Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          JcMLhK/6eBvy/5jSuKA6kd2hQEEs0PySN/36NlbR8Cg=
Subject key identifier:   68:74:1C:CB:E4:17:6D:B3:DC:B7:42:05:BF:D3:40:28:27:E9:AD:00
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       019A27B0481242873443F91FF0C4CAFF10CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          16FD
Signing time:             Mon 27 Oct 2025 22:00:55 +0000
Manifest this update:     Mon 27 Oct 2025 22:00:55 +0000
Manifest next update:     Tue 28 Oct 2025 22:00:55 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: GIfNW8F5M5AbeGQQDAzgs8sViBI2hGXeXXD5C0iOyE4=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:b0:48:12:42:87:34:43:f9:1f:f0:c4:ca:ff:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Oct 27 22:00:55 2025 GMT
            Not After : Oct 28 22:00:55 2025 GMT
        Subject: CN=68741ccbe4176db3dcb74205bfd3402827e9ad00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:82:23:3d:ba:2e:e9:df:08:ac:d8:fd:a9:
                    07:d5:9b:a8:52:41:c0:60:64:ff:94:fa:29:09:11:
                    82:86:b6:60:ac:34:c4:ba:58:96:c4:7e:f4:8b:03:
                    af:30:6f:78:94:cc:10:df:d6:7e:20:46:af:37:3b:
                    77:ae:d4:76:c8:55:a7:f9:21:ee:99:d1:68:cf:46:
                    c2:4c:cb:06:23:06:da:69:98:31:b5:ee:68:9e:de:
                    a2:ac:0b:8d:aa:3c:a9:d6:93:da:bc:ac:ea:3b:0a:
                    a3:70:83:00:64:d0:d3:bb:33:3c:6c:f3:e3:16:26:
                    26:1b:63:eb:14:a2:82:42:c0:91:fa:8a:00:2e:62:
                    a5:09:65:4b:c7:dd:64:44:0c:a3:e7:cc:52:f8:20:
                    5e:ca:4b:e6:85:e3:8a:1a:86:21:8f:ca:08:6a:2c:
                    97:b4:8b:09:86:6d:5f:e3:27:cd:27:fd:59:07:de:
                    17:11:fc:bd:e8:70:1e:92:77:91:8b:08:0d:8f:63:
                    de:3e:44:66:07:57:0e:7e:67:aa:a9:15:11:a3:f1:
                    a2:94:40:80:5e:af:93:a1:cf:93:cc:12:b6:56:c2:
                    aa:7b:c0:e6:aa:44:e6:05:d2:ba:2e:8b:26:a3:44:
                    08:4b:bc:44:ed:93:3c:db:4e:8a:fb:55:60:28:d2:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:1C:CB:E4:17:6D:B3:DC:B7:42:05:BF:D3:40:28:27:E9:AD:00
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:2d:19:1f:86:2d:43:3e:fe:75:96:23:ae:16:47:b9:4d:
         e8:4a:91:00:4b:c3:a6:05:63:f7:2c:ef:69:30:54:89:21:dd:
         b0:fd:fd:4a:21:6b:61:4a:7d:9a:58:3a:8a:78:44:6b:5e:21:
         c5:77:df:61:a5:1d:84:57:67:90:75:e5:a2:0f:1c:31:d7:c9:
         3f:ed:d4:4b:37:56:cc:62:68:73:70:5e:fb:6b:90:cb:c5:b5:
         7d:1f:cb:d8:c3:a5:61:c2:9d:57:53:d1:fd:6d:e9:16:13:e4:
         e4:91:4e:4e:d1:81:7f:49:09:1a:47:9e:0a:eb:0b:30:6e:b7:
         1d:a1:ef:d5:51:ed:c2:13:70:0c:b6:d9:ec:12:23:ad:09:e7:
         b8:f6:a7:09:20:cf:ef:35:29:e7:28:a1:4a:f5:29:92:ff:95:
         eb:78:15:8e:54:3f:c2:6c:fe:cb:9b:95:d3:07:96:75:e0:49:
         2d:37:17:24:d8:1f:0d:86:b7:72:5f:82:aa:2d:55:ff:13:ff:
         12:69:2c:60:63:7a:f2:63:86:12:ed:f3:63:9a:85:d5:9b:45:
         ba:ea:d8:af:e0:e8:c6:89:82:3c:53:d4:93:ff:9d:74:1c:aa:
         ff:97:08:df:ca:47:c3:9c:64:bf:e8:27:a3:51:ff:fc:65:77:
         e9:23:32:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonsEgSQoc0Q/kf8MTK/xDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4
NmQzY2EwHhcNMjUxMDI3MjIwMDU1WhcNMjUxMDI4MjIwMDU1WjAzMTEwLwYDVQQD
Eyg2ODc0MWNjYmU0MTc2ZGIzZGNiNzQyMDViZmQzNDAyODI3ZTlhZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfOCIz26LunfCKzY/akH1ZuoUkHA
YGT/lPopCRGChrZgrDTEuliWxH70iwOvMG94lMwQ39Z+IEavNzt3rtR2yFWn+SHu
mdFoz0bCTMsGIwbaaZgxte5ont6irAuNqjyp1pPavKzqOwqjcIMAZNDTuzM8bPPj
FiYmG2PrFKKCQsCR+ooALmKlCWVLx91kRAyj58xS+CBeykvmheOKGoYhj8oIaiyX
tIsJhm1f4yfNJ/1ZB94XEfy96HAekneRiwgNj2PePkRmB1cOfmeqqRURo/GilECA
Xq+Toc+TzBK2VsKqe8DmqkTmBdK6Losmo0QIS7xE7ZM8206K+1VgKNLyjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh0HMvkF22z3LdCBb/TQCgn6a0AMB8GA1UdIwQY
MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt
MDU4NWRlNGQ0ZWU3LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3
LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNItGR+G
LUM+/nWWI64WR7lN6EqRAEvDpgVj9yzvaTBUiSHdsP39SiFrYUp9mlg6inhEa14h
xXffYaUdhFdnkHXlog8cMdfJP+3USzdWzGJoc3Be+2uQy8W1fR/L2MOlYcKdV1PR
/W3pFhPk5JFOTtGBf0kJGkeeCusLMG63HaHv1VHtwhNwDLbZ7BIjrQnnuPanCSDP
7zUp5yihSvUpkv+V63gVjlQ/wmz+y5uV0weWdeBJLTcXJNgfDYa3cl+Cqi1V/xP/
EmksYGN68mOGEu3zY5qF1ZtFuurYr+DoxomCPFPUk/+ddByq/5cI38pHw5xkv+gn
o1H//GV36SMy2g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 05:38:43 2025 by rpki-client