Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          3xlVpl4wCMKZ+Js3L/4yYK8NM5HlLp4x7AHlnbI1QWU=
Subject key identifier:   6D:0F:26:EE:65:28:03:39:CA:C8:82:35:FD:A8:CD:97:F0:FC:60:B4
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       019A2E2030C5F582D2A7B37E6FB32FCEF7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          16FD
Signing time:             Wed 29 Oct 2025 04:00:52 +0000
Manifest this update:     Wed 29 Oct 2025 04:00:52 +0000
Manifest next update:     Thu 30 Oct 2025 04:00:52 +0000
Files and hashes:         1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: rIN1V6dnUvrRtmGMZLwhzjINiUDkgEmrQnkdJnVfD28=)
                          3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=)
                          4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2e:20:30:c5:f5:82:d2:a7:b3:7e:6f:b3:2f:ce:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Oct 29 04:00:52 2025 GMT
            Not After : Oct 30 04:00:52 2025 GMT
        Subject: CN=6d0f26ee65280339cac88235fda8cd97f0fc60b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:13:4e:a3:7e:3d:96:75:b4:73:9c:58:19:
                    56:dd:23:51:50:bc:08:97:83:17:21:25:e8:5b:02:
                    d4:f5:65:06:31:ec:77:7d:ab:b9:38:fb:4a:19:cd:
                    99:11:36:36:89:a8:0a:80:1a:71:5d:12:df:6a:ae:
                    20:cc:4d:ee:59:c6:09:ec:3e:b5:0a:f3:c8:44:08:
                    fe:85:e6:98:1f:23:17:ba:be:1f:d0:51:18:cd:68:
                    76:8e:33:68:49:ef:ed:a2:63:a8:e8:a7:41:a6:69:
                    97:ef:35:76:de:cd:10:24:20:ff:e8:5d:ae:96:d1:
                    4f:2d:f5:ce:8e:6d:fa:96:ed:26:7f:5f:c5:48:89:
                    c0:b1:13:75:6b:57:2c:2f:01:08:21:8a:20:53:2a:
                    43:fc:b1:c6:1f:36:e4:c5:ad:71:a3:5c:15:89:6c:
                    8c:92:43:19:b1:75:46:71:a7:2d:73:29:fa:01:0b:
                    62:3b:a3:23:38:e9:1e:2a:23:b1:b8:3d:17:f9:ff:
                    61:66:43:e3:24:71:66:dc:77:a6:dc:b1:7d:4c:4d:
                    f9:bf:39:f7:a5:79:10:69:74:94:6c:ba:95:a8:5c:
                    f4:df:29:42:74:fb:7e:3e:7c:a6:ba:b7:06:29:25:
                    ba:00:0d:aa:19:6b:a2:8c:5c:27:0e:3e:2a:a3:39:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:26:EE:65:28:03:39:CA:C8:82:35:FD:A8:CD:97:F0:FC:60:B4
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:7f:fc:aa:c3:35:1c:c4:c4:b1:4e:d5:d7:a3:74:43:07:
         4b:54:67:7b:df:8a:c7:74:d2:af:df:da:58:84:6b:c8:85:12:
         a8:af:fb:8a:3c:d0:11:f1:2d:ff:89:7d:b3:34:fa:f3:3b:c6:
         0f:53:34:a8:d1:10:96:51:ed:37:2e:d4:40:fc:98:4b:34:67:
         74:68:a4:46:8b:0f:42:1d:3c:77:d5:60:5a:96:5e:de:32:01:
         1e:d9:68:50:73:5d:21:56:4d:58:58:25:df:88:0a:76:81:7b:
         ed:00:d5:c1:d4:4f:2e:a9:1e:ac:07:15:0b:1d:9d:3b:ae:c1:
         53:08:ad:7b:7a:db:3c:f0:1c:dc:9b:f9:38:3c:3c:92:e3:d1:
         8e:88:79:92:84:b4:f2:e7:79:32:26:b2:e1:9c:c2:ee:1a:5a:
         b1:ec:ad:51:4a:63:64:29:7c:b0:d4:06:c7:d6:33:f3:91:cf:
         ac:9e:a6:8e:2f:d9:30:89:fc:2e:16:cd:e9:1a:5f:b5:15:c6:
         8e:19:f7:9a:2d:c0:3d:0b:70:d8:dd:86:7c:ca:07:5e:3c:ce:
         fa:3a:24:dd:fa:77:64:ae:1a:e7:c0:b5:94:71:e2:2f:ec:75:
         fe:ca:c0:48:76:4d:86:93:ed:ad:12:63:00:10:e9:f4:89:9c:
         53:c3:00:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIDDF9YLSp7N+b7MvzvfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw
Yjc3NjEwHhcNMjUxMDI5MDQwMDUyWhcNMjUxMDMwMDQwMDUyWjAzMTEwLwYDVQQD
Eyg2ZDBmMjZlZTY1MjgwMzM5Y2FjODgyMzVmZGE4Y2Q5N2YwZmM2MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdETTqN+PZZ1tHOcWBlW3SNRULwI
l4MXISXoWwLU9WUGMex3fau5OPtKGc2ZETY2iagKgBpxXRLfaq4gzE3uWcYJ7D61
CvPIRAj+heaYHyMXur4f0FEYzWh2jjNoSe/tomOo6KdBpmmX7zV23s0QJCD/6F2u
ltFPLfXOjm36lu0mf1/FSInAsRN1a1csLwEIIYogUypD/LHGHzbkxa1xo1wViWyM
kkMZsXVGcactcyn6AQtiO6MjOOkeKiOxuD0X+f9hZkPjJHFm3Hem3LF9TE35vzn3
pXkQaXSUbLqVqFz03ylCdPt+PnymurcGKSW6AA2qGWuijFwnDj4qozl1JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0PJu5lKAM5ysiCNf2ozZfw/GC0MB8GA1UdIwQY
MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt
MTk4YjZhNjFjZTg1LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1
LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJZ//KrD
NRzExLFO1dejdEMHS1Rne9+Kx3TSr9/aWIRryIUSqK/7ijzQEfEt/4l9szT68zvG
D1M0qNEQllHtNy7UQPyYSzRndGikRosPQh08d9VgWpZe3jIBHtloUHNdIVZNWFgl
34gKdoF77QDVwdRPLqkerAcVCx2dO67BUwite3rbPPAc3Jv5ODw8kuPRjoh5koS0
8ud5Miay4ZzC7hpaseytUUpjZCl8sNQGx9Yz85HPrJ6mji/ZMIn8LhbN6RpftRXG
jhn3mi3APQtw2N2GfMoHXjzO+jok3fp3ZK4a58C1lHHiL+x1/srASHZNhpPtrRJj
ABDp9ImcU8MA0A==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:43:21 2025 by rpki-client