Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File:                     k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier:          xHj5rh9ijABxbQGpzc/pZ9qF7gFSumsw0JXNzHWAEkY=
Subject key identifier:   95:D1:C0:ED:24:8B:6B:47:52:7A:39:4A:57:73:0A:EB:3E:9B:EF:6D
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer:       /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial:       019A52D19B77CC4E11B35B84E85BEC5C2CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number:          1712
Signing time:             Wed 05 Nov 2025 07:00:59 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:59 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:59 +0000
Files and hashes:         1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
                          2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
                          3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: +qFQuEJPA4LQlmNL7rcusCP2sAyMcZbQ9U6gasEcjdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:9b:77:cc:4e:11:b3:5b:84:e8:5b:ec:5c:2c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
        Validity
            Not Before: Nov  5 07:00:59 2025 GMT
            Not After : Nov  6 07:00:59 2025 GMT
        Subject: CN=95d1c0ed248b6b47527a394a57730aeb3e9bef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:42:60:35:cc:fd:50:d2:ee:32:98:b0:e1:
                    83:d1:e9:30:a9:01:75:47:52:cf:7c:08:63:46:0b:
                    fe:1a:f7:6f:ef:2a:01:6a:ee:9a:b0:54:21:7c:08:
                    11:3b:ce:cf:8f:7e:f8:81:76:6b:79:f8:a7:fd:6d:
                    54:a0:93:d1:15:3e:70:35:91:0a:07:f8:fa:c7:a0:
                    87:67:c1:0c:7d:99:ba:88:e1:dd:93:af:9a:b4:61:
                    04:a2:1b:80:2a:12:29:df:ac:9f:27:ca:0b:ba:ec:
                    09:22:9d:71:69:a2:1f:50:bf:c7:32:28:c8:8f:21:
                    a6:b0:c3:ce:51:d2:a7:8b:7a:83:20:e1:43:6f:a8:
                    21:36:dc:8d:1b:98:d0:fd:96:29:54:9c:3b:a2:4e:
                    d6:96:78:84:36:1c:11:f2:3a:97:15:a1:59:e6:83:
                    72:c1:55:77:5d:c6:8c:fc:e5:fd:4a:c9:65:ef:60:
                    8f:3f:46:37:df:c1:43:70:7f:92:9b:95:f4:d6:db:
                    2e:bf:40:26:2f:a1:dc:58:ef:56:86:6a:53:3a:c2:
                    3c:ac:aa:e6:8e:b6:68:65:c4:f0:6c:15:88:27:7a:
                    98:8e:5a:df:ff:09:74:a1:11:fc:96:26:fb:a3:31:
                    51:51:77:a9:ae:40:62:50:c1:3b:21:44:e5:60:9b:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:C0:ED:24:8B:6B:47:52:7A:39:4A:57:73:0A:EB:3E:9B:EF:6D
            X509v3 Authority Key Identifier:
                keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:37:58:af:45:bd:58:58:b3:8d:da:c5:d5:d5:ad:b8:7c:
         32:e2:b1:74:22:b6:d4:a8:ab:69:45:6c:d1:47:4b:d4:e0:d6:
         8f:5d:18:2c:99:4e:24:d7:b0:b5:e5:4e:74:19:b3:3e:d8:fe:
         4f:3e:33:96:a1:b6:bd:f9:00:ea:e0:9b:cc:69:84:59:c3:75:
         4e:39:e7:86:e3:1c:d9:7d:2f:4d:d5:70:81:b5:ec:5c:b5:09:
         3a:70:92:7d:c3:93:97:19:3f:b9:3c:cd:b0:2a:35:e4:99:b6:
         26:75:2a:e9:c9:6c:40:6f:82:57:f9:c7:20:b1:8b:90:4a:26:
         bd:b3:61:7c:48:d4:d7:33:86:6e:63:84:ce:5d:06:95:5f:aa:
         ee:12:ab:17:e5:21:db:61:7b:3c:af:a7:1b:1b:d9:84:18:69:
         c6:7d:98:92:90:59:c8:ea:7a:d7:52:22:a3:19:5a:74:66:c9:
         35:c0:df:21:16:69:5f:24:eb:cb:3f:a1:bc:41:01:10:ef:dc:
         87:84:16:7e:2f:30:c4:62:fb:a1:43:70:9f:ff:df:a6:50:c5:
         21:46:71:e1:1a:0e:3f:4f:d4:d5:ed:c7:65:60:d6:32:77:f8:
         5f:14:50:d4:ae:18:5e:e6:9b:8f:53:f1:55:73:18:06:51:42:
         32:7c:35:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Zt3zE4Rs1uE6FvsXCyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjUxMTA1MDcwMDU5WhcNMjUxMTA2MDcwMDU5WjAzMTEwLwYDVQQD
Eyg5NWQxYzBlZDI0OGI2YjQ3NTI3YTM5NGE1NzczMGFlYjNlOWJlZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+pCYDXM/VDS7jKYsOGD0ekwqQF1
R1LPfAhjRgv+Gvdv7yoBau6asFQhfAgRO87Pj374gXZrefin/W1UoJPRFT5wNZEK
B/j6x6CHZ8EMfZm6iOHdk6+atGEEohuAKhIp36yfJ8oLuuwJIp1xaaIfUL/HMijI
jyGmsMPOUdKni3qDIOFDb6ghNtyNG5jQ/ZYpVJw7ok7WlniENhwR8jqXFaFZ5oNy
wVV3XcaM/OX9Ssll72CPP0Y338FDcH+Sm5X01tsuv0AmL6HcWO9WhmpTOsI8rKrm
jrZoZcTwbBWIJ3qYjlrf/wl0oRH8lib7ozFRUXeprkBiUME7IUTlYJuqUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXRwO0ki2tHUno5SldzCus+m+9tMB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDc3WK9F
vVhYs43axdXVrbh8MuKxdCK21KiraUVs0UdL1ODWj10YLJlOJNewteVOdBmzPtj+
Tz4zlqG2vfkA6uCbzGmEWcN1TjnnhuMc2X0vTdVwgbXsXLUJOnCSfcOTlxk/uTzN
sCo15Jm2JnUq6clsQG+CV/nHILGLkEomvbNhfEjU1zOGbmOEzl0GlV+q7hKrF+Uh
22F7PK+nGxvZhBhpxn2YkpBZyOp611IioxladGbJNcDfIRZpXyTryz+hvEEBEO/c
h4QWfi8wxGL7oUNwn//fplDFIUZx4RoOP0/U1e3HZWDWMnf4XxRQ1K4YXuabj1Px
VXMYBlFCMnw1fw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:53 2025 by rpki-client