c:59:44:7b:87:f3:d0:df:55:8a:36:
                    15:89:68:24:2f:58:6a:a6:ca:ed:38:23:45:ad:02:
                    ae:4b:a1:00:8e:5d:dd:3a:de:55:32:6e:75:cf:5f:
                    7f:63:8e:2e:09:97:25:4b:c5:2c:87:b0:19:e9:85:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:5F:4A:E6:B2:61:01:DB:13:9E:A0:B3:B5:A3:1C:02:07:3B:8F
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:55:3a:b2:fd:a1:ba:96:ea:c0:3b:0a:34:c5:64:e8:1d:69:
         86:b1:58:6b:1c:93:18:40:db:c5:a1:7d:5c:cd:6b:a6:e7:28:
         3a:99:4e:af:81:eb:54:d6:b1:e4:72:9a:f5:26:46:95:63:4c:
         cd:6a:86:55:f9:b8:c7:d6:2d:ee:9b:cc:9e:d5:2c:13:03:de:
         57:bb:f6:00:1f:72:41:2e:20:26:eb:61:3f:87:8c:c3:a7:d8:
         99:23:cc:d6:8c:fe:6e:33:34:0a:c5:87:52:e5:0e:66:0e:18:
         fc:ae:77:23:e0:b0:38:97:86:d6:7f:f9:b1:57:a5:25:7e:32:
         ac:00:bd:a0:e4:74:6e:63:c8:bb:78:98:da:a1:3a:ae:9a:81:
         2a:76:4e:a1:20:e2:89:b2:78:09:ef:61:5f:a7:f5:70:2a:e6:
         b6:fc:14:12:a1:ef:7f:d9:a2:d9:f1:a8:e4:83:eb:db:29:75:
         3f:be:59:29:b4:9b:42:98:9b:98:89:53:86:d1:86:a2:14:18:
         57:ad:cc:4a:79:62:43:b4:ec:88:0c:d1:3b:6e:cc:0a:8a:93:
         de:1d:44:9b:3f:fb:5d:67:9b:21:bb:a0:e3:13:3e:7b:5b:6f:
         7d:1a:8c:cd:b2:99:20:eb:f1:de:1a:96:05:42:cc:e6:13:e3:
         61:33:c9:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3hemVpezP3G+1ro15LAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm
YmQ1NTcwHhcNMjUxMDE5MTMwMTI0WhcNMjUxMDIwMTMwMTI0WjAzMTEwLwYDVQQD
EygzNDc0NWY0YWU2YjI2MTAxZGIxMzllYTBiM2I1YTMxYzAyMDczYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoeOUYdY8Efydoji+GJ3b0+0mufc
ee9OrW09ktC2JDPQXqTznOu7CjkUAPBtFEo0VxG5tDudy/4Z8++exbryDBA7q2a4
bydk3Ci/9Aa3fneYOMw0Vkj5IQd8wmoz0lSEfF8sCLipNVnNp3DIsTdg61cY8Jgi
ozbyFT6/QH3OLByPCKikelndDqMskGdcOhbkAnOjP/qYxIPpTfnX3bW/sSMPZz3e
nc/F+dz0GEMg6atO92Emg8beRL9qw3nXPYIAXfBrF7t/HFlEe4fz0N9VijYViWgk
L1hqpsrtOCNFrQKuS6EAjl3dOt5VMm51z19/Y44uCZclS8Ush7AZ6YUnPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR0X0rmsmEB2xOeoLO1oxwCBzuPMB8GA1UdIwQY
MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt
ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm
LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVU6sv2h
upbqwDsKNMVk6B1phrFYaxyTGEDbxaF9XM1rpucoOplOr4HrVNax5HKa9SZGlWNM
zWqGVfm4x9Yt7pvMntUsEwPeV7v2AB9yQS4gJuthP4eMw6fYmSPM1oz+bjM0CsWH
UuUOZg4Y/K53I+CwOJeG1n/5sVelJX4yrAC9oOR0bmPIu3iY2qE6rpqBKnZOoSDi
ibJ4Ce9hX6f1cCrmtvwUEqHvf9mi2fGo5IPr2yl1P75ZKbSbQpibmIlThtGGohQY
V63MSnliQ7TsiAzRO27MCoqT3h1Emz/7XWebIbug4xM+e1tvfRqMzbKZIOvx3hqW
BULM5hPjYTPJzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:32 2025 by rpki-client