Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          lf5z6r3pPnSsrLxMxVRTVpZUTzGq3BzbgT/E1ebknYo=
Subject key identifier:   27:13:D2:16:51:A5:AF:A8:A9:49:87:14:D7:B1:4C:81:03:3D:41:12
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       019A0B25B0DEBD28C35DCBAA8937363215DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0E16
Signing time:             Wed 22 Oct 2025 09:00:10 +0000
Manifest this update:     Wed 22 Oct 2025 09:00:10 +0000
Manifest next update:     Thu 23 Oct 2025 09:00:10 +0000
Files and hashes:         1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          2: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          3: CWC-_a8HUEUvngVKFseL99HpvO8.roa (hash: bBD89zUEpX0u+izz9bm4cDvyJ5cJ+pVnrC9fz46p5LY=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: dEvRcTm3BBBOaHA9HrzVkwu5NWdrjPeLgfQxJ/Mcy3A=)
                          5: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=)
                          6: ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa (hash: uICBvePHH26ZnEOUDyEGetCnDDAiofNJKq9IFV1xei0=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:25:b0:de:bd:28:c3:5d:cb:aa:89:37:36:32:15:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Oct 22 09:00:10 2025 GMT
            Not After : Oct 23 09:00:10 2025 GMT
        Subject: CN=2713d21651a5afa8a9498714d7b14c81033d4112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:2b:a3:b8:8b:09:76:26:74:14:cf:7b:38:
                    48:9e:d7:de:b5:24:ac:15:17:d9:bb:02:77:4b:b6:
                    35:d9:53:1a:11:8d:86:2c:3c:45:d8:e5:ea:ff:01:
                    42:02:68:dd:06:fe:d6:51:0f:37:3c:7b:d8:e6:f4:
                    b4:2a:5f:12:48:2f:ff:46:0a:eb:ca:44:30:f2:69:
                    d2:fd:f4:bd:5f:da:02:fb:93:26:4f:db:e5:9f:88:
                    34:81:00:57:ad:41:9f:9e:4c:ae:13:10:7e:28:f2:
                    80:31:36:a9:d6:50:1a:1d:bc:b3:86:0d:da:0d:0b:
                    01:56:cf:af:5e:d1:9b:7f:16:f2:96:42:86:bb:49:
                    da:96:90:79:72:29:8e:5a:28:dc:f0:93:27:6e:69:
                    c7:23:a1:08:4a:b3:e3:5e:04:8b:fe:f2:51:04:e4:
                    fd:a0:c8:96:8b:3a:58:77:21:f1:c1:4e:e4:9c:54:
                    52:df:4e:b9:21:57:d8:15:4a:57:41:5b:92:7e:69:
                    6b:a4:52:d2:81:4e:b2:23:d3:ff:f9:e0:cc:f5:86:
                    28:c8:c6:e6:76:b7:b2:94:db:cc:0a:a9:fd:73:72:
                    b7:08:4a:13:74:2b:f4:3d:29:c4:43:c0:ba:ff:ec:
                    ca:45:45:b7:6f:0a:14:b0:6c:76:6c:e6:83:9f:75:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:D2:16:51:A5:AF:A8:A9:49:87:14:D7:B1:4C:81:03:3D:41:12
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:df:ef:e6:6b:3b:e1:f2:39:50:c6:72:cb:0a:a8:b7:2b:
         e8:f6:91:92:9f:dc:08:51:a1:60:ff:02:ca:44:50:af:49:a9:
         0f:69:6b:23:03:60:aa:07:0d:64:43:72:73:10:e7:3a:08:2b:
         e4:4d:37:ae:9f:76:ac:ad:8f:cd:9d:43:2d:a4:14:5f:8a:8b:
         ec:3c:ca:72:85:9b:62:13:0c:e0:6f:22:d9:fb:a3:3b:8e:c7:
         8a:f0:c4:f7:bc:73:47:b6:92:42:a0:b8:c7:f1:17:b4:bc:ef:
         f0:11:f0:0b:2f:39:76:63:2d:4a:ee:3f:77:9d:8f:fb:fc:5b:
         0d:78:f3:26:e0:64:40:18:97:d5:d0:b8:1a:9a:32:9e:55:39:
         96:6e:3b:ac:73:6c:be:4f:85:8f:a4:13:d2:df:13:e3:c2:2a:
         7f:f0:f8:25:f0:bc:45:e5:22:74:bf:8d:b5:f4:4d:13:a2:d7:
         04:0e:18:af:cd:0f:3d:12:5e:c4:dc:a8:46:e4:0e:c3:40:8c:
         96:48:18:ea:a4:b3:7c:f0:5d:98:1d:8f:60:b2:3d:55:de:65:
         8b:9b:ee:a7:5e:05:d9:4f:c4:a5:d6:ba:aa:01:79:3f:cd:db:
         e5:d1:0a:15:08:3a:d2:05:a1:dd:5e:4e:a7:f9:39:f9:38:8f:
         b2:b7:81:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLJbDevSjDXcuqiTc2MhXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3
NDIxYTYwHhcNMjUxMDIyMDkwMDEwWhcNMjUxMDIzMDkwMDEwWjAzMTEwLwYDVQQD
EygyNzEzZDIxNjUxYTVhZmE4YTk0OTg3MTRkN2IxNGM4MTAzM2Q0MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw20ro7iLCXYmdBTPezhIntfetSSs
FRfZuwJ3S7Y12VMaEY2GLDxF2OXq/wFCAmjdBv7WUQ83PHvY5vS0Kl8SSC//Rgrr
ykQw8mnS/fS9X9oC+5MmT9vln4g0gQBXrUGfnkyuExB+KPKAMTap1lAaHbyzhg3a
DQsBVs+vXtGbfxbylkKGu0nalpB5cimOWijc8JMnbmnHI6EISrPjXgSL/vJRBOT9
oMiWizpYdyHxwU7knFRS3065IVfYFUpXQVuSfmlrpFLSgU6yI9P/+eDM9YYoyMbm
dreylNvMCqn9c3K3CEoTdCv0PSnEQ8C6/+zKRUW3bwoUsGx2bOaDn3VIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcT0hZRpa+oqUmHFNexTIEDPUESMB8GA1UdIwQY
MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt
N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy
LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOzf7+Zr
O+HyOVDGcssKqLcr6PaRkp/cCFGhYP8CykRQr0mpD2lrIwNgqgcNZENycxDnOggr
5E03rp92rK2PzZ1DLaQUX4qL7DzKcoWbYhMM4G8i2fujO47HivDE97xzR7aSQqC4
x/EXtLzv8BHwCy85dmMtSu4/d52P+/xbDXjzJuBkQBiX1dC4GpoynlU5lm47rHNs
vk+Fj6QT0t8T48Iqf/D4JfC8ReUidL+NtfRNE6LXBA4Yr80PPRJexNyoRuQOw0CM
lkgY6qSzfPBdmB2PYLI9Vd5li5vup14F2U/Epda6qgF5P83b5dEKFQg60gWh3V5O
p/k5+TiPsreBsg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:52:26 2025 by rpki-client