Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File:                     0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier:          CI5+FmwVkPJRRTGYIvh9SKiU2/qug2QVdiUuEM2W/i0=
Subject key identifier:   C2:CC:EC:51:1C:6C:DF:5D:E2:3E:93:06:B5:1D:93:A8:62:8C:73:77
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer:       /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial:       0199FEB5165DABD4FF3B6078E5AF6CDAD64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number:          0678
Signing time:             Sun 19 Oct 2025 23:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:44 +0000
Files and hashes:         1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
                          2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: tsxoEBTVXMokdGhdwrOsfgOAHhx0Qqg48bdypQM+U3Y=)
                          3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:16:5d:ab:d4:ff:3b:60:78:e5:af:6c:da:d6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
        Validity
            Not Before: Oct 19 23:01:44 2025 GMT
            Not After : Oct 20 23:01:44 2025 GMT
        Subject: CN=c2ccec511c6cdf5de23e9306b51d93a8628c7377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:7a:04:9d:35:60:0e:3f:4e:f8:11:f3:48:
                    b6:1a:4e:c6:1c:5a:80:eb:a1:ac:32:ce:87:d6:c8:
                    1c:99:7e:5c:e8:68:85:e1:d5:ad:0c:4f:09:dc:5a:
                    fc:c5:38:6f:77:b5:5c:b2:31:82:90:2b:14:a3:6e:
                    02:21:a0:17:de:e3:28:69:22:fb:f4:d2:38:62:8a:
                    23:4e:da:cb:b6:c6:50:ad:f2:7f:fb:7c:62:7b:21:
                    e8:9f:3b:ec:56:9e:b9:67:0a:71:27:3f:50:ae:c2:
                    95:31:fb:bb:07:00:ba:5f:be:7b:65:ca:fe:d9:c0:
                    37:e0:d3:4d:15:43:27:b7:ed:77:8f:e6:5d:c3:47:
                    75:46:9e:32:1e:1d:54:c5:48:9b:4e:f3:e9:a4:09:
                    0b:f2:34:02:c7:90:4f:46:3a:32:23:85:00:02:97:
                    9e:a2:8a:cb:c7:c6:88:71:70:69:73:43:3e:80:81:
                    18:40:52:df:d5:e9:5d:38:ba:92:da:76:bb:c2:64:
                    5d:27:ed:f1:a3:cf:82:1b:af:7b:9d:af:c9:3e:ea:
                    df:cb:94:02:6f:7f:4e:81:88:5a:f9:bc:da:f9:62:
                    60:51:17:86:dc:f4:e6:c9:3d:35:30:7c:21:7f:3d:
                    e8:5a:25:fc:f9:9e:c4:fb:f3:7d:01:72:bd:7c:52:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:EC:51:1C:6C:DF:5D:E2:3E:93:06:B5:1D:93:A8:62:8C:73:77
            X509v3 Authority Key Identifier:
                keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:17:2e:94:8a:f5:97:20:7b:21:2a:5e:2c:a7:bf:95:f5:2f:
         b3:8d:2b:85:e3:8d:99:9e:fa:98:fe:d5:89:33:f6:8c:23:52:
         79:80:76:06:a4:a5:1d:ba:5c:0b:77:86:5f:6a:61:cc:1f:55:
         cc:55:d1:3d:c3:ea:f3:11:1b:9a:ac:b1:06:da:15:98:4a:24:
         db:16:6c:05:1b:dc:50:2b:02:70:bc:90:e7:7c:b3:21:06:ef:
         93:11:2c:ed:ca:57:aa:68:c2:3d:0c:39:fb:6e:7e:af:73:f8:
         9b:51:03:1d:2e:db:7e:c4:b6:c7:66:09:38:6a:c0:41:0b:a1:
         3a:d9:54:47:43:67:54:84:a7:ed:44:da:28:d4:17:d3:05:24:
         8d:ec:57:84:b4:de:70:08:58:f6:d0:f1:2c:38:9d:db:89:93:
         cb:f2:39:15:86:d5:94:33:3a:cb:eb:d3:26:e9:84:12:0d:e9:
         13:08:8c:33:7c:c8:4a:88:69:6e:8b:3e:e5:86:3a:fd:b0:41:
         96:10:6a:ea:6b:86:7a:55:e1:eb:fc:02:4d:d0:e2:de:93:fe:
         d7:d9:ee:52:96:cb:1a:e3:79:dd:91:6a:b6:3e:1c:00:3b:b2:
         62:2a:58:6f:72:06:6d:41:a6:4c:98:f9:83:d1:8e:17:98:79:
         13:3a:11:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tRZdq9T/O2B45a9s2tZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDMyMmIyZDBhNzk0ZmQwNzZiODVlOGRjNTc4YWJiMGQw
M2VjNDAwHhcNMjUxMDE5MjMwMTQ0WhcNMjUxMDIwMjMwMTQ0WjAzMTEwLwYDVQQD
EyhjMmNjZWM1MTFjNmNkZjVkZTIzZTkzMDZiNTFkOTNhODYyOGM3Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+N6BJ01YA4/TvgR80i2Gk7GHFqA
66GsMs6H1sgcmX5c6GiF4dWtDE8J3Fr8xThvd7VcsjGCkCsUo24CIaAX3uMoaSL7
9NI4YoojTtrLtsZQrfJ/+3xieyHonzvsVp65ZwpxJz9QrsKVMfu7BwC6X757Zcr+
2cA34NNNFUMnt+13j+Zdw0d1Rp4yHh1UxUibTvPppAkL8jQCx5BPRjoyI4UAApee
oorLx8aIcXBpc0M+gIEYQFLf1eldOLqS2na7wmRdJ+3xo8+CG697na/JPurfy5QC
b39OgYha+bza+WJgUReG3PTmyT01MHwhfz3oWiX8+Z7E+/N9AXK9fFKsNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLM7FEcbN9d4j6TBrUdk6hijHN3MB8GA1UdIwQY
MBaAFNJDIrLQp5T9B2uF6NxXirsNA+xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmIt
MTM5YTQ5NmNkNTljLzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmItMTM5YTQ5NmNkNTlj
LzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRculIr1
lyB7ISpeLKe/lfUvs40rheONmZ76mP7ViTP2jCNSeYB2BqSlHbpcC3eGX2phzB9V
zFXRPcPq8xEbmqyxBtoVmEok2xZsBRvcUCsCcLyQ53yzIQbvkxEs7cpXqmjCPQw5
+25+r3P4m1EDHS7bfsS2x2YJOGrAQQuhOtlUR0NnVISn7UTaKNQX0wUkjexXhLTe
cAhY9tDxLDid24mTy/I5FYbVlDM6y+vTJumEEg3pEwiMM3zISohpbos+5YY6/bBB
lhBq6muGelXh6/wCTdDi3pP+19nuUpbLGuN53ZFqtj4cADuyYipYb3IGbUGmTJj5
g9GOF5h5EzoRbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:06 2025 by rpki-client