Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File:                     RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier:          VkMPAYrnxjQD+T6vWkhQWIhEaEbIUnOgjDdmQB8kQhw=
Subject key identifier:   81:0F:19:73:55:59:67:23:BD:49:31:91:24:3D:F8:10:9C:71:62:AA
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer:       /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial:       0199FCFD3B883E899280821904FCCE66FE8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number:          1507
Signing time:             Sun 19 Oct 2025 15:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:18 +0000
Files and hashes:         1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: 3goUEfNItgdEGyQEE7hqTnuq0esKyDq5maO/06FgVeM=)
                          2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:3b:88:3e:89:92:80:82:19:04:fc:ce:66:fe:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
        Validity
            Not Before: Oct 19 15:01:18 2025 GMT
            Not After : Oct 20 15:01:18 2025 GMT
        Subject: CN=810f197355596723bd493191243df8109c7162aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:78:9a:05:46:6b:7a:e2:b6:aa:38:bb:4a:
                    25:c8:af:36:8b:91:c2:6d:a3:29:48:77:b8:ce:7d:
                    9a:49:c6:c1:4c:75:15:05:e9:1e:b9:ed:0b:d5:22:
                    3d:25:90:79:2e:bf:80:74:1f:d5:6e:80:44:f5:a0:
                    51:fc:80:1c:78:8f:db:fc:ad:35:7b:aa:49:2b:31:
                    cc:1f:ff:c3:10:e8:90:9b:9a:84:22:3d:a2:14:1e:
                    58:d5:71:b3:58:2b:70:d2:1d:9b:30:dc:70:4c:9f:
                    01:23:4b:26:d9:37:56:20:f8:b7:8e:ec:25:93:9b:
                    b3:aa:6e:f2:9d:8c:fa:22:ea:1c:91:73:6e:2d:5e:
                    12:de:35:26:d1:35:d8:e3:69:68:40:d5:ca:38:2c:
                    58:c8:27:9d:c4:a6:be:55:7d:02:53:8d:ca:a3:40:
                    11:67:4d:3f:e5:79:82:b5:6d:4a:84:ce:3e:99:89:
                    f7:ce:93:3b:83:e9:fe:05:6f:65:cc:fc:98:84:3c:
                    2e:49:9b:84:0f:ba:7e:f6:d0:f2:12:a0:be:23:b1:
                    79:7f:7d:8f:f6:aa:c2:db:57:18:1e:d2:92:be:78:
                    e6:23:bd:9d:1d:a8:d9:f7:ba:2b:4b:00:51:cf:d9:
                    ea:2c:0f:b8:74:9d:fc:f8:db:a9:73:da:d4:3b:c4:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:19:73:55:59:67:23:BD:49:31:91:24:3D:F8:10:9C:71:62:AA
            X509v3 Authority Key Identifier:
                keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:f3:3e:0f:44:85:6c:61:16:8b:5c:61:9f:28:6f:6b:d3:
         bf:84:ed:3b:79:1f:0f:5a:92:d8:07:0f:ee:ff:f0:b8:9f:0a:
         6a:12:e9:19:ff:5a:7f:62:57:ec:5e:17:7c:af:db:fd:b5:02:
         44:09:ff:f5:3f:c1:52:c5:77:8f:8b:9b:33:4a:c9:85:3c:2f:
         46:df:bd:81:50:48:22:55:4b:cd:e8:ad:99:d4:15:a8:4d:e6:
         f5:63:99:3a:35:77:5b:ef:7e:10:ec:99:cb:06:6d:76:e8:0e:
         de:2c:58:39:ff:59:83:81:f6:6a:79:e4:0d:14:24:6d:c6:8c:
         c5:b8:56:16:51:a2:cb:90:32:ff:91:a3:49:1a:a9:2d:d1:a8:
         e3:00:37:74:a5:20:e8:dc:1b:62:18:ba:4f:60:9b:f7:ad:13:
         98:db:9a:32:1f:e7:46:3d:eb:6f:d7:84:bb:67:ee:f7:1e:25:
         6a:f2:ba:1d:f5:16:25:d6:84:47:6d:3c:a8:b2:e6:38:e7:87:
         c3:1b:03:c0:fb:cd:03:a5:1b:ea:f8:89:82:da:50:af:06:17:
         8e:95:49:49:b7:3a:5e:88:b3:6e:35:d4:95:c6:0e:40:bb:07:
         52:87:bf:32:45:63:ef:f5:9b:38:f9:86:8e:27:15:da:b6:2a:
         70:f4:c0:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/TuIPomSgIIZBPzOZv6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez
MTc0ZTgwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
Eyg4MTBmMTk3MzU1NTk2NzIzYmQ0OTMxOTEyNDNkZjgxMDljNzE2MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bp4mgVGa3ritqo4u0olyK82i5HC
baMpSHe4zn2aScbBTHUVBekeue0L1SI9JZB5Lr+AdB/VboBE9aBR/IAceI/b/K01
e6pJKzHMH//DEOiQm5qEIj2iFB5Y1XGzWCtw0h2bMNxwTJ8BI0sm2TdWIPi3juwl
k5uzqm7ynYz6IuockXNuLV4S3jUm0TXY42loQNXKOCxYyCedxKa+VX0CU43Ko0AR
Z00/5XmCtW1KhM4+mYn3zpM7g+n+BW9lzPyYhDwuSZuED7p+9tDyEqC+I7F5f32P
9qrC21cYHtKSvnjmI72dHajZ97orSwBRz9nqLA+4dJ38+Nupc9rUO8RGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEPGXNVWWcjvUkxkSQ9+BCccWKqMB8GA1UdIwQY
MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt
MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw
LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtHzPg9E
hWxhFotcYZ8ob2vTv4TtO3kfD1qS2AcP7v/wuJ8KahLpGf9af2JX7F4XfK/b/bUC
RAn/9T/BUsV3j4ubM0rJhTwvRt+9gVBIIlVLzeitmdQVqE3m9WOZOjV3W+9+EOyZ
ywZtdugO3ixYOf9Zg4H2annkDRQkbcaMxbhWFlGiy5Ay/5GjSRqpLdGo4wA3dKUg
6NwbYhi6T2Cb960TmNuaMh/nRj3rb9eEu2fu9x4lavK6HfUWJdaER208qLLmOOeH
wxsDwPvNA6Ub6viJgtpQrwYXjpVJSbc6XoizbjXUlcYOQLsHUoe/MkVj7/WbOPmG
jicV2rYqcPTAmw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:50 2025 by rpki-client