Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          agVGc7ZXuVK0aDxSHlMJHgS8OYgBNcl4aSvH9Oh/OgY=
Subject key identifier:   DC:A0:65:4A:8C:98:F4:13:77:AA:CD:A9:9F:A6:21:49:93:80:9E:E6
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       0199FC590AC06121CD2B152B49A203F665A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:57 +0000
Files and hashes:         1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
                          2: 2fWP_1okXthOUT5i0EgFPwAGnBc.roa (hash: J5+gVvniOtfHzGOi6xF3xcFK0fGXBXbVbA7PFuVnMdw=)
                          3: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
                          4: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: t2x/2Mglh2tyNGUaOBUbOYEBI6pmKzBY3SmfRHRWqBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0a:c0:61:21:cd:2b:15:2b:49:a2:03:f6:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Oct 19 12:01:57 2025 GMT
            Not After : Oct 20 12:01:57 2025 GMT
        Subject: CN=dca0654a8c98f41377aacda99fa6214993809ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:23:c5:2e:76:07:e9:12:96:cf:30:a3:da:
                    d7:fb:85:8e:42:9c:e8:b4:a8:03:99:35:18:12:73:
                    6c:9b:e1:49:8c:6e:f3:59:ba:07:27:21:a5:89:63:
                    ea:e9:1e:ee:49:bd:cb:c1:9d:08:88:f4:f7:9f:4c:
                    ac:a5:61:ba:0d:81:e0:67:cd:03:a1:05:96:41:de:
                    58:93:20:bc:24:33:97:c9:a8:c4:38:3e:20:1c:2c:
                    af:88:39:86:a1:6c:89:b3:51:a7:09:22:45:52:3b:
                    19:4d:19:26:62:8d:a6:b1:0e:b2:08:01:98:e8:3f:
                    c5:1a:98:23:bf:21:8d:24:e6:11:b6:fa:37:b6:c8:
                    38:c8:0a:32:5c:74:8e:1f:95:b8:c5:81:cd:0e:1d:
                    82:49:1f:85:68:39:6e:0b:a2:31:c3:e6:c1:c1:56:
                    f4:06:0a:ff:4b:fb:ea:74:2a:89:0f:cf:86:b3:a6:
                    49:ef:22:60:1e:3a:a3:7f:02:2e:7a:81:61:72:64:
                    0e:6b:20:08:61:cb:2c:5d:bb:3c:79:ce:41:b1:bf:
                    bf:86:41:96:eb:ea:ce:8b:0a:82:ec:59:e8:ac:b6:
                    f3:b0:14:46:1d:52:28:42:b6:87:39:0a:f2:9b:0e:
                    f8:3b:a7:d3:14:5c:b6:71:35:3e:f6:5d:9b:e9:3c:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:65:4A:8C:98:F4:13:77:AA:CD:A9:9F:A6:21:49:93:80:9E:E6
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:8a:29:92:8f:b1:e4:1d:06:3a:fd:12:c9:c8:fe:6b:5f:
         b9:2c:2b:39:d6:2e:16:dc:b5:06:04:0b:c4:09:f8:cb:aa:f1:
         ed:7d:e8:1f:cc:52:c7:39:52:b7:96:10:63:6d:e6:32:89:e9:
         f8:38:b1:d7:06:da:9c:70:a4:36:2e:4d:59:cd:eb:e2:10:d7:
         79:77:6c:5f:9c:4e:b9:37:c2:3a:42:74:f5:b2:93:13:27:41:
         0d:01:a0:f2:1b:68:3e:5e:1d:63:31:4e:15:a0:4c:0b:bc:23:
         5b:1d:84:b9:70:a4:38:4c:36:a6:7c:44:0b:53:42:6e:e9:a8:
         c3:64:a8:d5:63:01:e0:ce:48:20:dd:64:ae:74:18:e8:bf:89:
         6f:93:24:13:32:a8:e1:12:0a:63:c8:d2:80:0b:52:ef:80:73:
         82:4e:2c:20:e5:4d:5b:bd:10:25:ec:3f:3a:de:7a:1f:ca:cf:
         10:2a:3a:7a:61:3e:f5:20:7f:38:26:53:49:a5:4c:4e:26:c4:
         90:9f:f4:27:03:b2:27:a3:44:98:5c:fa:5c:48:90:68:b6:fd:
         60:e9:6a:8d:96:88:90:18:98:08:5a:78:3c:17:3c:62:0c:63:
         7f:0a:ff:61:7d:44:73:66:c5:9c:c5:75:97:31:9d:bd:69:17:
         41:6e:6c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQrAYSHNKxUrSaID9mWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy
NmI5NmQwHhcNMjUxMDE5MTIwMTU3WhcNMjUxMDIwMTIwMTU3WjAzMTEwLwYDVQQD
EyhkY2EwNjU0YThjOThmNDEzNzdhYWNkYTk5ZmE2MjE0OTkzODA5ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUjxS52B+kSls8wo9rX+4WOQpzo
tKgDmTUYEnNsm+FJjG7zWboHJyGliWPq6R7uSb3LwZ0IiPT3n0yspWG6DYHgZ80D
oQWWQd5YkyC8JDOXyajEOD4gHCyviDmGoWyJs1GnCSJFUjsZTRkmYo2msQ6yCAGY
6D/FGpgjvyGNJOYRtvo3tsg4yAoyXHSOH5W4xYHNDh2CSR+FaDluC6Ixw+bBwVb0
Bgr/S/vqdCqJD8+Gs6ZJ7yJgHjqjfwIueoFhcmQOayAIYcssXbs8ec5Bsb+/hkGW
6+rOiwqC7FnorLbzsBRGHVIoQraHOQrymw74O6fTFFy2cTU+9l2b6TxKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNygZUqMmPQTd6rNqZ+mIUmTgJ7mMB8GA1UdIwQY
MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt
ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0
LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauCKKZKP
seQdBjr9EsnI/mtfuSwrOdYuFty1BgQLxAn4y6rx7X3oH8xSxzlSt5YQY23mMonp
+Dix1wbanHCkNi5NWc3r4hDXeXdsX5xOuTfCOkJ09bKTEydBDQGg8htoPl4dYzFO
FaBMC7wjWx2EuXCkOEw2pnxEC1NCbumow2So1WMB4M5IIN1krnQY6L+Jb5MkEzKo
4RIKY8jSgAtS74Bzgk4sIOVNW70QJew/Ot56H8rPECo6emE+9SB/OCZTSaVMTibE
kJ/0JwOyJ6NEmFz6XEiQaLb9YOlqjZaIkBiYCFp4PBc8Ygxjfwr/YX1Ec2bFnMV1
lzGdvWkXQW5s+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:01:57 2025 by rpki-client