Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File:                     1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier:          nlCyTSqvZPeBxlKB/60tpj7KQ40F0tf0lNlQbUpf9qg=
Subject key identifier:   14:D5:F2:1E:93:F1:68:62:52:7D:52:02:2E:D0:65:CB:D5:FD:FA:4E
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       019A5150752862E359463BD40B269CDB9288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number:          105E
Signing time:             Wed 05 Nov 2025 00:00:18 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:18 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:18 +0000
Files and hashes:         1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: DvYOvPsPAHDkT746yQBEZgad+mmvz/TCExt9A+euQtc=)
                          2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
                          3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:75:28:62:e3:59:46:3b:d4:0b:26:9c:db:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Nov  5 00:00:18 2025 GMT
            Not After : Nov  6 00:00:18 2025 GMT
        Subject: CN=14d5f21e93f16862527d52022ed065cbd5fdfa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:91:49:1c:75:8f:12:32:3d:b9:30:be:3c:
                    2d:96:f1:6e:6f:83:11:f6:30:0d:a3:cc:cc:2d:dd:
                    1e:e3:97:3c:17:c6:11:c1:3d:ba:60:d1:a7:27:9f:
                    09:a6:e2:43:6e:02:7d:fc:cd:b7:b1:dc:f3:3d:ee:
                    00:da:75:5d:ef:ce:2d:27:b7:20:42:a8:6b:db:bf:
                    39:72:f6:93:59:21:06:97:d6:24:31:53:a5:8e:32:
                    a3:11:f2:aa:d0:b5:79:f2:6f:32:d8:7f:63:34:e4:
                    a8:f7:ef:98:26:cd:1c:1f:3f:3b:15:ff:f8:8c:13:
                    ff:0e:f9:5f:5d:bb:5a:8c:3e:f5:e1:96:6d:78:a6:
                    98:78:b4:4d:0f:5d:c9:80:50:0a:01:ec:05:07:92:
                    d5:cd:30:8d:84:91:59:f2:1a:6e:78:f3:f1:c2:1c:
                    ad:41:95:ae:7c:0a:c9:05:e2:18:0c:79:ef:9c:22:
                    f5:7d:8c:b0:f0:62:42:27:97:01:95:87:d2:d9:3c:
                    2d:b8:47:0c:75:56:cc:dd:d9:e1:aa:04:60:51:fa:
                    fc:26:39:37:16:80:52:ce:cc:28:be:3a:d9:9d:14:
                    a6:27:fb:0b:0d:99:9e:ff:d8:95:e1:d8:7a:dd:e0:
                    cf:c1:4b:c1:b2:f8:9c:ee:41:52:04:0e:fc:16:01:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:F2:1E:93:F1:68:62:52:7D:52:02:2E:D0:65:CB:D5:FD:FA:4E
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:cb:44:6d:c0:9b:c2:8a:04:8c:8d:c2:d5:ee:6f:48:ec:
         0d:97:61:f8:ea:36:54:43:71:c2:7a:eb:e8:59:aa:12:62:a0:
         bf:fc:f2:cf:db:27:38:b6:43:d1:ba:4f:7b:02:f2:42:b6:82:
         cd:1d:83:10:aa:64:0d:37:91:00:62:80:ed:43:5d:60:4d:4a:
         2a:d5:a3:ea:0e:b5:60:fa:df:97:b9:90:22:39:cf:08:70:0d:
         21:84:90:9d:d0:eb:48:51:81:c9:f7:e5:21:d7:7d:5e:86:01:
         bf:a3:76:db:c9:b5:e8:52:03:35:ff:5f:71:9d:9a:41:b5:04:
         ad:69:bb:62:3c:84:eb:c5:90:93:87:7a:f2:e9:4c:f1:9f:70:
         54:ab:38:1d:78:16:e3:01:f1:26:ea:28:14:2d:55:ba:cf:64:
         c7:33:6f:3d:3c:b5:7b:6b:09:d4:69:37:54:f8:3e:4d:ab:1e:
         fd:ae:7f:89:80:c2:ff:09:82:8b:20:03:28:2f:5a:75:8d:86:
         64:21:b0:38:d3:06:a2:f5:61:48:98:23:ef:5f:ad:5d:d1:66:
         90:76:49:b6:5e:0d:a8:7d:f6:51:39:dc:07:1c:9e:21:a0:96:
         7a:eb:7e:c3:f2:56:ab:8e:7a:5f:5a:a3:81:85:51:5d:ba:b2:
         cd:b0:b9:3d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpRUHUoYuNZRjvUCyac25KIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjUxMTA1MDAwMDE4WhcNMjUxMTA2MDAwMDE4WjAzMTEwLwYDVQQD
EygxNGQ1ZjIxZTkzZjE2ODYyNTI3ZDUyMDIyZWQwNjVjYmQ1ZmRmYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCaRSRx1jxIyPbkwvjwtlvFub4MR
9jANo8zMLd0e45c8F8YRwT26YNGnJ58JpuJDbgJ9/M23sdzzPe4A2nVd784tJ7cg
Qqhr2785cvaTWSEGl9YkMVOljjKjEfKq0LV58m8y2H9jNOSo9++YJs0cHz87Ff/4
jBP/DvlfXbtajD714ZZteKaYeLRND13JgFAKAewFB5LVzTCNhJFZ8hpuePPxwhyt
QZWufArJBeIYDHnvnCL1fYyw8GJCJ5cBlYfS2TwtuEcMdVbM3dnhqgRgUfr8Jjk3
FoBSzswovjrZnRSmJ/sLDZme/9iV4dh63eDPwUvBsvic7kFSBA78FgEecwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBTV8h6T8WhiUn1SAi7QZcvV/fpOMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguDL
RG3Am8KKBIyNwtXub0jsDZdh+Oo2VENxwnrr6FmqEmKgv/zyz9snOLZD0bpPewLy
QraCzR2DEKpkDTeRAGKA7UNdYE1KKtWj6g61YPrfl7mQIjnPCHANIYSQndDrSFGB
yfflIdd9XoYBv6N228m16FIDNf9fcZ2aQbUErWm7YjyE68WQk4d68ulM8Z9wVKs4
HXgW4wHxJuooFC1Vus9kxzNvPTy1e2sJ1Gk3VPg+Tase/a5/iYDC/wmCiyADKC9a
dY2GZCGwONMGovVhSJgj71+tXdFmkHZJtl4NqH32UTncBxyeIaCWeut+w/JWq456
X1qjgYVRXbqyzbC5PQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:33 2025 by rpki-client