Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
File:                     ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json)
Hash identifier:          eVBlQLKp3Vq+Zi5AkvAvNg4SfflpO4BswrBtQTeF/Qk=
Subject key identifier:   39:47:F3:55:A4:F4:BA:96:83:EC:00:F9:76:EE:4E:25:1B:12:E1:B4
Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Certificate issuer:       /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Certificate serial:       0199FBB370B0A932EC6CC65DBC39D51ED6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
Manifest number:          1477
Signing time:             Sun 19 Oct 2025 09:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:04 +0000
Files and hashes:         1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: 6OrmFC9Crnud45Zl3HdDVjjX+NTvYhjGuxOtfJRptGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:70:b0:a9:32:ec:6c:c6:5d:bc:39:d5:1e:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
        Validity
            Not Before: Oct 19 09:01:04 2025 GMT
            Not After : Oct 20 09:01:04 2025 GMT
        Subject: CN=3947f355a4f4ba9683ec00f976ee4e251b12e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:f5:83:c5:eb:7f:85:9b:2e:94:4e:8b:1f:
                    36:6d:fe:81:18:6a:07:56:2b:79:4d:83:23:19:5c:
                    67:d3:b3:b9:7d:83:76:8f:d2:48:13:fe:61:9e:4c:
                    d7:5e:40:f4:65:b3:cc:31:f4:8a:c8:06:ba:f9:ba:
                    d3:27:57:6d:0e:b6:76:03:6b:b2:b3:72:9c:25:41:
                    d6:bc:36:5f:9f:99:c1:ae:ac:c2:07:1c:f0:80:6e:
                    42:4b:93:9c:cd:10:7d:a1:24:a0:64:ab:55:7a:4f:
                    48:c2:21:94:2e:63:1f:c6:65:bc:8b:44:23:21:4b:
                    9c:4d:1e:33:ef:40:47:fc:2b:cf:0d:8e:77:8f:02:
                    ab:fd:3c:64:70:57:60:1c:58:59:75:f4:e1:4e:79:
                    e1:b6:af:ee:b5:0f:c1:93:3f:07:aa:81:93:bf:7c:
                    93:1f:78:f9:0b:2d:4e:ba:96:3b:62:81:85:28:a0:
                    2b:44:38:1c:d3:cb:f9:17:f3:d9:f8:0e:9f:7f:ed:
                    d6:2c:b4:7b:6e:eb:5b:c0:2f:80:e8:b7:8c:35:c8:
                    a9:5a:fc:ad:88:f5:6d:42:fc:b1:22:fe:d5:fb:b2:
                    71:45:24:d4:48:64:db:3e:69:f4:81:1c:9d:14:e8:
                    85:98:2f:fb:96:ed:ee:d9:d2:2c:62:c9:9b:b9:a1:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:47:F3:55:A4:F4:BA:96:83:EC:00:F9:76:EE:4E:25:1B:12:E1:B4
            X509v3 Authority Key Identifier:
                keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:cb:60:3b:86:d6:f3:6d:c2:27:a4:09:39:e4:11:b4:28:
         7f:6f:c1:30:9d:ef:4b:0c:0e:d5:b9:61:1b:95:9c:9d:11:39:
         51:27:5c:61:ba:34:48:bf:e3:e3:36:92:0a:16:3a:f5:22:1d:
         c7:0a:28:67:08:94:64:19:be:46:dd:ec:e5:b5:cd:6c:95:c4:
         a8:ca:67:24:a6:e9:78:83:9f:29:46:df:91:ac:64:2b:ab:d1:
         90:79:20:82:a5:4a:87:94:3e:dc:4f:ec:4a:46:1f:59:aa:02:
         cb:e0:da:8d:6f:ef:e4:67:80:48:1a:84:03:17:69:74:49:d7:
         82:79:74:dd:00:59:af:a0:ed:9f:b0:92:3b:0d:ae:c0:70:01:
         62:d1:be:07:32:57:2f:c1:60:e2:93:b0:18:78:71:6f:b4:2a:
         a2:ba:6c:78:c3:db:bc:22:54:dd:43:34:f9:04:de:b5:ad:cc:
         b5:c3:e0:ef:15:21:fb:bf:e1:dc:a7:61:67:d6:ad:00:ab:53:
         c0:87:a8:a9:b6:c8:e9:98:c9:a8:1b:e1:22:f0:da:bf:85:68:
         2c:9b:47:e2:23:9d:4e:9c:f1:7b:6d:a1:20:b9:9e:1e:fb:b9:
         03:4a:27:25:38:cf:7f:91:ed:ef:40:8a:46:ff:54:a3:9d:ce:
         50:70:95:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3CwqTLsbMZdvDnVHtbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzI5Yzg1ODIzMTIyZDNhYzdjN2Y0ODA1ZDViMjQyODcw
ZDJkZTIwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
EygzOTQ3ZjM1NWE0ZjRiYTk2ODNlYzAwZjk3NmVlNGUyNTFiMTJlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPP1g8Xrf4WbLpROix82bf6BGGoH
Vit5TYMjGVxn07O5fYN2j9JIE/5hnkzXXkD0ZbPMMfSKyAa6+brTJ1dtDrZ2A2uy
s3KcJUHWvDZfn5nBrqzCBxzwgG5CS5OczRB9oSSgZKtVek9IwiGULmMfxmW8i0Qj
IUucTR4z70BH/CvPDY53jwKr/TxkcFdgHFhZdfThTnnhtq/utQ/Bkz8HqoGTv3yT
H3j5Cy1OupY7YoGFKKArRDgc08v5F/PZ+A6ff+3WLLR7butbwC+A6LeMNcipWvyt
iPVtQvyxIv7V+7JxRSTUSGTbPmn0gRydFOiFmC/7lu3u2dIsYsmbuaEPpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlH81Wk9LqWg+wA+XbuTiUbEuG0MB8GA1UdIwQY
MBaAFEnCnIWCMSLTrHx/SAXVskKHDS3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hNTdhNjMtYTZiNC00MTY1LTllNWUt
OWMyZDA0NGRkNGFmLzEvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hNTdhNjMtYTZiNC00MTY1LTllNWUtOWMyZDA0NGRkNGFm
LzEvU2NLY2hZSXhJdE9zZkg5SUJkV3lRb2NOTGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2vLYDuG
1vNtwiekCTnkEbQof2/BMJ3vSwwO1blhG5WcnRE5USdcYbo0SL/j4zaSChY69SId
xwooZwiUZBm+Rt3s5bXNbJXEqMpnJKbpeIOfKUbfkaxkK6vRkHkggqVKh5Q+3E/s
SkYfWaoCy+DajW/v5GeASBqEAxdpdEnXgnl03QBZr6Dtn7CSOw2uwHABYtG+BzJX
L8Fg4pOwGHhxb7QqorpseMPbvCJU3UM0+QTeta3MtcPg7xUh+7/h3KdhZ9atAKtT
wIeoqbbI6ZjJqBvhIvDav4VoLJtH4iOdTpzxe22hILmeHvu5A0onJTjPf5Ht70CK
Rv9Uo53OUHCVbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:27 2025 by rpki-client