Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          Hex4JnS4nsfbrdbjQVWG+aEko39IsyQ+ruDd7Ik7IP0=
Subject key identifier:   6E:BF:06:3B:92:BB:51:55:A9:CC:DA:24:61:3E:37:40:4A:76:A3:12
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       019A1BE275C4720CE398602FCCC455179AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          1279
Signing time:             Sat 25 Oct 2025 15:00:17 +0000
Manifest this update:     Sat 25 Oct 2025 15:00:17 +0000
Manifest next update:     Sun 26 Oct 2025 15:00:17 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: OKWXS/ftK9aFD6xwhjld4cJPFkUUPAtwVCqG5h/pblk=)
                          2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:e2:75:c4:72:0c:e3:98:60:2f:cc:c4:55:17:9a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Oct 25 15:00:17 2025 GMT
            Not After : Oct 26 15:00:17 2025 GMT
        Subject: CN=6ebf063b92bb5155a9ccda24613e37404a76a312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:b6:bf:d4:e7:26:3e:1c:e8:d3:4e:02:be:
                    d3:27:41:2c:bb:d3:4a:6c:5d:b6:b1:e4:25:d5:d0:
                    58:2d:3c:69:01:49:65:be:f9:6b:8a:a7:9b:8b:b4:
                    51:6c:3d:10:00:62:cf:92:12:f1:3e:14:f1:5f:da:
                    a3:83:16:56:bc:97:c1:6e:93:5b:73:41:81:d3:f7:
                    63:b0:ad:39:ee:98:f9:e3:d8:81:3e:bc:0f:96:20:
                    ba:39:00:37:cc:d1:42:bb:9b:32:4a:76:16:e6:84:
                    54:ce:e8:a2:4c:51:ba:bb:a6:6e:dd:c3:ec:10:86:
                    e2:c7:4c:a5:30:df:82:c4:c3:79:c2:7e:12:b4:f1:
                    8d:91:56:60:12:12:dc:08:68:58:7c:e4:8c:14:aa:
                    2b:ca:94:ee:4a:f4:63:60:89:87:84:62:94:1c:fe:
                    f6:8e:75:77:db:71:65:59:f6:30:4f:32:04:bc:ac:
                    04:c3:bb:12:7b:66:1e:b2:75:80:55:04:7a:0b:c0:
                    14:dc:a5:e1:db:39:16:51:d4:ad:67:be:ea:05:99:
                    c5:aa:62:c5:ca:6f:db:f5:6e:48:c8:0e:77:c7:a5:
                    d5:ce:62:f6:32:3a:89:2e:f2:91:a1:d3:d1:63:6a:
                    b9:7c:b1:47:2e:91:a9:7c:e2:22:97:94:d7:33:38:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:06:3B:92:BB:51:55:A9:CC:DA:24:61:3E:37:40:4A:76:A3:12
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:3d:60:f9:d3:bf:73:d8:ab:06:6b:c1:59:b9:f2:80:1b:
         b5:c9:c7:86:cf:e7:b9:8f:56:fd:54:84:83:6f:8b:f7:6c:9c:
         0f:8e:95:0c:f4:bf:1f:09:43:9f:32:22:bc:ea:5c:b4:0e:f1:
         c4:93:e5:6f:da:5a:f2:19:3a:d9:77:35:26:58:a3:fe:6c:71:
         39:10:78:17:c9:a2:85:58:54:19:26:d3:7e:92:ef:b1:33:50:
         0b:6f:48:49:35:80:6a:91:df:12:21:36:7a:38:0f:36:86:b9:
         79:1e:e8:9d:3a:c9:fc:4c:53:0a:08:cd:7f:bf:07:e0:cb:f1:
         07:05:28:7e:d3:bd:7c:39:48:80:f2:39:5c:28:9d:24:7d:c0:
         cd:f4:ee:df:6b:5c:bb:51:fa:7d:f6:ee:3d:14:6d:45:ef:ba:
         05:1b:22:b4:4f:cf:fe:ba:5c:ce:76:aa:7d:07:01:a2:55:b1:
         8d:2b:92:dd:ae:d5:dd:30:72:fd:cc:c1:21:f2:4b:71:7b:8e:
         a1:ff:87:cc:ec:dc:70:de:ee:f9:bd:ae:69:fd:7f:9f:37:8c:
         15:68:be:73:78:c8:df:c8:ed:fe:8f:19:a2:a9:31:96:69:a5:
         f2:9b:95:8c:2e:41:d2:00:b5:71:93:df:ea:00:09:d8:5a:87:
         2d:b5:31:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4nXEcgzjmGAvzMRVF5r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl
MWQ0Y2UwHhcNMjUxMDI1MTUwMDE3WhcNMjUxMDI2MTUwMDE3WjAzMTEwLwYDVQQD
Eyg2ZWJmMDYzYjkyYmI1MTU1YTljY2RhMjQ2MTNlMzc0MDRhNzZhMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9W2v9TnJj4c6NNOAr7TJ0Esu9NK
bF22seQl1dBYLTxpAUllvvlriqebi7RRbD0QAGLPkhLxPhTxX9qjgxZWvJfBbpNb
c0GB0/djsK057pj549iBPrwPliC6OQA3zNFCu5sySnYW5oRUzuiiTFG6u6Zu3cPs
EIbix0ylMN+CxMN5wn4StPGNkVZgEhLcCGhYfOSMFKorypTuSvRjYImHhGKUHP72
jnV323FlWfYwTzIEvKwEw7sSe2YesnWAVQR6C8AU3KXh2zkWUdStZ77qBZnFqmLF
ym/b9W5IyA53x6XVzmL2MjqJLvKRodPRY2q5fLFHLpGpfOIil5TXMzi6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6/BjuSu1FVqczaJGE+N0BKdqMSMB8GA1UdIwQY
MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt
YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh
LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTw9YPnT
v3PYqwZrwVm58oAbtcnHhs/nuY9W/VSEg2+L92ycD46VDPS/HwlDnzIivOpctA7x
xJPlb9pa8hk62Xc1Jlij/mxxORB4F8mihVhUGSbTfpLvsTNQC29ISTWAapHfEiE2
ejgPNoa5eR7onTrJ/ExTCgjNf78H4MvxBwUoftO9fDlIgPI5XCidJH3AzfTu32tc
u1H6ffbuPRRtRe+6BRsitE/P/rpcznaqfQcBolWxjSuS3a7V3TBy/czBIfJLcXuO
of+HzOzccN7u+b2uaf1/nzeMFWi+c3jI38jt/o8Zoqkxlmml8puVjC5B0gC1cZPf
6gAJ2FqHLbUxDg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:06:16 2025 by rpki-client