
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File:                     ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier:          5ZZmmkfy8Q6W3j/H/TiCHdORv++ZgqVDFRsdoTpO5wU=
Subject key identifier:   84:F4:D8:82:B9:FB:F2:73:F1:59:D6:F1:2E:31:96:B3:04:A3:2B:85
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       019A4D73A40BFDF4F4E55F32016D607ECA32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number:          145B
Signing time:             Tue 04 Nov 2025 06:00:15 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:15 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:15 +0000
Files and hashes:         1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=)
                          2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=)
                          3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: aH4s7xlFj0Aor71NlVMhCw8IhiXD1IQ6X4CXPFuTxfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:a4:0b:fd:f4:f4:e5:5f:32:01:6d:60:7e:ca:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Nov  4 06:00:15 2025 GMT
            Not After : Nov  5 06:00:15 2025 GMT
        Subject: CN=84f4d882b9fbf273f159d6f12e3196b304a32b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:06:4d:83:0e:31:67:a3:0f:95:37:e4:b1:
                    18:08:e2:07:2d:fa:e9:94:f7:08:cc:6a:40:4b:69:
                    9a:35:c9:7b:3f:6c:4e:1d:a9:bb:a5:c8:4b:8b:1f:
                    a2:f9:ba:fa:8d:85:86:3f:e9:33:c3:69:85:f9:d8:
                    9d:fb:5c:3a:83:07:27:4b:ab:90:2d:50:7c:f0:f0:
                    2b:2e:90:d6:6b:40:f4:6c:a0:4d:63:a8:f7:59:2e:
                    1a:10:9f:62:7b:a5:ea:8c:f9:5f:c7:23:61:b6:47:
                    24:05:93:60:2f:68:7d:8f:7e:9e:70:db:67:05:58:
                    52:0f:f5:19:d3:35:4b:f2:ea:5d:72:4e:28:84:a9:
                    b0:b7:aa:bb:83:62:03:7d:85:75:0f:98:69:d3:b8:
                    70:e1:7d:31:49:12:dc:c4:a0:db:9c:4a:93:54:bd:
                    7c:cb:dd:10:98:48:2e:06:4d:f9:29:79:7f:52:93:
                    4d:1a:41:20:2e:9a:97:b0:57:27:50:ec:38:3a:c7:
                    63:fc:72:61:45:9d:81:c6:22:fb:9d:0d:0d:87:f4:
                    4a:e7:58:80:64:b1:0f:85:58:22:5e:54:67:7a:c6:
                    a2:43:95:34:2e:a5:34:e6:76:95:78:56:67:4a:05:
                    0f:5d:3f:41:29:fa:5c:69:e8:0b:93:54:b2:38:96:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F4:D8:82:B9:FB:F2:73:F1:59:D6:F1:2E:31:96:B3:04:A3:2B:85
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7b:50:e6:cc:f7:3f:f8:7f:4b:a8:f4:4f:11:75:1a:04:da:d2:
         1b:d0:37:1a:3b:98:d3:94:f9:eb:37:0a:97:95:c2:80:b1:6b:
         85:51:99:9c:c9:48:8d:82:c3:d6:be:a5:cd:ac:65:91:87:e8:
         a4:59:40:50:95:cc:4b:95:69:0e:53:51:e6:e1:ac:4d:19:cf:
         9e:bf:c0:cd:ee:75:ce:39:5e:2e:24:f9:6f:8d:cd:6b:9a:26:
         49:8c:01:fb:25:f8:35:54:81:92:78:d2:73:ce:6d:40:8a:95:
         00:28:e6:0a:b8:50:7d:39:6b:5f:a2:f8:12:ad:b0:3f:d6:1c:
         da:b7:00:95:b9:c0:ae:52:69:65:57:dd:a4:a6:98:70:38:19:
         f0:7e:19:63:a2:aa:62:7e:7a:01:63:e2:ce:20:7c:28:33:05:
         c2:b7:68:8c:b5:b6:37:2a:6a:85:13:a7:1a:63:59:cb:4e:38:
         49:b9:1f:61:ab:95:e5:fa:b3:45:e6:d0:5a:f7:f1:2f:c9:a7:
         15:e2:85:af:1f:8c:a2:35:ea:13:4c:a2:b5:6e:c5:c0:24:ec:
         5f:ed:6a:38:65:22:50:24:61:a4:15:ab:b7:dd:cc:7d:31:4c:
         9d:c6:5e:00:bb:1c:e1:2b:95:ae:6a:ff:4c:58:e4:e7:11:73:
         82:b4:80:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc6QL/fT05V8yAW1gfsoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw
ZTBmNWYwHhcNMjUxMTA0MDYwMDE1WhcNMjUxMTA1MDYwMDE1WjAzMTEwLwYDVQQD
Eyg4NGY0ZDg4MmI5ZmJmMjczZjE1OWQ2ZjEyZTMxOTZiMzA0YTMyYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s0GTYMOMWejD5U35LEYCOIHLfrp
lPcIzGpAS2maNcl7P2xOHam7pchLix+i+br6jYWGP+kzw2mF+did+1w6gwcnS6uQ
LVB88PArLpDWa0D0bKBNY6j3WS4aEJ9ie6XqjPlfxyNhtkckBZNgL2h9j36ecNtn
BVhSD/UZ0zVL8updck4ohKmwt6q7g2IDfYV1D5hp07hw4X0xSRLcxKDbnEqTVL18
y90QmEguBk35KXl/UpNNGkEgLpqXsFcnUOw4Osdj/HJhRZ2BxiL7nQ0Nh/RK51iA
ZLEPhVgiXlRnesaiQ5U0LqU05naVeFZnSgUPXT9BKfpcaegLk1SyOJaZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT02IK5+/Jz8VnW8S4xlrMEoyuFMB8GA1UdIwQY
MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt
ODJkOWE5ZWI0MzBjLzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj
LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1DmzPc/
+H9LqPRPEXUaBNrSG9A3GjuY05T56zcKl5XCgLFrhVGZnMlIjYLD1r6lzaxlkYfo
pFlAUJXMS5VpDlNR5uGsTRnPnr/Aze51zjleLiT5b43Na5omSYwB+yX4NVSBknjS
c85tQIqVACjmCrhQfTlrX6L4Eq2wP9Yc2rcAlbnArlJpZVfdpKaYcDgZ8H4ZY6Kq
Yn56AWPiziB8KDMFwrdojLW2NypqhROnGmNZy044SbkfYauV5fqzRebQWvfxL8mn
FeKFrx+MojXqE0yitW7FwCTsX+1qOGUiUCRhpBWrt93MfTFMncZeALsc4SuVrmr/
TFjk5xFzgrSA1w==
-----END CERTIFICATE-----
Generated at Tue Nov  4 13:35:55 2025 by rpki-client