Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File:                     sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier:          AoRSsIaWJNJzIe471Hr1T4g0WxTCmwV2aE0FC5MD0gg=
Subject key identifier:   4C:32:74:5A:54:9D:CB:90:DD:89:09:FF:1D:16:60:35:CD:51:87:82
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer:       /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial:       0199FB45E0725263AFBB8090F6925FB03F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number:          051C
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
                          2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: q9NzlnhpbXKkQpBBDweuxaWkCIzfWhuCa1Hj4dRiBOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e0:72:52:63:af:bb:80:90:f6:92:5f:b0:3f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=4c32745a549dcb90dd8909ff1d166035cd518782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:3a:19:8d:8c:b9:6d:61:b7:ff:c1:91:51:
                    7b:aa:47:b1:37:27:df:b5:d3:09:67:d2:0d:64:2c:
                    a6:64:c1:c8:c9:ad:88:cb:28:92:a4:e1:2d:ec:d4:
                    f7:4b:42:78:a7:51:5a:37:cf:1a:08:ee:4b:11:90:
                    4d:0b:80:74:59:a6:cc:c8:3b:7c:ef:e0:c7:a4:a9:
                    ee:7e:4c:41:b7:ed:82:bb:60:06:42:a1:f6:e7:30:
                    0d:86:75:d9:c3:51:e1:a0:9c:9e:df:aa:ee:b3:ff:
                    4b:f0:ca:4e:c7:00:02:5d:3e:f6:95:a5:d6:42:91:
                    80:44:f8:a5:b1:83:87:cb:8c:57:c9:cd:e5:7d:3d:
                    46:e7:a8:96:e9:d6:d2:9d:9d:9e:d7:e6:87:6f:eb:
                    da:a7:bc:aa:43:cb:82:7a:ad:6b:4d:ee:fa:3a:a7:
                    79:09:b4:53:ef:3d:74:9f:33:fa:4f:ce:21:d8:8a:
                    28:e7:9a:be:1c:69:82:0d:94:ea:b7:45:82:e0:99:
                    a1:2d:1c:d6:27:74:0b:02:5c:2b:9a:e8:80:7b:28:
                    89:7c:d8:8e:84:f3:7f:6b:fd:1c:96:b4:60:d4:de:
                    58:31:de:24:0c:d3:b7:a3:95:ae:cd:a5:f8:38:02:
                    ee:1f:82:15:8e:d7:b8:45:a7:d0:78:db:91:22:21:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:74:5A:54:9D:CB:90:DD:89:09:FF:1D:16:60:35:CD:51:87:82
            X509v3 Authority Key Identifier:
                keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:8e:5e:13:88:2d:ba:b5:35:60:3b:4b:50:c4:39:d0:5e:
         07:82:c6:ea:8e:d2:42:8a:a3:23:81:76:a9:6c:3d:7f:9d:2b:
         01:2e:42:e3:dd:93:6f:b2:6a:db:b0:f3:43:20:99:63:a3:d5:
         f3:1a:31:e2:3a:43:af:92:de:84:9f:f7:5a:7c:89:80:50:9a:
         42:ec:41:34:9e:07:2e:4a:94:97:3d:46:cd:02:1f:e0:5f:48:
         ab:0c:ad:63:6b:39:94:60:ae:17:13:df:00:c0:e6:64:a8:d1:
         db:82:ed:eb:ba:2d:62:59:74:e9:30:bc:53:50:ba:05:ff:b7:
         da:47:61:4a:39:e1:47:76:21:5c:7d:a5:64:c5:4f:48:80:fb:
         95:ac:eb:79:44:8e:03:5c:38:fd:99:75:a9:8b:f2:d0:90:25:
         0b:92:76:d3:e5:8b:df:0d:8b:a9:b9:0a:ec:ba:ba:c8:0b:65:
         c4:61:65:b9:51:2e:9d:bf:4e:cb:27:8b:04:cf:67:dd:74:c1:
         43:25:ec:bf:03:43:e6:09:55:b6:ee:37:ef:67:4e:0d:52:37:
         8d:2b:8b:02:7f:46:80:4c:03:d1:ec:0c:a0:a8:3e:0f:bc:b8:
         65:4a:00:ad:d7:22:de:bf:fa:40:9c:a2:b2:f3:44:a9:00:eb:
         8e:0d:e8:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7ReByUmOvu4CQ9pJfsD9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmE5YWYyZmM1ZmU5M2M0MzE0OGFhY2IxM2M1MWJlOTA0
YzhlNGMwHhcNMjUxMDE5MDcwMTI0WhcNMjUxMDIwMDcwMTI0WjAzMTEwLwYDVQQD
Eyg0YzMyNzQ1YTU0OWRjYjkwZGQ4OTA5ZmYxZDE2NjAzNWNkNTE4NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tA6GY2MuW1ht//BkVF7qkexNyff
tdMJZ9INZCymZMHIya2IyyiSpOEt7NT3S0J4p1FaN88aCO5LEZBNC4B0WabMyDt8
7+DHpKnufkxBt+2Cu2AGQqH25zANhnXZw1HhoJye36rus/9L8MpOxwACXT72laXW
QpGARPilsYOHy4xXyc3lfT1G56iW6dbSnZ2e1+aHb+vap7yqQ8uCeq1rTe76Oqd5
CbRT7z10nzP6T84h2Ioo55q+HGmCDZTqt0WC4JmhLRzWJ3QLAlwrmuiAeyiJfNiO
hPN/a/0clrRg1N5YMd4kDNO3o5WuzaX4OALuH4IVjte4RafQeNuRIiEZEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwydFpUncuQ3YkJ/x0WYDXNUYeCMB8GA1UdIwQY
MBaAFLAqmvL8X+k8QxSKrLE8Ub6QTI5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAt
NWVjYTM2ZTE5ZjVkLzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAtNWVjYTM2ZTE5ZjVk
LzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLqOXhOI
Lbq1NWA7S1DEOdBeB4LG6o7SQoqjI4F2qWw9f50rAS5C492Tb7Jq27DzQyCZY6PV
8xox4jpDr5LehJ/3WnyJgFCaQuxBNJ4HLkqUlz1GzQIf4F9IqwytY2s5lGCuFxPf
AMDmZKjR24Lt67otYll06TC8U1C6Bf+32kdhSjnhR3YhXH2lZMVPSID7lazreUSO
A1w4/Zl1qYvy0JAlC5J20+WL3w2LqbkK7Lq6yAtlxGFluVEunb9OyyeLBM9n3XTB
QyXsvwND5glVtu4372dODVI3jSuLAn9GgEwD0ewMoKg+D7y4ZUoArdci3r/6QJyi
svNEqQDrjg3omA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:18 2025 by rpki-client