Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File:                     B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier:          NUV9Bp7nGtKQgzo2DouNQQ2Q8X3gDdtti6IXtKB9Bh4=
Subject key identifier:   91:71:3D:71:B4:3B:84:AA:13:24:71:F9:DB:1F:E0:0A:DC:FB:AC:0E
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer:       /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial:       019A145FA95D4F29B2F6A30CB55C63BD1A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number:          16EF
Signing time:             Fri 24 Oct 2025 04:00:04 +0000
Manifest this update:     Fri 24 Oct 2025 04:00:04 +0000
Manifest next update:     Sat 25 Oct 2025 04:00:04 +0000
Files and hashes:         1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: 0/K6RD+Anb2TrCyjvd3Xf20nq0vdbvvnQlctr0VQzvg=)
                          2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
                          3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
                          4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:14:5f:a9:5d:4f:29:b2:f6:a3:0c:b5:5c:63:bd:1a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
        Validity
            Not Before: Oct 24 04:00:04 2025 GMT
            Not After : Oct 25 04:00:04 2025 GMT
        Subject: CN=91713d71b43b84aa132471f9db1fe00adcfbac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:73:c0:23:36:aa:34:c2:9e:d9:ce:3d:c7:
                    69:e7:28:a3:3d:ba:00:69:6a:09:fe:97:c1:0f:cb:
                    dd:04:c6:1e:37:1d:4e:29:06:e1:5f:9e:86:0a:36:
                    d4:ea:10:11:9a:91:11:30:ad:e0:e7:dc:fa:94:1a:
                    01:37:7c:99:b7:4a:f1:af:d2:53:89:e8:15:2a:e5:
                    52:95:ca:d9:53:6b:e7:6c:6e:54:52:c5:f4:0b:f9:
                    b6:a5:1b:66:20:11:41:f1:0f:e4:07:fa:10:8e:8c:
                    b1:c9:b7:2c:d9:1c:a1:26:26:0d:d7:b6:64:9c:db:
                    91:37:cc:38:0e:e4:b3:67:2e:59:11:96:b4:22:88:
                    bb:11:0a:59:8f:92:ba:49:bb:38:a3:6d:0f:86:9f:
                    e7:7f:5a:a6:69:7a:79:2f:97:8d:00:f7:12:17:00:
                    7f:81:61:12:df:a9:b1:16:1d:d5:d1:6c:22:29:c6:
                    ad:dc:9d:9d:e4:5e:45:5c:2b:14:ec:8a:15:be:1a:
                    dc:6f:c1:84:4b:1f:04:a5:eb:de:26:ed:f1:df:fb:
                    88:cd:53:5a:17:bc:54:5a:06:bc:63:cf:99:dd:cd:
                    7d:98:9c:8c:a9:e9:83:77:b8:ff:90:3b:3a:18:a8:
                    b3:2c:11:14:2c:a6:a1:0f:7b:0b:57:2f:d4:72:33:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:3D:71:B4:3B:84:AA:13:24:71:F9:DB:1F:E0:0A:DC:FB:AC:0E
            X509v3 Authority Key Identifier:
                keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:d6:31:d0:95:70:72:d2:7c:2d:02:a6:a0:68:62:88:fb:
         64:a6:c1:e6:0c:a3:47:10:12:87:3f:c1:d6:d9:34:f5:13:71:
         c7:ea:ce:96:38:04:3a:c6:a5:15:b3:cb:90:56:81:08:22:be:
         be:5a:c6:fd:b7:ed:b5:b4:80:d0:90:28:cd:cd:ed:47:82:dd:
         d9:65:9b:a5:b4:de:1e:70:d1:c1:dc:09:b8:36:b7:a0:46:c9:
         e0:86:8f:e1:6f:76:cc:f0:9b:b0:95:ca:e1:bb:b3:06:d3:0d:
         c5:9e:ba:d4:12:bf:f1:20:ac:15:11:f5:cf:36:78:ad:4e:80:
         1a:8e:68:07:1e:d0:9d:4f:d7:63:59:06:0b:85:41:b6:28:35:
         14:45:22:88:80:01:bd:52:50:e6:fd:fd:f9:8a:8d:07:e7:59:
         97:08:8b:6e:25:3e:4d:2f:dc:5e:f2:b5:a8:54:13:bf:00:a4:
         f2:10:a9:b6:ca:1f:52:a9:b9:c3:b2:d1:53:be:22:e5:5e:0b:
         f9:f9:9d:fe:cd:e3:df:80:81:a1:ab:a5:c7:c6:cd:f1:31:65:
         0d:72:01:3f:09:c7:0f:70:cd:a6:d9:35:76:02:67:08:03:5c:
         e7:be:57:86:77:b1:72:3c:b2:e4:de:7a:00:d0:9b:bd:14:7f:
         28:ff:78:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUX6ldTymy9qMMtVxjvRoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2
NGFiNzEwHhcNMjUxMDI0MDQwMDA0WhcNMjUxMDI1MDQwMDA0WjAzMTEwLwYDVQQD
Eyg5MTcxM2Q3MWI0M2I4NGFhMTMyNDcxZjlkYjFmZTAwYWRjZmJhYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCJzwCM2qjTCntnOPcdp5yijPboA
aWoJ/pfBD8vdBMYeNx1OKQbhX56GCjbU6hARmpERMK3g59z6lBoBN3yZt0rxr9JT
iegVKuVSlcrZU2vnbG5UUsX0C/m2pRtmIBFB8Q/kB/oQjoyxybcs2RyhJiYN17Zk
nNuRN8w4DuSzZy5ZEZa0Ioi7EQpZj5K6Sbs4o20Php/nf1qmaXp5L5eNAPcSFwB/
gWES36mxFh3V0WwiKcat3J2d5F5FXCsU7IoVvhrcb8GESx8EpeveJu3x3/uIzVNa
F7xUWga8Y8+Z3c19mJyMqemDd7j/kDs6GKizLBEULKahD3sLVy/UcjN5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFxPXG0O4SqEyRx+dsf4Arc+6wOMB8GA1UdIwQY
MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt
NGM4ODgzMzI3YTJhLzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh
LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBrWMdCV
cHLSfC0CpqBoYoj7ZKbB5gyjRxAShz/B1tk09RNxx+rOljgEOsalFbPLkFaBCCK+
vlrG/bfttbSA0JAozc3tR4Ld2WWbpbTeHnDRwdwJuDa3oEbJ4IaP4W92zPCbsJXK
4buzBtMNxZ661BK/8SCsFRH1zzZ4rU6AGo5oBx7QnU/XY1kGC4VBtig1FEUiiIAB
vVJQ5v39+YqNB+dZlwiLbiU+TS/cXvK1qFQTvwCk8hCptsofUqm5w7LRU74i5V4L
+fmd/s3j34CBoaulx8bN8TFlDXIBPwnHD3DNptk1dgJnCANc575Xhnexcjyy5N56
ANCbvRR/KP94vA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 08:19:39 2025 by rpki-client