Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          d3pmJ/QO0PQqUnSmEBcwo0CHGqU/CA+mZ3ERHZIiem8=
Subject key identifier:   41:64:52:5A:CA:F6:1A:9F:55:0F:BF:AF:AA:76:86:87:92:79:D9:91
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       0199FC8FA19ED3739FC75BF65E29FB0C45CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 13:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:35 +0000
Files and hashes:         1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
                          2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=)
                          3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
                          4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: gWiKOy00TpKzTZ3+rj6xPjmQJOpwXi8/vj5dCvknxto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a1:9e:d3:73:9f:c7:5b:f6:5e:29:fb:0c:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Oct 19 13:01:35 2025 GMT
            Not After : Oct 20 13:01:35 2025 GMT
        Subject: CN=4164525acaf61a9f550fbfafaa7686879279d991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:85:08:68:63:6c:13:75:97:21:ab:33:56:
                    a1:f9:af:9d:d7:72:5e:d0:0d:11:15:29:27:13:3f:
                    9e:d3:4b:d6:ad:ed:98:48:ad:05:6c:48:0b:ae:82:
                    2e:25:9c:06:1c:65:f0:0f:6b:f1:f1:f3:f2:b0:6b:
                    62:92:ad:57:a9:e4:8c:cd:27:85:e9:90:29:cc:4f:
                    9b:66:59:0b:c2:97:9e:eb:90:28:fc:09:6e:87:42:
                    8c:2f:ab:3c:b0:98:ab:4b:2c:e9:9f:37:a0:f5:3b:
                    51:8d:95:f8:5e:e7:1f:4a:e0:08:1b:6a:b2:58:66:
                    84:09:9c:52:aa:e5:ee:ee:b8:7d:85:3a:e7:63:5b:
                    94:07:d3:cc:3a:ab:97:4d:09:db:94:12:b1:82:a2:
                    63:a0:24:64:26:3b:5b:ea:85:b7:f7:82:11:10:18:
                    6c:5f:8d:5a:6a:c3:ee:c7:69:56:8c:92:f0:32:82:
                    72:77:47:6a:46:2f:b7:1a:c3:ef:5f:4c:1a:1e:92:
                    51:d0:2b:89:0a:fe:3f:02:2d:a0:13:79:e9:46:86:
                    c2:0b:33:67:44:98:9e:70:89:59:38:24:85:34:17:
                    64:dd:ef:ba:04:81:70:87:fb:cb:84:61:7f:81:db:
                    ec:6c:a3:45:3e:f8:a0:d6:eb:6f:b2:c4:77:5e:b3:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:52:5A:CA:F6:1A:9F:55:0F:BF:AF:AA:76:86:87:92:79:D9:91
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:00:c8:c2:80:4e:cb:21:f4:25:07:a0:b8:11:dc:04:f7:
         57:ed:8b:fb:f2:ce:be:d9:5d:2f:62:ec:27:a7:3f:f8:06:88:
         b0:b5:6d:c1:54:16:a1:ac:52:89:01:89:14:fd:ec:4c:6a:6a:
         f8:57:33:ff:f7:f4:a1:7d:04:fa:b2:4f:40:66:a0:d3:13:81:
         df:24:74:d5:a5:56:85:87:3e:b5:5b:3c:40:07:c9:dd:e8:9b:
         5a:c0:83:35:58:45:ff:60:9c:a3:3d:76:4b:8f:fd:93:95:f5:
         7f:6f:3a:55:31:88:0c:b3:1a:c3:71:6f:e8:3d:3e:22:c3:7f:
         ad:be:50:6c:47:f2:70:58:2b:d1:17:61:a4:c0:2c:c0:64:79:
         23:73:2c:2f:4f:88:41:86:20:1c:7c:4d:03:96:61:54:a6:50:
         42:99:0a:e0:f6:46:e6:c3:27:59:49:7c:10:bc:a9:de:8f:49:
         23:3f:eb:24:0c:bf:28:89:b0:bd:5c:f6:eb:5f:dd:64:8f:41:
         80:9b:11:86:0a:34:97:64:10:65:3b:64:bc:cc:3a:4c:70:c1:
         63:c0:26:f3:44:ab:52:ba:49:7b:fb:a0:d4:97:67:27:69:08:
         be:4f:ba:bf:1a:f2:d3:0a:f4:14:f9:62:72:41:90:e8:ac:98:
         c2:5d:30:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6Ge03Ofx1v2Xin7DEXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw
YTZmZDkwHhcNMjUxMDE5MTMwMTM1WhcNMjUxMDIwMTMwMTM1WjAzMTEwLwYDVQQD
Eyg0MTY0NTI1YWNhZjYxYTlmNTUwZmJmYWZhYTc2ODY4NzkyNzlkOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthaFCGhjbBN1lyGrM1ah+a+d13Je
0A0RFSknEz+e00vWre2YSK0FbEgLroIuJZwGHGXwD2vx8fPysGtikq1XqeSMzSeF
6ZApzE+bZlkLwpee65Ao/Aluh0KML6s8sJirSyzpnzeg9TtRjZX4XucfSuAIG2qy
WGaECZxSquXu7rh9hTrnY1uUB9PMOquXTQnblBKxgqJjoCRkJjtb6oW394IREBhs
X41aasPux2lWjJLwMoJyd0dqRi+3GsPvX0waHpJR0CuJCv4/Ai2gE3npRobCCzNn
RJiecIlZOCSFNBdk3e+6BIFwh/vLhGF/gdvsbKNFPvig1utvssR3XrO8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFkUlrK9hqfVQ+/r6p2hoeSedmRMB8GA1UdIwQY
MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt
MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw
LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg0AyMKA
Tssh9CUHoLgR3AT3V+2L+/LOvtldL2LsJ6c/+AaIsLVtwVQWoaxSiQGJFP3sTGpq
+Fcz//f0oX0E+rJPQGag0xOB3yR01aVWhYc+tVs8QAfJ3eibWsCDNVhF/2Ccoz12
S4/9k5X1f286VTGIDLMaw3Fv6D0+IsN/rb5QbEfycFgr0RdhpMAswGR5I3MsL0+I
QYYgHHxNA5ZhVKZQQpkK4PZG5sMnWUl8ELyp3o9JIz/rJAy/KImwvVz261/dZI9B
gJsRhgo0l2QQZTtkvMw6THDBY8Am80SrUrpJe/ug1JdnJ2kIvk+6vxry0wr0FPli
ckGQ6KyYwl0wbQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:06 2025 by rpki-client