Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File:                     GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier:          O0MndB9b65P1dUpXQFx43w9ZFZ9LloNUcfZnBbJGhSo=
Subject key identifier:   ED:ED:33:4B:57:E6:18:3C:91:E3:FD:9C:2B:7C:7C:8D:73:39:BB:E8
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer:       /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial:       0199FB4583D549A5A1B3199A004256562C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number:          0C55
Signing time:             Sun 19 Oct 2025 07:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:00 +0000
Files and hashes:         1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: WCDgE0gylJ/qeZMk/z5as2/5FDHYXWRn17hYH8PgMlQ=)
                          2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:83:d5:49:a5:a1:b3:19:9a:00:42:56:56:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
        Validity
            Not Before: Oct 19 07:01:00 2025 GMT
            Not After : Oct 20 07:01:00 2025 GMT
        Subject: CN=eded334b57e6183c91e3fd9c2b7c7c8d7339bbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:34:0c:a1:e8:39:b3:49:46:6b:0f:a0:91:
                    ff:9f:92:18:4e:4b:f2:f6:b3:72:c9:f1:1d:4e:b7:
                    2a:2a:f6:46:6b:74:69:6e:2e:73:0d:9d:e5:23:4d:
                    00:e7:6f:6e:ac:88:2a:c5:17:c8:aa:d9:92:e5:24:
                    ee:60:a4:cc:d0:09:4a:12:17:ce:cf:5e:e0:16:d9:
                    59:18:ba:f6:2c:ad:cc:54:7f:b6:21:ff:96:e6:6b:
                    e9:88:eb:8c:3c:60:d3:ed:0b:cc:75:32:3b:24:71:
                    fc:d7:40:9a:24:d6:26:45:80:be:18:14:82:96:c8:
                    67:9b:ef:a0:24:53:82:5d:32:dc:00:a8:78:c4:f9:
                    44:aa:67:ed:26:ef:e4:90:95:80:d9:12:35:cf:f8:
                    f0:4b:74:1e:f6:09:03:16:ed:af:13:a1:c1:d3:8f:
                    4c:e8:1f:4f:db:76:95:f9:0f:b2:54:a1:f2:a4:88:
                    52:03:f9:cd:b5:70:b3:ac:3b:f1:cb:a9:a5:a8:f1:
                    83:61:bd:da:e2:ea:37:b4:e6:cb:f5:e2:c7:a6:da:
                    55:d3:f5:32:52:3b:3e:9a:6b:24:d6:0a:88:77:32:
                    a1:36:ca:02:c5:0e:6c:7a:fb:10:ff:e0:ec:3d:d6:
                    2d:b4:4b:f2:7a:a8:e1:dd:18:70:a4:be:7b:1b:9f:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:ED:33:4B:57:E6:18:3C:91:E3:FD:9C:2B:7C:7C:8D:73:39:BB:E8
            X509v3 Authority Key Identifier:
                keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:65:6b:9a:bf:97:f4:54:ed:88:94:0a:00:ab:fc:5d:b0:
         89:32:7f:ff:f6:d9:a0:e4:b1:a6:07:56:c7:87:8c:28:31:6f:
         c2:69:86:05:7d:3c:3a:cb:c5:a1:c4:75:03:ef:45:36:0b:02:
         46:9d:a0:55:97:97:2c:6e:fa:b2:d2:2a:3c:4b:02:3e:ab:1a:
         53:04:79:59:88:dd:ac:15:ad:d0:0e:28:42:c9:0f:70:a9:c7:
         fe:22:7c:06:d6:fd:25:5a:ea:45:60:d3:db:d3:8d:af:23:57:
         6a:ca:05:1d:06:7d:85:e2:d5:94:3d:cc:f6:c3:e5:80:ee:99:
         4b:2d:3b:6f:31:fd:cc:c6:17:62:9c:c3:7f:86:b5:db:2a:8b:
         01:1b:2b:bf:78:a6:2d:c5:56:c2:c8:fd:6f:77:c0:09:3f:27:
         16:61:a5:0f:75:bc:14:15:63:d4:ba:3e:38:ab:f6:5f:80:a3:
         93:29:c6:d4:3e:c9:bf:f8:89:df:ba:e6:1f:9a:75:7d:52:a1:
         08:60:81:f4:86:37:6d:cf:59:54:99:b1:01:96:26:ac:a4:e8:
         8f:52:6c:66:01:f4:1d:c0:b4:af:5a:5c:07:4c:eb:ee:ff:fc:
         6a:ae:ea:c4:ae:0f:9b:75:38:f2:32:0d:86:aa:1e:e6:d7:17:
         ca:a7:f2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RYPVSaWhsxmaAEJWViyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDE3N2I3Njg5MTAxM2JhMDI3YjM1ZTZlZGZjMWU5Zjgy
OTVjZWMwHhcNMjUxMDE5MDcwMTAwWhcNMjUxMDIwMDcwMTAwWjAzMTEwLwYDVQQD
EyhlZGVkMzM0YjU3ZTYxODNjOTFlM2ZkOWMyYjdjN2M4ZDczMzliYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuw0DKHoObNJRmsPoJH/n5IYTkvy
9rNyyfEdTrcqKvZGa3Rpbi5zDZ3lI00A529urIgqxRfIqtmS5STuYKTM0AlKEhfO
z17gFtlZGLr2LK3MVH+2If+W5mvpiOuMPGDT7QvMdTI7JHH810CaJNYmRYC+GBSC
lshnm++gJFOCXTLcAKh4xPlEqmftJu/kkJWA2RI1z/jwS3Qe9gkDFu2vE6HB049M
6B9P23aV+Q+yVKHypIhSA/nNtXCzrDvxy6mlqPGDYb3a4uo3tObL9eLHptpV0/Uy
Ujs+mmsk1gqIdzKhNsoCxQ5sevsQ/+DsPdYttEvyeqjh3RhwpL57G5/HewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3tM0tX5hg8keP9nCt8fI1zObvoMB8GA1UdIwQY
MBaAFBhBd7dokQE7oCezXm7fwen4KVzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUt
MjI4ZTNmZmE1YmE5LzEvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUtMjI4ZTNmZmE1YmE5
LzEvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal5la5q/
l/RU7YiUCgCr/F2wiTJ///bZoOSxpgdWx4eMKDFvwmmGBX08OsvFocR1A+9FNgsC
Rp2gVZeXLG76stIqPEsCPqsaUwR5WYjdrBWt0A4oQskPcKnH/iJ8Btb9JVrqRWDT
29ONryNXasoFHQZ9heLVlD3M9sPlgO6ZSy07bzH9zMYXYpzDf4a12yqLARsrv3im
LcVWwsj9b3fACT8nFmGlD3W8FBVj1Lo+OKv2X4CjkynG1D7Jv/iJ37rmH5p1fVKh
CGCB9IY3bc9ZVJmxAZYmrKToj1JsZgH0HcC0r1pcB0zr7v/8aq7qxK4Pm3U48jIN
hqoe5tcXyqfy+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:45 2025 by rpki-client