Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
File:                     vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json)
Hash identifier:          N5UM2YvhrGGlL+5TFG9gPReE8799/Vt2lxMSrqVvs2Q=
Subject key identifier:   8C:84:63:C9:54:A9:31:FF:00:54:8C:31:A4:A0:0E:38:13:21:AC:74
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Certificate issuer:       /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial:       01993612BA093F9ABDC0C603F3F8F8D0B979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
Manifest number:          0FE9
Signing time:             Thu 11 Sep 2025 00:00:20 +0000
Manifest this update:     Thu 11 Sep 2025 00:00:20 +0000
Manifest next update:     Fri 12 Sep 2025 00:00:20 +0000
Files and hashes:         1: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (hash: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=)
                          2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: eVNU9GAE6+muM/dtqKZjAhNiF8ECf9n0434ue2nzMl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:12:ba:09:3f:9a:bd:c0:c6:03:f3:f8:f8:d0:b9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
        Validity
            Not Before: Sep 11 00:00:20 2025 GMT
            Not After : Sep 12 00:00:20 2025 GMT
        Subject: CN=8c8463c954a931ff00548c31a4a00e381321ac74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:c3:82:e0:17:96:aa:66:39:44:44:e9:d8:
                    25:68:c3:0f:81:8e:7b:7b:63:fb:39:52:19:dd:d4:
                    78:0a:23:52:c1:e0:bb:cb:b1:50:62:83:a1:e5:08:
                    17:12:87:ee:dc:b6:b8:b5:62:53:ac:a1:0c:d2:51:
                    6c:66:46:06:a7:ca:75:a6:fb:df:ee:1b:58:77:b1:
                    d5:ea:f1:6a:3c:3b:98:42:33:05:c7:b3:67:7c:b2:
                    2d:97:4c:85:22:5d:f7:48:7d:36:c8:c4:a1:6c:84:
                    55:52:e3:17:02:a5:b7:a7:c5:41:34:30:b0:22:18:
                    0a:22:e2:f7:cd:d6:75:b1:60:b6:e8:0e:6c:d2:6d:
                    26:f8:24:ad:a5:46:79:e4:4f:31:48:50:c7:f4:c0:
                    0c:17:c2:dd:da:16:58:56:1f:56:82:c1:2f:16:21:
                    95:94:7e:20:de:97:04:5d:ad:56:9a:e8:58:51:49:
                    ed:e2:6f:a6:9c:65:be:c3:f3:1a:2d:89:ea:eb:c3:
                    eb:ba:84:34:31:04:21:2e:fd:20:03:fd:9b:e4:e1:
                    0f:fe:17:36:9d:6d:c3:ad:c1:a6:1c:b3:6f:32:5f:
                    b2:6f:ce:7a:fb:60:f8:6b:f2:11:ed:10:80:17:aa:
                    6a:dc:61:05:ec:57:84:5f:a0:88:9e:a6:4a:ec:de:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:63:C9:54:A9:31:FF:00:54:8C:31:A4:A0:0E:38:13:21:AC:74
            X509v3 Authority Key Identifier:
                keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:3f:2c:f1:35:5b:9d:b0:9d:23:ca:da:45:24:c2:57:23:
         7f:fd:d2:76:7a:a1:76:c5:40:3e:d0:98:74:c2:f3:b6:6c:99:
         1b:b9:1c:ce:6a:43:e4:12:68:95:95:10:76:a9:e8:90:cf:d3:
         86:5a:21:f2:39:92:84:91:26:9c:fd:a1:53:34:c4:ee:97:82:
         1a:e6:8c:36:86:43:1f:bc:8f:0e:dc:61:2b:f1:71:8a:bb:68:
         b6:db:e7:d0:27:fe:29:72:b0:13:65:27:21:c1:d9:71:af:8b:
         c2:b2:96:24:a7:3c:05:05:70:4a:47:42:83:6d:aa:e4:cf:c0:
         df:1e:b7:a1:d8:34:56:e6:80:1c:38:dc:7d:ae:8e:a9:d1:9f:
         0c:81:7d:c3:96:2d:8f:29:67:58:c7:50:c9:fa:27:a2:05:73:
         ab:d4:15:32:64:5b:4e:3d:0b:d2:3f:71:08:d8:8b:87:df:de:
         02:e6:63:0a:38:2e:f7:16:94:9b:5c:55:0e:af:49:1e:79:e8:
         e2:39:2b:64:04:b3:43:6d:69:71:a2:53:4c:e9:b5:2b:53:bd:
         62:51:63:eb:af:06:ee:dd:33:5e:72:de:0c:d5:67:63:18:02:
         a8:24:75:3e:92:d9:d8:cf:a4:54:b4:f0:98:32:db:82:39:80:
         ef:87:ec:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2EroJP5q9wMYD8/j40Ll5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGFiZDc4NGJmMGMwMjQ5YzAxMzlkNjEwZmY5MGE5YWUw
YjcxMjQwHhcNMjUwOTExMDAwMDIwWhcNMjUwOTEyMDAwMDIwWjAzMTEwLwYDVQQD
Eyg4Yzg0NjNjOTU0YTkzMWZmMDA1NDhjMzFhNGEwMGUzODEzMjFhYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCzDguAXlqpmOURE6dglaMMPgY57
e2P7OVIZ3dR4CiNSweC7y7FQYoOh5QgXEofu3La4tWJTrKEM0lFsZkYGp8p1pvvf
7htYd7HV6vFqPDuYQjMFx7NnfLItl0yFIl33SH02yMShbIRVUuMXAqW3p8VBNDCw
IhgKIuL3zdZ1sWC26A5s0m0m+CStpUZ55E8xSFDH9MAMF8Ld2hZYVh9WgsEvFiGV
lH4g3pcEXa1WmuhYUUnt4m+mnGW+w/MaLYnq68PruoQ0MQQhLv0gA/2b5OEP/hc2
nW3DrcGmHLNvMl+yb856+2D4a/IR7RCAF6pq3GEF7FeEX6CInqZK7N4qlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyEY8lUqTH/AFSMMaSgDjgTIax0MB8GA1UdIwQY
MBaAFL1KvXhL8MAknAE51hD/kKmuC3EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQt
YmI1ZjhiODA5YjBjLzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQtYmI1ZjhiODA5YjBj
LzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkk/LPE1
W52wnSPK2kUkwlcjf/3SdnqhdsVAPtCYdMLztmyZG7kczmpD5BJolZUQdqnokM/T
hloh8jmShJEmnP2hUzTE7peCGuaMNoZDH7yPDtxhK/Fxirtottvn0Cf+KXKwE2Un
IcHZca+LwrKWJKc8BQVwSkdCg22q5M/A3x63odg0VuaAHDjcfa6OqdGfDIF9w5Yt
jylnWMdQyfonogVzq9QVMmRbTj0L0j9xCNiLh9/eAuZjCjgu9xaUm1xVDq9JHnno
4jkrZASzQ21pcaJTTOm1K1O9YlFj668G7t0zXnLeDNVnYxgCqCR1PpLZ2M+kVLTw
mDLbgjmA74fsYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 09:13:17 2025 by rpki-client