Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          5GEdRTXXuf5D6djjPmH6Ggs00TQjIn14g+vQXondN3M=
Subject key identifier:   5B:E8:A6:0E:86:A6:88:03:74:EB:34:EA:E6:A3:3D:56:81:40:A7:63
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       019A36B51D4A3B84F82A70D2D17316293F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0D81
Signing time:             Thu 30 Oct 2025 20:00:30 +0000
Manifest this update:     Thu 30 Oct 2025 20:00:30 +0000
Manifest next update:     Fri 31 Oct 2025 20:00:30 +0000
Files and hashes:         1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: 1ziwoJHMQYDgNIlupQANJYQwE/9qJkj2UqtoXrzEc/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Oct 2025 19:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:36:b5:1d:4a:3b:84:f8:2a:70:d2:d1:73:16:29:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Oct 30 20:00:30 2025 GMT
            Not After : Oct 31 20:00:30 2025 GMT
        Subject: CN=5be8a60e86a6880374eb34eae6a33d568140a763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:a8:7e:20:46:6d:37:38:d4:42:c0:c8:c2:
                    50:ec:54:79:68:bb:02:ed:84:84:8d:d5:8b:c7:65:
                    a6:f6:42:13:23:f8:28:20:b2:b1:64:e8:7d:ca:bc:
                    df:85:8d:39:d5:97:fc:d2:46:c1:3e:39:b2:f9:0a:
                    b3:20:19:98:33:67:63:e3:44:93:43:01:fd:e6:99:
                    de:00:65:91:58:1d:06:67:79:b8:a4:89:c3:2f:60:
                    47:e9:f9:25:a0:0e:60:a3:68:1c:87:b4:01:35:f5:
                    60:1a:9f:8f:72:be:00:66:80:e4:d1:de:6b:db:d7:
                    55:d6:e2:5c:79:f8:49:81:61:da:03:51:5f:9f:17:
                    1c:f1:ff:c5:6c:66:11:cf:3f:7e:d3:1f:ed:88:9b:
                    49:76:9c:bd:41:8b:69:0d:ed:4b:c2:e1:ac:2b:61:
                    54:1a:a0:14:95:e3:96:32:77:5a:bd:07:99:cf:ac:
                    8b:08:39:3e:dd:b1:43:aa:85:a8:33:4a:9b:db:01:
                    84:15:15:f5:9a:28:39:d8:33:bc:af:e0:c3:3b:7e:
                    14:90:12:bc:36:b8:31:0f:67:25:79:c3:50:21:c1:
                    23:47:9b:c6:c9:f6:f4:02:13:c2:0b:93:39:4b:0a:
                    7b:17:ae:66:59:b7:cb:d4:09:8f:89:a1:46:2e:da:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:A6:0E:86:A6:88:03:74:EB:34:EA:E6:A3:3D:56:81:40:A7:63
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:18:bd:65:8f:2e:66:51:c4:17:5a:14:c1:ad:50:65:a0:
         4f:12:fd:42:1a:d0:89:5d:ea:d0:7a:c3:c9:41:56:5b:ae:67:
         5c:dc:c1:a8:58:26:57:d6:9c:89:00:89:ac:c4:c4:de:2a:e6:
         0a:fa:17:13:23:e5:38:15:60:85:dd:4c:b3:dd:4b:08:81:08:
         c7:b1:cb:bb:46:64:87:ac:3b:61:df:d0:6e:7a:d1:d8:3d:10:
         aa:9f:5a:22:f3:db:a6:fc:59:49:98:c1:2f:25:23:7f:0a:68:
         8c:1c:a2:f5:4b:12:57:4f:52:96:07:15:a3:da:c4:c5:ef:07:
         d4:c7:81:c9:3e:82:66:6d:bb:ba:6c:61:dc:5d:64:85:07:df:
         09:ce:04:cb:0f:8d:1b:77:f2:db:87:f3:ce:ae:af:ef:ed:52:
         fb:05:19:b4:a5:01:44:be:1a:cb:83:10:26:c4:7e:cb:eb:9b:
         1d:26:de:94:8f:e8:2d:c5:e6:2d:7c:10:c0:97:3a:ad:6c:25:
         5c:d9:9e:d3:fc:9f:1a:63:e2:8d:fe:f3:88:03:6a:8b:bd:1c:
         33:83:3d:6d:80:2e:0d:31:49:02:42:9d:0b:92:7c:0a:5e:a9:
         94:25:8d:29:4d:8f:3e:15:c2:04:ca:7c:fb:81:10:5b:c1:97:
         ec:a2:6b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo2tR1KO4T4KnDS0XMWKT8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl
NzUyZjMwHhcNMjUxMDMwMjAwMDMwWhcNMjUxMDMxMjAwMDMwWjAzMTEwLwYDVQQD
Eyg1YmU4YTYwZTg2YTY4ODAzNzRlYjM0ZWFlNmEzM2Q1NjgxNDBhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQqofiBGbTc41ELAyMJQ7FR5aLsC
7YSEjdWLx2Wm9kITI/goILKxZOh9yrzfhY051Zf80kbBPjmy+QqzIBmYM2dj40ST
QwH95pneAGWRWB0GZ3m4pInDL2BH6fkloA5go2gch7QBNfVgGp+Pcr4AZoDk0d5r
29dV1uJcefhJgWHaA1Ffnxcc8f/FbGYRzz9+0x/tiJtJdpy9QYtpDe1LwuGsK2FU
GqAUleOWMndavQeZz6yLCDk+3bFDqoWoM0qb2wGEFRX1mig52DO8r+DDO34UkBK8
NrgxD2clecNQIcEjR5vGyfb0AhPCC5M5Swp7F65mWbfL1AmPiaFGLtpmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvopg6GpogDdOs06uajPVaBQKdjMB8GA1UdIwQY
MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt
OWMxZjY5YTI0MmJhLzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh
LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTAYvWWP
LmZRxBdaFMGtUGWgTxL9QhrQiV3q0HrDyUFWW65nXNzBqFgmV9aciQCJrMTE3irm
CvoXEyPlOBVghd1Ms91LCIEIx7HLu0Zkh6w7Yd/QbnrR2D0Qqp9aIvPbpvxZSZjB
LyUjfwpojByi9UsSV09SlgcVo9rExe8H1MeByT6CZm27umxh3F1khQffCc4Eyw+N
G3fy24fzzq6v7+1S+wUZtKUBRL4ay4MQJsR+y+ubHSbelI/oLcXmLXwQwJc6rWwl
XNme0/yfGmPijf7ziANqi70cM4M9bYAuDTFJAkKdC5J8Cl6plCWNKU2PPhXCBMp8
+4EQW8GX7KJr2A==
-----END CERTIFICATE-----
Generated at Fri Oct 31 02:34:18 2025 by rpki-client