Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          SeiH/XHz2gTtGndiFQ5r7ZlRAMKlWQAs0I6AQ5aWug8=
Subject key identifier:   6E:ED:43:B8:2A:3F:69:90:53:8D:3E:AE:3D:E3:BC:C5:9E:6C:AF:C2
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       019A71B8268B0F9927BBCB81BCC93CB89D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          1395
Signing time:             Tue 11 Nov 2025 07:01:25 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:25 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:25 +0000
Files and hashes:         1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
                          2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: bsb2nIW2BQjyVXJom8nauH/gNEYgLWW2FXrGWS4hAEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:26:8b:0f:99:27:bb:cb:81:bc:c9:3c:b8:9d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Nov 11 07:01:25 2025 GMT
            Not After : Nov 12 07:01:25 2025 GMT
        Subject: CN=6eed43b82a3f6990538d3eae3de3bcc59e6cafc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:ff:a6:83:88:3e:47:89:99:32:1e:6c:a5:
                    b4:64:93:89:ad:25:70:ae:5f:55:60:4f:77:8c:a9:
                    b2:dc:1b:a9:06:33:2b:9f:1d:72:b6:28:9b:4c:2e:
                    e6:e8:86:d1:0d:b0:57:e8:cd:55:de:29:fd:8f:f1:
                    fe:e6:f8:08:35:10:52:fd:08:c3:16:f6:c8:2c:73:
                    fd:6d:f0:3a:8c:2c:19:15:2a:d5:94:17:de:2e:44:
                    6e:2f:3c:1b:b2:da:00:83:b1:b2:e0:88:5a:80:b6:
                    41:cb:86:1d:8c:1d:1e:0c:d3:54:17:f8:e4:e3:e7:
                    e9:83:ff:b6:b0:8d:ae:9c:ea:ec:6e:1c:cb:42:37:
                    14:b3:cf:bb:a0:fd:ac:7d:ce:0e:90:41:bb:b0:ea:
                    63:4c:14:69:19:ae:8c:3c:bf:47:55:f6:f9:5d:ea:
                    d9:73:48:7e:ce:78:83:c3:11:89:a8:2e:88:d9:d8:
                    6e:d7:da:54:0e:b5:20:a9:06:63:76:45:f9:2f:69:
                    4f:c3:15:ff:32:a7:ee:67:49:18:9e:1b:6a:56:4d:
                    9c:de:b0:f1:4b:f5:0e:fd:1d:92:48:8d:84:6b:f0:
                    fb:63:19:80:1f:48:b7:1b:db:1a:d7:8d:96:10:97:
                    17:e6:1d:31:82:aa:e1:d1:80:4c:b0:6f:77:f0:80:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:43:B8:2A:3F:69:90:53:8D:3E:AE:3D:E3:BC:C5:9E:6C:AF:C2
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:9c:c8:17:52:f8:8f:2a:b9:16:66:34:23:a8:23:6a:25:
         e5:cc:db:ea:ff:e8:58:da:06:8d:a0:94:c0:df:da:79:94:59:
         aa:8f:d1:55:90:7f:ed:23:8e:f9:08:72:36:c5:2d:7f:84:ac:
         60:07:bf:5d:d6:79:72:27:49:35:bb:f8:d5:ba:d8:37:4d:e3:
         06:c8:2a:d1:5b:9c:d1:7c:f5:d6:da:c0:e7:d1:e6:44:4f:12:
         7d:e7:3b:ff:d5:2e:f1:db:3b:3e:de:87:02:65:47:52:0a:76:
         15:b0:ab:d7:c0:0f:ce:7b:80:7e:bc:c0:38:b9:5d:20:e0:51:
         7a:c6:5b:ef:1b:91:b3:10:c6:0a:78:3e:2f:78:26:d1:08:a9:
         19:ef:29:75:2a:0e:c0:d2:ea:8c:ae:16:ac:bb:e9:76:0c:01:
         23:a7:f7:ff:0b:93:b6:c4:c6:4e:2a:67:b9:63:26:4e:07:40:
         fa:53:68:5b:29:6f:3c:d2:b1:0a:bf:4e:1b:a8:0d:6c:e3:23:
         ff:59:5d:7a:c0:da:67:6d:3d:a0:1c:ec:d4:6f:c5:12:be:6f:
         ad:60:83:22:48:33:3b:27:6c:62:e6:c3:4e:10:82:c0:40:35:
         6f:10:91:fa:a2:72:04:20:25:27:aa:22:1e:45:e7:d4:b4:0f:
         80:16:f5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCaLD5knu8uBvMk8uJ0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0
NGM3ZjcwHhcNMjUxMTExMDcwMTI1WhcNMjUxMTEyMDcwMTI1WjAzMTEwLwYDVQQD
Eyg2ZWVkNDNiODJhM2Y2OTkwNTM4ZDNlYWUzZGUzYmNjNTllNmNhZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBH/poOIPkeJmTIebKW0ZJOJrSVw
rl9VYE93jKmy3BupBjMrnx1ytiibTC7m6IbRDbBX6M1V3in9j/H+5vgINRBS/QjD
FvbILHP9bfA6jCwZFSrVlBfeLkRuLzwbstoAg7Gy4IhagLZBy4YdjB0eDNNUF/jk
4+fpg/+2sI2unOrsbhzLQjcUs8+7oP2sfc4OkEG7sOpjTBRpGa6MPL9HVfb5XerZ
c0h+zniDwxGJqC6I2dhu19pUDrUgqQZjdkX5L2lPwxX/MqfuZ0kYnhtqVk2c3rDx
S/UO/R2SSI2Ea/D7YxmAH0i3G9sa142WEJcX5h0xgqrh0YBMsG938IBg5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7tQ7gqP2mQU40+rj3jvMWebK/CMB8GA1UdIwQY
MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt
OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2
LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlScyBdS
+I8quRZmNCOoI2ol5czb6v/oWNoGjaCUwN/aeZRZqo/RVZB/7SOO+QhyNsUtf4Ss
YAe/XdZ5cidJNbv41brYN03jBsgq0Vuc0Xz11trA59HmRE8Sfec7/9Uu8ds7Pt6H
AmVHUgp2FbCr18APznuAfrzAOLldIOBResZb7xuRsxDGCng+L3gm0QipGe8pdSoO
wNLqjK4WrLvpdgwBI6f3/wuTtsTGTipnuWMmTgdA+lNoWylvPNKxCr9OG6gNbOMj
/1ldesDaZ209oBzs1G/FEr5vrWCDIkgzOydsYubDThCCwEA1bxCR+qJyBCAlJ6oi
HkXn1LQPgBb1kg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:35 2025 by rpki-client