Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft
File:                     FeDAeeu-6UU630B4M0ABZJdxDgg.mft (raw, json)
Hash identifier:          VQMxxRUqDlrjep6L3n1+Kyn2gu9Bfm45iq+TmsjCdRI=
Subject key identifier:   D5:9E:B7:2C:F7:0C:71:98:D5:32:66:08:55:FD:C4:A7:0B:C9:0E:4B
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Certificate issuer:       /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial:       019A1D62F858C0CB0468C002CB5420270B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft
Manifest number:          15F0
Signing time:             Sat 25 Oct 2025 22:00:16 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:16 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:16 +0000
Files and hashes:         1: FeDAeeu-6UU630B4M0ABZJdxDgg.crl (hash: nAOoNfzC1cAJHraA+5xB+6cjwsIkX86SByOd/qgvsqc=)
                          2: pZt3ngFeHMLCYRctddSSVqyWLjE.roa (hash: 5bKbQPRPEL96MgpUc8HDOLgV+nQrWiSTGSjPvFzOvNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:62:f8:58:c0:cb:04:68:c0:02:cb:54:20:27:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
        Validity
            Not Before: Oct 25 22:00:16 2025 GMT
            Not After : Oct 26 22:00:16 2025 GMT
        Subject: CN=d59eb72cf70c7198d532660855fdc4a70bc90e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:7d:f1:61:cd:89:f5:b3:ce:d8:75:71:af:
                    af:67:b3:ab:25:e8:7d:9a:d6:04:aa:ed:ba:a1:0b:
                    62:9a:8c:f4:7f:5c:02:b6:92:dd:2b:45:34:74:52:
                    91:3f:fc:88:09:31:cb:b6:14:4c:84:d6:41:9b:d9:
                    59:95:1e:73:1f:c5:d7:ab:ef:f9:43:ca:a6:14:aa:
                    14:7e:55:5a:23:94:fb:f0:7d:e5:ae:c6:89:c5:83:
                    27:71:61:43:d4:10:41:85:d6:a0:ee:fc:5f:17:39:
                    ff:4a:fa:1b:d7:62:01:50:23:74:6f:d2:d6:17:c7:
                    7f:f1:91:f9:13:2e:46:93:c7:6c:d9:42:11:6a:71:
                    db:22:da:13:f5:b7:a6:b2:8a:66:e3:c8:68:c0:b9:
                    99:95:c9:b3:d5:95:a9:2e:c5:28:87:ec:52:e0:d2:
                    6a:d7:18:fc:2f:e9:ef:78:94:cf:f3:91:8d:b9:ae:
                    76:43:a3:4a:64:57:c4:cb:0d:cb:4e:a0:fa:5e:d4:
                    68:39:fb:b9:8e:e2:ba:a5:61:b4:15:1f:88:0b:49:
                    6d:46:a3:60:ce:ea:91:6e:87:71:28:fd:82:8c:3a:
                    81:da:92:8a:27:01:3f:20:ae:9f:2d:7f:34:a0:04:
                    76:0f:6a:cd:d3:df:a1:98:95:9e:ec:f2:16:37:0a:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:B7:2C:F7:0C:71:98:D5:32:66:08:55:FD:C4:A7:0B:C9:0E:4B
            X509v3 Authority Key Identifier:
                keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:17:99:c7:6f:75:ce:80:83:52:79:6b:99:c3:3c:c7:f9:5f:
         9c:71:7f:92:2d:aa:a6:9d:22:cb:1e:64:df:73:3f:ea:cb:b9:
         67:39:d7:f1:7d:02:4b:f4:3d:ad:1a:65:01:1d:58:e8:0e:3b:
         7a:72:10:f8:dc:45:92:90:99:25:72:af:2a:d8:bd:77:34:20:
         ab:a7:96:b8:98:60:b4:c4:b6:11:e2:2e:5f:3e:ea:e6:1b:ae:
         73:93:2d:82:db:bf:0a:ab:44:15:30:8b:55:38:3f:13:88:24:
         7c:81:46:b7:31:f4:b7:cc:c5:b5:f7:c8:7a:45:1e:3d:43:d2:
         c9:1d:bd:52:d5:bd:15:22:bc:39:8d:b6:5e:9c:f7:61:79:d5:
         d1:ca:3f:7b:40:70:f6:8e:af:3f:c7:14:bd:46:48:e6:41:7c:
         8a:03:0d:7a:57:ac:fd:54:d7:13:18:4a:ed:0a:aa:d5:3e:d3:
         6c:92:22:a3:64:0e:77:a8:18:af:29:6f:d3:d3:ae:08:2b:8a:
         a7:9c:e4:90:96:f5:0e:ba:f8:dd:06:04:36:34:87:31:5e:71:
         f5:9b:68:a1:21:e4:41:c2:a9:40:5d:4b:7a:f9:58:11:50:e7:
         e4:b1:2c:1f:28:e3:55:0b:d5:08:aa:69:a2:91:07:75:b0:56:
         31:8b:ca:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodYvhYwMsEaMACy1QgJwtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZTBjMDc5ZWJiZWU5NDUzYWRmNDA3ODMzNDAwMTY0OTc3
MTBlMDgwHhcNMjUxMDI1MjIwMDE2WhcNMjUxMDI2MjIwMDE2WjAzMTEwLwYDVQQD
EyhkNTllYjcyY2Y3MGM3MTk4ZDUzMjY2MDg1NWZkYzRhNzBiYzkwZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzld98WHNifWzzth1ca+vZ7OrJeh9
mtYEqu26oQtimoz0f1wCtpLdK0U0dFKRP/yICTHLthRMhNZBm9lZlR5zH8XXq+/5
Q8qmFKoUflVaI5T78H3lrsaJxYMncWFD1BBBhdag7vxfFzn/Svob12IBUCN0b9LW
F8d/8ZH5Ey5Gk8ds2UIRanHbItoT9bemsopm48howLmZlcmz1ZWpLsUoh+xS4NJq
1xj8L+nveJTP85GNua52Q6NKZFfEyw3LTqD6XtRoOfu5juK6pWG0FR+IC0ltRqNg
zuqRbodxKP2CjDqB2pKKJwE/IK6fLX80oAR2D2rN09+hmJWe7PIWNwpAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWetyz3DHGY1TJmCFX9xKcLyQ5LMB8GA1UdIwQY
MBaAFBXgwHnrvulFOt9AeDNAAWSXcQ4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmVEQWVldS02VVU2MzBCNE0wQUJaSmR4RGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2RiN2MtNjRiNi00MzYxLWEwMzAt
OWI4OGFiZWQ2MjY0LzEvRmVEQWVldS02VVU2MzBCNE0wQUJaSmR4RGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yN2RiN2MtNjRiNi00MzYxLWEwMzAtOWI4OGFiZWQ2MjY0
LzEvRmVEQWVldS02VVU2MzBCNE0wQUJaSmR4RGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxeZx291
zoCDUnlrmcM8x/lfnHF/ki2qpp0iyx5k33M/6su5ZznX8X0CS/Q9rRplAR1Y6A47
enIQ+NxFkpCZJXKvKti9dzQgq6eWuJhgtMS2EeIuXz7q5huuc5Mtgtu/CqtEFTCL
VTg/E4gkfIFGtzH0t8zFtffIekUePUPSyR29UtW9FSK8OY22Xpz3YXnV0co/e0Bw
9o6vP8cUvUZI5kF8igMNeles/VTXExhK7Qqq1T7TbJIio2QOd6gYrylv09OuCCuK
p5zkkJb1Drr43QYENjSHMV5x9ZtooSHkQcKpQF1LevlYEVDn5LEsHyjjVQvVCKpp
opEHdbBWMYvKsg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:42:27 2025 by rpki-client