Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          lDYMgNIhshbjTWEj/qt9z3RvM3DkMdTIokphAQe/8Gw=
Subject key identifier:   44:78:87:5B:C5:33:0C:67:82:FA:17:A5:0D:62:FB:42:BD:0E:4A:B2
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       019A4DE1E3F9556CDB48B47DD14683CD0BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          0F91
Signing time:             Tue 04 Nov 2025 08:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:40 +0000
Files and hashes:         1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=)
                          2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: WFKjC0+n/I5uMgVGcKMI2tsba99YxDQmLquEy023Mkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:e3:f9:55:6c:db:48:b4:7d:d1:46:83:cd:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Nov  4 08:00:40 2025 GMT
            Not After : Nov  5 08:00:40 2025 GMT
        Subject: CN=4478875bc5330c6782fa17a50d62fb42bd0e4ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:09:c7:1b:07:73:dd:25:ce:7a:ff:5f:7e:
                    a1:a7:15:e3:e5:68:4f:c2:1b:3d:be:52:e6:a5:7a:
                    d7:a5:43:55:88:88:0f:92:a9:c8:84:69:6e:bb:f9:
                    c0:be:28:9f:1b:79:c0:98:e1:59:92:4f:18:bf:41:
                    05:c8:6f:a7:43:d3:1b:e8:20:00:8f:5e:7c:67:34:
                    9a:cf:e1:e0:b0:67:92:b4:94:d4:c8:32:0f:be:ae:
                    c2:9a:05:8b:3c:16:e2:3f:78:ba:be:ee:b5:41:7c:
                    32:37:6e:3c:eb:fb:6c:e7:bd:e6:5d:a8:c4:d0:3c:
                    4d:2d:1b:f8:29:02:13:9f:49:5a:ae:0b:38:16:49:
                    e1:60:39:36:81:60:c5:a9:ad:04:42:4f:a6:23:0e:
                    38:1e:6f:2f:7b:22:1d:fc:14:ac:e1:71:32:66:9e:
                    fa:7e:de:90:d5:3a:c7:d6:bb:84:eb:d8:eb:79:ce:
                    a0:dc:69:2d:c2:ca:9e:3c:d1:4a:b2:0d:50:21:35:
                    66:5c:89:01:f5:11:ef:55:b5:9d:fc:38:b8:52:7a:
                    77:81:1d:6c:8a:dc:4f:ec:6c:d5:e8:75:4e:bf:04:
                    87:97:da:ae:98:69:f5:2b:53:e6:60:93:6a:c5:84:
                    d4:f6:72:05:a0:ef:f4:e8:b0:28:0f:e5:ac:c5:ee:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:78:87:5B:C5:33:0C:67:82:FA:17:A5:0D:62:FB:42:BD:0E:4A:B2
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:0f:79:29:eb:55:0e:32:e6:43:38:f5:89:f0:ae:28:a7:a3:
         5d:b3:9a:d8:d6:74:36:85:c6:8e:c1:48:fb:c3:7f:dd:cf:ff:
         cb:0e:1f:4c:c6:93:c9:86:92:d1:a6:31:f9:74:2b:5d:0c:44:
         dd:71:8e:7d:e8:a1:b6:f1:1f:12:5b:81:5c:48:04:24:e8:d5:
         0e:45:9c:64:a4:10:e4:ce:2b:1c:ff:c6:4e:72:62:f7:c1:4f:
         61:1c:6a:cb:1f:57:6f:2a:af:fd:f6:a4:d6:48:26:47:27:66:
         cb:11:73:67:a8:98:1d:49:ff:90:85:95:ad:8d:d1:40:2a:c2:
         dd:26:40:8d:4a:4c:b3:35:65:6e:38:42:0f:52:ac:e8:b3:29:
         bb:8a:3d:89:ed:fc:a1:f3:81:77:e1:71:4e:66:89:97:7d:e3:
         6a:cd:f1:01:86:51:8d:07:da:86:c4:c2:3f:56:db:9b:8e:5e:
         8b:6e:bc:7b:7e:a0:7c:c4:f0:41:fe:67:c1:bd:74:68:a7:7f:
         4c:98:aa:27:ee:84:83:3d:12:38:22:cb:fd:7a:f9:90:1b:f0:
         03:f0:ea:ec:1b:96:dc:51:6f:6b:cd:1d:c4:c2:b2:9b:15:9f:
         3b:44:94:0e:86:4d:1e:6f:08:b5:cc:a9:bb:5e:1f:a3:30:18:
         ac:5b:80:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4eP5VWzbSLR90UaDzQvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4
OTAzMzUwHhcNMjUxMTA0MDgwMDQwWhcNMjUxMTA1MDgwMDQwWjAzMTEwLwYDVQQD
Eyg0NDc4ODc1YmM1MzMwYzY3ODJmYTE3YTUwZDYyZmI0MmJkMGU0YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiIJxxsHc90lznr/X36hpxXj5WhP
whs9vlLmpXrXpUNViIgPkqnIhGluu/nAviifG3nAmOFZkk8Yv0EFyG+nQ9Mb6CAA
j158ZzSaz+HgsGeStJTUyDIPvq7CmgWLPBbiP3i6vu61QXwyN2486/ts573mXajE
0DxNLRv4KQITn0largs4FknhYDk2gWDFqa0EQk+mIw44Hm8veyId/BSs4XEyZp76
ft6Q1TrH1ruE69jrec6g3GktwsqePNFKsg1QITVmXIkB9RHvVbWd/Di4Unp3gR1s
itxP7GzV6HVOvwSHl9qumGn1K1PmYJNqxYTU9nIFoO/06LAoD+Wsxe5aVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER4h1vFMwxngvoXpQ1i+0K9DkqyMB8GA1UdIwQY
MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt
YWJkNmYyYjM0MTBiLzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi
LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxw95KetV
DjLmQzj1ifCuKKejXbOa2NZ0NoXGjsFI+8N/3c//yw4fTMaTyYaS0aYx+XQrXQxE
3XGOfeihtvEfEluBXEgEJOjVDkWcZKQQ5M4rHP/GTnJi98FPYRxqyx9Xbyqv/fak
1kgmRydmyxFzZ6iYHUn/kIWVrY3RQCrC3SZAjUpMszVlbjhCD1Ks6LMpu4o9ie38
ofOBd+FxTmaJl33jas3xAYZRjQfahsTCP1bbm45ei268e36gfMTwQf5nwb10aKd/
TJiqJ+6Egz0SOCLL/Xr5kBvwA/Dq7BuW3FFva80dxMKymxWfO0SUDoZNHm8Itcyp
u14fozAYrFuAyg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:44 2025 by rpki-client