Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          zW2hv/0K/uNry9gD3o3MehIVgdW50u7a98EUT/9SQTU=
Subject key identifier:   F1:9F:2C:22:48:96:2A:43:01:36:07:A5:14:99:61:2F:0D:44:23:24
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       019A228A17C5C2C7A7D915A42012691896E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          16F5
Signing time:             Sun 26 Oct 2025 22:01:06 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:06 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:06 +0000
Files and hashes:         1: 1Up92kLaciflZCGF6thZ6O_2gb4.roa (hash: MZjlg+hjkFznVUD2gKvbQop6qeX1ypK906BpNhUjgLA=)
                          2: JDa6SY9OudTO59Luwi4g9XuH-5g.roa (hash: 9WJ0L7baOHSNBgfr0oc7eP1UiTVZAMhpoL/3V6eL10k=)
                          3: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: OppKZaBAGfTcAtryY/b6wXsYYjiC3DkrOkcroOfNO+8=)
                          4: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (hash: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=)
                          5: cvzTz2OXBB_yidJBNxcXZxwYdrY.roa (hash: YVNb7JT5aj8Grywf7uIQmWk7NHgm3JKfDMAhwde/BcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:17:c5:c2:c7:a7:d9:15:a4:20:12:69:18:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Oct 26 22:01:06 2025 GMT
            Not After : Oct 27 22:01:06 2025 GMT
        Subject: CN=f19f2c2248962a43013607a51499612f0d442324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:c6:7a:f3:92:9b:6f:2f:20:6a:a6:92:51:
                    c7:71:ff:25:34:b5:af:5d:5c:02:19:fa:d1:c4:ed:
                    aa:68:38:44:64:99:0d:69:93:3e:f8:b8:3c:c8:e7:
                    4b:19:51:57:b3:04:23:2b:f9:a4:07:30:21:85:09:
                    76:98:24:99:7a:a6:7b:63:31:8b:28:29:7d:16:df:
                    80:8f:77:c4:32:53:13:fd:d9:58:12:83:41:2f:43:
                    4f:1e:f2:ef:78:6e:8a:a1:e1:d1:fa:89:85:58:07:
                    3c:d2:82:51:70:e9:de:49:b5:6a:4d:7c:b4:08:e9:
                    b8:49:b8:05:90:32:19:78:1c:31:f8:ae:71:99:fc:
                    f1:be:96:74:78:47:f9:8f:c0:df:c6:2a:15:74:73:
                    fa:b2:5c:83:12:f0:b4:44:61:1b:34:52:cb:38:42:
                    00:32:c5:99:cf:3c:8e:c2:bc:94:8c:95:67:76:44:
                    87:0b:2d:8a:4a:b0:47:87:2b:5d:29:19:8a:54:2c:
                    11:f4:8f:c3:83:f9:af:bb:27:45:b4:cb:b8:1b:26:
                    52:26:ca:23:cb:02:84:7b:c8:d2:1f:f6:ca:b6:f0:
                    e8:1d:bf:0f:d0:00:9a:a8:bc:1c:c0:89:b5:1c:78:
                    bd:6b:22:15:d4:29:28:ee:45:13:bc:80:56:64:16:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9F:2C:22:48:96:2A:43:01:36:07:A5:14:99:61:2F:0D:44:23:24
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:d6:a1:b3:c4:be:de:83:99:15:e2:6b:5b:11:f7:3b:4c:
         67:f5:63:ba:78:e1:cc:4d:7b:17:63:6a:13:19:53:cc:b0:f5:
         b7:af:bb:e4:78:bf:a7:d6:b9:11:43:fa:04:8c:b9:59:20:fd:
         25:41:7a:ea:97:d6:44:a4:5c:cc:f0:ce:b0:a9:ba:77:da:27:
         42:29:d4:0a:a8:c4:b3:72:9f:75:04:4b:a7:78:e9:39:c4:3a:
         ff:d0:50:e9:5c:7f:8d:32:3a:74:54:e6:f4:27:55:1c:69:27:
         97:9f:9b:5c:e0:04:61:5b:df:0f:79:f5:43:84:ed:d8:6e:56:
         e2:bc:07:fc:86:31:c0:56:45:0e:50:23:57:ad:37:d2:c0:6a:
         14:ee:a2:6a:17:f1:c8:5c:fb:f6:55:15:84:ad:6a:89:62:b7:
         c7:99:ca:1a:00:60:2b:89:26:3e:7f:63:48:05:87:31:92:24:
         e8:a1:91:9c:eb:f5:68:62:b4:ff:67:dd:21:67:a3:48:4c:2a:
         be:6d:0d:75:9c:24:37:13:5b:3c:e4:9b:9a:27:b7:ab:7f:26:
         08:9b:a6:ef:dc:4b:c3:cd:6c:10:ba:e4:08:dd:94:f2:bb:2c:
         28:c1:27:d4:71:d4:42:99:e6:93:c3:07:dc:6d:82:e7:19:c8:
         0a:7e:d2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiihfFwsen2RWkIBJpGJbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjUxODBmOWI5M2FlNzU3M2MwOGE4OTRiZDQ1MmJkNzdj
ZTU2Y2QwHhcNMjUxMDI2MjIwMTA2WhcNMjUxMDI3MjIwMTA2WjAzMTEwLwYDVQQD
EyhmMTlmMmMyMjQ4OTYyYTQzMDEzNjA3YTUxNDk5NjEyZjBkNDQyMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7GevOSm28vIGqmklHHcf8lNLWv
XVwCGfrRxO2qaDhEZJkNaZM++Lg8yOdLGVFXswQjK/mkBzAhhQl2mCSZeqZ7YzGL
KCl9Ft+Aj3fEMlMT/dlYEoNBL0NPHvLveG6KoeHR+omFWAc80oJRcOneSbVqTXy0
COm4SbgFkDIZeBwx+K5xmfzxvpZ0eEf5j8DfxioVdHP6slyDEvC0RGEbNFLLOEIA
MsWZzzyOwryUjJVndkSHCy2KSrBHhytdKRmKVCwR9I/Dg/mvuydFtMu4GyZSJsoj
ywKEe8jSH/bKtvDoHb8P0ACaqLwcwIm1HHi9ayIV1Cko7kUTvIBWZBbssQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGfLCJIlipDATYHpRSZYS8NRCMkMB8GA1UdIwQY
MBaAFCf1GA+bk651c8CKiUvUUr13zlbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMt
MzBmZWUyN2U4NGNiLzEvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMtMzBmZWUyN2U4NGNi
LzEvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUK7WobPE
vt6DmRXia1sR9ztMZ/VjunjhzE17F2NqExlTzLD1t6+75Hi/p9a5EUP6BIy5WSD9
JUF66pfWRKRczPDOsKm6d9onQinUCqjEs3KfdQRLp3jpOcQ6/9BQ6Vx/jTI6dFTm
9CdVHGknl5+bXOAEYVvfD3n1Q4Tt2G5W4rwH/IYxwFZFDlAjV6030sBqFO6iahfx
yFz79lUVhK1qiWK3x5nKGgBgK4kmPn9jSAWHMZIk6KGRnOv1aGK0/2fdIWejSEwq
vm0NdZwkNxNbPOSbmie3q38mCJum79xLw81sELrkCN2U8rssKMEn1HHUQpnmk8MH
3G2C5xnICn7SJg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:48 2025 by rpki-client