Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          VKkSP+UB7pS1a2FCnZLjMbM0cj9hhjPObzxZShEEe2Y=
Subject key identifier:   35:B8:53:A5:64:29:9C:DB:32:A1:C2:97:26:8A:F1:B5:6D:A0:BF:D7
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       0199FC58ED4836F793AF26AD263B86C26A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          16F4
Signing time:             Sun 19 Oct 2025 12:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:50 +0000
Files and hashes:         1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=)
                          2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=)
                          3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=)
                          4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=)
                          5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=)
                          6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=)
                          7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=)
                          8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=)
                          9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=)
                          10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=)
                          11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=)
                          12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=)
                          13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: lz6fUP/eb2w0joa8EYABJsii6oVz6Q3AYWw3Sf7NXto=)
                          14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=)
                          15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=)
                          16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=)
                          17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=)
                          18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=)
                          19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=)
                          20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ed:48:36:f7:93:af:26:ad:26:3b:86:c2:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Oct 19 12:01:50 2025 GMT
            Not After : Oct 20 12:01:50 2025 GMT
        Subject: CN=35b853a564299cdb32a1c297268af1b56da0bfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:51:59:b5:bc:40:f7:1b:ba:a9:40:7c:0b:
                    73:72:a0:8a:8c:7e:e5:c9:e3:4c:6c:d1:a8:07:47:
                    0d:f5:78:15:ea:00:3d:03:99:ab:fc:ba:68:70:25:
                    28:89:b5:f1:ab:5c:89:bc:1d:da:85:ef:e6:12:d3:
                    20:bf:1f:8f:84:a7:93:d7:4f:f3:b2:59:db:34:90:
                    bf:a6:96:c2:1c:3d:03:aa:ba:c8:2c:69:1c:74:5c:
                    d2:6f:b8:57:12:a4:ea:e0:94:39:2a:03:16:ad:09:
                    25:78:61:42:e3:ee:5e:a1:83:ae:c0:62:6d:95:cc:
                    88:0c:98:d7:ed:6f:18:fc:4f:47:02:8a:f0:e3:f7:
                    ea:10:67:30:cc:0d:93:19:c1:97:5a:93:4b:0f:c3:
                    5c:4e:f2:de:89:98:5f:4c:b2:fc:49:4f:51:f1:30:
                    f6:c3:b0:da:b6:3f:e7:5a:d7:7d:91:36:fa:c6:40:
                    6f:f9:f8:ad:b9:61:fb:20:a4:cd:6c:be:86:a5:89:
                    cd:50:be:b4:90:90:2a:b3:f8:06:6f:0a:d8:2c:ed:
                    8d:70:70:88:1e:ac:aa:e5:f1:ed:f9:82:75:67:33:
                    98:3d:3c:1f:18:85:87:90:d4:6d:ae:07:11:15:fd:
                    eb:33:6b:17:fc:2f:3a:0d:38:8b:95:3a:0e:f6:54:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:53:A5:64:29:9C:DB:32:A1:C2:97:26:8A:F1:B5:6D:A0:BF:D7
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f4:e9:8d:b3:3a:e8:3d:77:b8:9b:78:8d:00:7a:1d:ac:a6:
         c6:00:25:24:d2:15:c9:89:01:a9:d5:56:ca:88:69:80:b4:4e:
         56:3a:47:4d:61:71:f4:5c:a8:c8:2d:58:ba:52:7b:5a:fc:5f:
         6c:f7:25:5e:0e:e9:94:ac:3b:61:2b:d9:f3:69:2a:b9:59:b4:
         5a:54:93:6c:6b:32:68:9d:98:f6:f3:ce:cb:d3:c9:b2:73:5d:
         12:09:b5:20:a3:79:8c:e6:41:10:0a:5d:ed:58:14:da:d3:54:
         44:ca:fe:3c:3d:c6:c1:ec:48:3f:70:29:df:a8:ae:c9:a5:66:
         5d:1b:76:41:7b:ca:1b:0b:53:45:1e:be:58:e6:97:59:2e:c6:
         91:2d:8f:31:5f:5d:7a:1b:8e:7e:98:0e:74:99:37:3c:23:21:
         11:0d:62:f2:ec:1e:87:0b:1c:09:92:59:0d:3f:71:74:ca:cd:
         bc:af:b7:4d:69:c8:fb:8d:d9:ff:1c:16:9b:8d:4d:94:d9:ab:
         f8:9c:58:ef:44:45:e6:e6:64:b7:15:50:fa:26:14:a9:cc:52:
         07:7c:91:5c:c4:8f:62:d0:a1:c3:a6:c1:05:3d:2b:33:19:0f:
         11:f3:49:60:57:5a:1b:06:c3:38:e0:ef:9a:59:73:f9:e8:38:
         ab:2e:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:12 2025 by rpki-client