Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          aKtgOx96BZX/Rz9CuZQ08EMYkCPndwfInXKewUDzwYs=
Subject key identifier:   24:74:98:BF:CC:D5:2B:10:42:92:6B:07:9C:16:54:24:6C:D5:E0:97
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019A522C55F20D6E098CA89E1ECBEA39D356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          142B
Signing time:             Wed 05 Nov 2025 04:00:28 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:28 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:28 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: ImsncFTXNlMUHyDOHFSy7C5NB3oXXsHXiKBhlSwphKE=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:55:f2:0d:6e:09:8c:a8:9e:1e:cb:ea:39:d3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Nov  5 04:00:28 2025 GMT
            Not After : Nov  6 04:00:28 2025 GMT
        Subject: CN=247498bfccd52b1042926b079c1654246cd5e097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:4f:ca:c2:10:c0:4c:1b:df:c1:5f:83:3f:
                    db:3e:13:9e:d2:74:db:f3:56:dd:e0:78:f9:9d:0f:
                    54:b8:7e:ef:fd:17:8c:8e:17:13:8d:04:c4:25:29:
                    70:82:fa:df:95:ea:f5:6a:fc:ed:73:60:09:ea:d7:
                    24:a6:23:57:04:7a:4c:8d:01:67:5d:a4:13:89:18:
                    7a:5c:23:c5:9e:df:3d:3d:ea:0f:6e:35:91:76:f6:
                    33:11:97:2d:43:1b:80:c8:52:2f:7d:5b:f4:14:55:
                    72:b5:fa:25:ed:ad:cb:2d:ef:8c:cb:fd:3c:e5:0c:
                    5f:8e:6a:b9:12:98:f3:58:1b:54:2d:56:35:8d:74:
                    4a:87:fe:d2:c7:63:28:11:ad:00:f0:b0:ee:cd:16:
                    d4:d5:c6:fc:5a:d5:9c:e0:21:f2:ea:7f:92:52:d4:
                    e2:e1:36:cb:30:98:c9:14:84:f3:ff:bf:2a:88:e6:
                    68:80:32:e4:45:1d:c0:4c:ce:9e:05:3f:ea:d3:c0:
                    f6:a9:74:4b:70:cc:7f:d3:16:00:40:6c:2d:eb:3b:
                    ef:03:28:9f:b8:8a:48:96:1a:f7:25:d0:dc:72:71:
                    5f:ea:12:f8:89:1d:2c:ce:8a:02:4d:fe:2d:4e:f9:
                    c8:e2:28:b0:97:14:07:78:e3:30:65:65:2f:b0:97:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:98:BF:CC:D5:2B:10:42:92:6B:07:9C:16:54:24:6C:D5:E0:97
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:5e:62:52:f0:f9:78:39:64:7d:0f:dc:42:98:ee:4c:c8:
         80:97:a9:24:e7:0d:28:ec:1a:30:23:62:fe:86:f7:72:41:49:
         68:83:f7:d3:53:d6:4f:2b:ae:a9:87:fd:fe:7e:00:de:12:b5:
         96:71:48:fe:28:b4:e8:53:d4:53:25:65:7e:3b:1d:cc:52:2b:
         d7:3b:ae:c0:37:99:49:09:a9:99:ac:85:af:99:26:d3:48:97:
         62:10:ec:fe:ec:96:01:63:0f:60:fd:6b:0d:99:b4:ac:e5:91:
         b2:16:17:02:bf:48:04:d0:89:78:1f:af:c5:d8:34:13:d3:94:
         1b:d8:24:91:36:13:d9:53:66:60:16:0a:98:75:54:95:9e:66:
         d4:74:07:73:a0:21:7c:ad:2a:d4:b4:89:67:8f:f6:b2:62:f7:
         bb:bc:0c:ba:a9:df:a2:dc:39:3a:d2:9d:07:39:87:a8:d2:2b:
         9e:ad:a9:a4:90:b3:4d:c2:fa:7a:d9:19:d6:34:72:eb:13:88:
         04:03:0c:b5:53:32:9a:7f:0a:60:40:2b:5a:39:6e:3e:1e:16:
         2c:46:f5:f1:17:dc:d3:34:06:b9:d1:db:39:1d:8d:d9:d5:b9:
         12:b3:f6:0b:5f:43:43:91:73:ca:e6:fa:fc:fe:8f:47:e5:f9:
         28:25:8b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLFXyDW4JjKieHsvqOdNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjUxMTA1MDQwMDI4WhcNMjUxMTA2MDQwMDI4WjAzMTEwLwYDVQQD
EygyNDc0OThiZmNjZDUyYjEwNDI5MjZiMDc5YzE2NTQyNDZjZDVlMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XBPysIQwEwb38Ffgz/bPhOe0nTb
81bd4Hj5nQ9UuH7v/ReMjhcTjQTEJSlwgvrfler1avztc2AJ6tckpiNXBHpMjQFn
XaQTiRh6XCPFnt89PeoPbjWRdvYzEZctQxuAyFIvfVv0FFVytfol7a3LLe+My/08
5Qxfjmq5EpjzWBtULVY1jXRKh/7Sx2MoEa0A8LDuzRbU1cb8WtWc4CHy6n+SUtTi
4TbLMJjJFITz/78qiOZogDLkRR3ATM6eBT/q08D2qXRLcMx/0xYAQGwt6zvvAyif
uIpIlhr3JdDccnFf6hL4iR0szooCTf4tTvnI4iiwlxQHeOMwZWUvsJdxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR0mL/M1SsQQpJrB5wWVCRs1eCXMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzReYlLw
+Xg5ZH0P3EKY7kzIgJepJOcNKOwaMCNi/ob3ckFJaIP301PWTyuuqYf9/n4A3hK1
lnFI/ii06FPUUyVlfjsdzFIr1zuuwDeZSQmpmayFr5km00iXYhDs/uyWAWMPYP1r
DZm0rOWRshYXAr9IBNCJeB+vxdg0E9OUG9gkkTYT2VNmYBYKmHVUlZ5m1HQHc6Ah
fK0q1LSJZ4/2smL3u7wMuqnfotw5OtKdBzmHqNIrnq2ppJCzTcL6etkZ1jRy6xOI
BAMMtVMymn8KYEArWjluPh4WLEb18Rfc0zQGudHbOR2N2dW5ErP2C19DQ5Fzyub6
/P6PR+X5KCWLPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:25 2025 by rpki-client