Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          cYb0FkjT8u9pb+sErNpqTSewnyyKv26CSac5k9Okgyc=
Subject key identifier:   1F:71:6F:6C:EC:0D:1A:0E:A4:52:49:B8:BD:A8:E6:0E:83:77:80:63
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       0199FC584FA98F3C28E813112CD0612A194F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 12:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:09 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: vG9l/lXFLE7aDI2F9Ris0qdOLI4140tVuYeJYt/13dI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:4f:a9:8f:3c:28:e8:13:11:2c:d0:61:2a:19:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Oct 19 12:01:09 2025 GMT
            Not After : Oct 20 12:01:09 2025 GMT
        Subject: CN=1f716f6cec0d1a0ea45249b8bda8e60e83778063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:7e:33:cc:84:de:60:1a:92:52:17:45:f5:
                    5e:92:b0:9b:ea:bc:87:19:df:11:6f:7f:69:17:5c:
                    f4:79:20:bb:41:5e:e2:cd:74:89:12:ef:c3:16:47:
                    78:25:76:9c:72:67:eb:33:ac:9f:1b:7f:36:25:8d:
                    40:2b:63:f4:41:32:e8:40:f8:df:71:37:1d:35:a2:
                    e9:45:da:59:2c:8f:0d:bb:cf:14:95:65:82:e3:42:
                    ae:d9:36:ec:07:4b:99:51:9b:e9:a9:d9:26:7a:b6:
                    a1:c5:f6:d6:57:1a:f0:9c:1e:1e:59:88:4f:71:d8:
                    86:4d:9b:7f:72:0b:61:3f:ff:c7:22:e6:84:d6:1c:
                    37:01:09:95:20:ba:f9:80:0a:60:59:6a:19:d9:ee:
                    42:c1:f1:d0:e6:cc:e4:d1:08:e9:26:18:a7:1e:fd:
                    76:91:d6:8c:dd:56:3d:9e:b8:d4:9d:0a:f5:62:a1:
                    67:ee:23:e7:6e:15:1a:9f:86:16:01:70:bb:5d:f3:
                    fd:d9:e9:7a:39:46:22:b0:6c:df:e9:34:89:e5:44:
                    bb:6f:94:29:0b:89:0a:80:80:1d:ce:ae:14:f8:cb:
                    e6:35:9f:d0:4e:d8:91:cd:6c:4a:24:db:04:fe:3a:
                    f9:5f:ed:b2:07:13:62:5b:4d:6d:78:bf:74:b7:82:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:6F:6C:EC:0D:1A:0E:A4:52:49:B8:BD:A8:E6:0E:83:77:80:63
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:43:41:fd:23:98:87:49:79:ff:a4:ad:0e:3b:46:c6:49:49:
         4f:71:52:b3:f0:4e:0a:0a:f0:ba:2c:56:5d:9b:b8:52:a6:ec:
         04:18:77:8a:89:a4:a8:f5:7e:c0:2c:44:3a:3b:82:74:5a:fd:
         72:8d:86:d4:bd:c8:37:18:95:1d:15:36:14:b6:90:d7:e3:b3:
         2f:f0:1f:c3:32:fa:c5:86:d9:13:0b:86:95:6a:aa:95:38:4c:
         32:58:a3:2d:b5:8f:32:0f:d3:48:cb:82:22:68:02:88:e7:0b:
         65:b6:3a:15:c7:6b:c5:32:0e:63:b8:7f:6c:c3:53:0e:09:19:
         e7:56:f2:c0:67:0e:10:cc:b7:e2:fc:dc:33:5b:75:cd:14:04:
         91:9f:d3:1d:cb:71:0a:38:3d:46:c0:ed:00:0e:0c:f8:d1:ad:
         9a:42:30:a0:e3:29:f4:9a:8d:49:5d:d2:c6:8e:b9:bd:be:f2:
         58:44:31:8e:ff:df:24:8b:d6:a7:eb:f5:e8:bc:98:9e:b3:8f:
         1c:8c:b8:a7:f1:a2:62:17:57:fe:c0:3c:d4:a9:a4:f7:09:e4:
         10:f7:93:81:3e:cb:35:d1:fc:bf:66:b4:eb:06:3b:11:0c:d7:
         e4:49:14:f7:ed:02:50:a9:0e:f2:bf:1c:cd:57:06:ab:ac:e2:
         99:c8:e5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WE+pjzwo6BMRLNBhKhlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NGI2MzA1ODY1OGE1OWVjYmJmNDQzOTViZjE2Zjc4MGRj
OTI5Y2MwHhcNMjUxMDE5MTIwMTA5WhcNMjUxMDIwMTIwMTA5WjAzMTEwLwYDVQQD
EygxZjcxNmY2Y2VjMGQxYTBlYTQ1MjQ5YjhiZGE4ZTYwZTgzNzc4MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcl+M8yE3mAaklIXRfVekrCb6ryH
Gd8Rb39pF1z0eSC7QV7izXSJEu/DFkd4JXaccmfrM6yfG382JY1AK2P0QTLoQPjf
cTcdNaLpRdpZLI8Nu88UlWWC40Ku2TbsB0uZUZvpqdkmerahxfbWVxrwnB4eWYhP
cdiGTZt/cgthP//HIuaE1hw3AQmVILr5gApgWWoZ2e5CwfHQ5szk0QjpJhinHv12
kdaM3VY9nrjUnQr1YqFn7iPnbhUan4YWAXC7XfP92el6OUYisGzf6TSJ5US7b5Qp
C4kKgIAdzq4U+MvmNZ/QTtiRzWxKJNsE/jr5X+2yBxNiW01teL90t4K7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9xb2zsDRoOpFJJuL2o5g6Dd4BjMB8GA1UdIwQY
MBaAFLhLYwWGWKWey79EOVvxb3gNySnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQt
YTEzNWNiNTU5NzU4LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQtYTEzNWNiNTU5NzU4
LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkNB/SOY
h0l5/6StDjtGxklJT3FSs/BOCgrwuixWXZu4UqbsBBh3iomkqPV+wCxEOjuCdFr9
co2G1L3INxiVHRU2FLaQ1+OzL/AfwzL6xYbZEwuGlWqqlThMMlijLbWPMg/TSMuC
ImgCiOcLZbY6FcdrxTIOY7h/bMNTDgkZ51bywGcOEMy34vzcM1t1zRQEkZ/THctx
Cjg9RsDtAA4M+NGtmkIwoOMp9JqNSV3Sxo65vb7yWEQxjv/fJIvWp+v16LyYnrOP
HIy4p/GiYhdX/sA81Kmk9wnkEPeTgT7LNdH8v2a06wY7EQzX5EkU9+0CUKkO8r8c
zVcGq6zimcjl1A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:40 2025 by rpki-client