Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File:                     tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier:          zxsqahroijqt+ypGxbnfZH2Ib84RKB26+VycxYbdN9U=
Subject key identifier:   5C:6E:19:BB:59:0D:F2:92:50:86:87:7A:A0:20:78:EA:F6:6C:5B:C0
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer:       /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial:       01995454F7F7518EDB82A42217AD0E337667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number:          0374
Signing time:             Tue 16 Sep 2025 21:01:18 +0000
Manifest this update:     Tue 16 Sep 2025 21:01:18 +0000
Manifest next update:     Wed 17 Sep 2025 21:01:18 +0000
Files and hashes:         1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
                          2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: GXwafSxzpWxnLxr1SMN/HcSjyZEnzv97HotVnVkXKVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:54:54:f7:f7:51:8e:db:82:a4:22:17:ad:0e:33:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
        Validity
            Not Before: Sep 16 21:01:18 2025 GMT
            Not After : Sep 17 21:01:18 2025 GMT
        Subject: CN=5c6e19bb590df2925086877aa02078eaf66c5bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:2e:4b:26:ea:73:2d:17:3c:ab:a5:ab:81:
                    4c:d9:31:76:a7:87:52:aa:a7:88:03:27:fa:51:c7:
                    a7:44:86:a5:fe:73:99:56:e5:f9:ab:2d:e4:85:08:
                    ac:90:24:39:76:d4:ac:69:ff:e9:d7:90:fb:19:23:
                    b6:f4:a9:8e:c9:e5:c6:f3:1d:6b:a6:53:82:fa:07:
                    a1:4f:16:47:d2:cd:a7:e6:64:cf:eb:1d:ba:4e:92:
                    03:59:85:9d:eb:15:f1:72:ef:7d:ef:00:ea:6f:08:
                    2a:46:7c:aa:d9:30:f9:dc:f9:a3:2b:ac:16:c3:86:
                    21:09:39:9e:c3:5f:39:96:98:18:a8:e1:05:b4:19:
                    23:3f:3c:c7:d0:c1:72:8a:3f:0b:a8:ce:dc:11:54:
                    67:e7:ce:e6:8a:31:d6:4d:98:cc:24:48:dc:db:b9:
                    a9:a0:f7:0a:81:ed:13:e9:d6:75:86:cf:21:d5:a6:
                    c4:35:6d:28:af:c6:44:0f:d6:92:ff:4f:9b:fe:07:
                    72:d0:cf:2f:48:42:6f:54:72:80:47:b0:43:79:3f:
                    29:6f:2f:c5:ff:07:77:34:c7:71:93:c5:d3:e6:74:
                    b5:43:ed:4d:42:d7:05:02:84:d2:9e:86:e4:2e:cd:
                    3e:65:f7:40:35:e5:d0:b0:85:61:64:a4:21:c1:b1:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6E:19:BB:59:0D:F2:92:50:86:87:7A:A0:20:78:EA:F6:6C:5B:C0
            X509v3 Authority Key Identifier:
                keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:57:8c:86:a5:26:d8:97:f9:b0:49:f0:4b:1c:97:4b:61:93:
         b6:95:4d:9b:4c:59:6c:05:5a:c1:58:34:c2:e6:bf:1b:68:43:
         63:0d:9f:01:f0:5b:f4:72:0a:98:06:36:fb:9d:2f:fc:55:38:
         fb:59:cf:5f:64:19:eb:a5:b9:a5:52:28:26:7c:c8:0a:1e:18:
         24:80:83:20:11:07:0a:3d:00:3a:84:50:fc:ea:39:67:74:18:
         6c:41:c1:c0:97:56:da:1e:cf:9d:aa:a4:de:37:7f:70:2e:81:
         49:ad:66:03:97:6b:07:1d:3a:02:44:15:0a:cf:5d:bd:f7:96:
         09:80:e3:21:6b:7d:ae:f8:89:d2:0f:fd:3c:49:73:d2:f3:aa:
         bb:79:81:7a:d1:b2:84:de:2a:af:15:f2:48:fc:db:c9:58:08:
         bb:a7:88:f8:bb:e5:6d:e9:bf:b8:4d:c8:6b:78:5c:b0:bd:b3:
         a3:42:52:f8:67:60:19:86:36:41:1f:83:d6:b5:48:01:46:1f:
         86:3d:fd:da:2d:03:c8:ac:0f:d1:5a:7f:34:4f:3a:27:8b:6d:
         e2:c1:00:aa:c2:b3:24:5f:7d:b0:72:30:76:0c:c2:6b:99:97:
         72:88:27:bb:d9:ce:5b:99:ae:8d:eb:58:bf:9b:07:7c:90:cc:
         9b:5d:6f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlUVPf3UY7bgqQiF60OM3ZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1
NDcyZWMwHhcNMjUwOTE2MjEwMTE4WhcNMjUwOTE3MjEwMTE4WjAzMTEwLwYDVQQD
Eyg1YzZlMTliYjU5MGRmMjkyNTA4Njg3N2FhMDIwNzhlYWY2NmM1YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eEuSybqcy0XPKulq4FM2TF2p4dS
qqeIAyf6UcenRIal/nOZVuX5qy3khQiskCQ5dtSsaf/p15D7GSO29KmOyeXG8x1r
plOC+gehTxZH0s2n5mTP6x26TpIDWYWd6xXxcu997wDqbwgqRnyq2TD53PmjK6wW
w4YhCTmew185lpgYqOEFtBkjPzzH0MFyij8LqM7cEVRn587mijHWTZjMJEjc27mp
oPcKge0T6dZ1hs8h1abENW0or8ZED9aS/0+b/gdy0M8vSEJvVHKAR7BDeT8pby/F
/wd3NMdxk8XT5nS1Q+1NQtcFAoTSnobkLs0+ZfdANeXQsIVhZKQhwbHX0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxuGbtZDfKSUIaHeqAgeOr2bFvAMB8GA1UdIwQY
MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt
N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw
LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA01eMhqUm
2Jf5sEnwSxyXS2GTtpVNm0xZbAVawVg0wua/G2hDYw2fAfBb9HIKmAY2+50v/FU4
+1nPX2QZ66W5pVIoJnzICh4YJICDIBEHCj0AOoRQ/Oo5Z3QYbEHBwJdW2h7Pnaqk
3jd/cC6BSa1mA5drBx06AkQVCs9dvfeWCYDjIWt9rviJ0g/9PElz0vOqu3mBetGy
hN4qrxXySPzbyVgIu6eI+Lvlbem/uE3Ia3hcsL2zo0JS+GdgGYY2QR+D1rVIAUYf
hj392i0DyKwP0Vp/NE86J4tt4sEAqsKzJF99sHIwdgzCa5mXcognu9nOW5mujetY
v5sHfJDMm11v/w==
-----END CERTIFICATE-----
Generated at Wed Sep 17 06:42:13 2025 by rpki-client