Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File:                     FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier:          8On7FGi4gaKS7MdqQM2/eRsyzYRzYLtKWKWYoRkE3pM=
Subject key identifier:   34:2C:91:DD:E8:26:8B:3C:5E:5C:B2:D3:8F:97:75:1B:24:6C:07:B0
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer:       /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial:       019A4DE223CA4C0C79F2C4BE7A4B8F4C5BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number:          0C5C
Signing time:             Tue 04 Nov 2025 08:00:57 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:57 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:57 +0000
Files and hashes:         1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: 23MxFIa5E7+hvxo9FmtRuCHu3rbt2rGUsoJ1Fff3kec=)
                          2: ojHiQO19UWzWeZWUnpfHf7I7cMc.roa (hash: 9VsVu1Joj/Zh9nV4rRjBb7OhHCDd3dk9hkqFPQjM6n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:23:ca:4c:0c:79:f2:c4:be:7a:4b:8f:4c:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Validity
            Not Before: Nov  4 08:00:57 2025 GMT
            Not After : Nov  5 08:00:57 2025 GMT
        Subject: CN=342c91dde8268b3c5e5cb2d38f97751b246c07b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:b7:b7:66:a8:9e:9a:84:4c:77:f2:9f:36:
                    7b:28:68:d1:9d:47:d5:b4:9c:86:ec:7f:10:e4:98:
                    41:22:87:38:04:6e:88:36:5a:fd:ac:74:50:8c:34:
                    d6:90:cf:64:f8:ca:a7:19:03:70:40:fb:fb:ec:8a:
                    6b:1d:69:91:0d:37:ae:7c:65:a6:56:5c:f8:f0:cf:
                    8d:66:82:76:87:7f:01:4b:47:56:de:49:5d:ba:36:
                    bb:13:85:bc:64:e3:0b:db:2b:f8:12:70:ea:cd:90:
                    ad:08:90:57:63:21:65:03:a9:9d:72:7c:64:4f:99:
                    32:b2:8b:68:77:65:df:ae:4b:14:dd:99:a7:fb:31:
                    ad:32:92:59:db:14:87:1e:5b:1b:4f:ec:69:87:a8:
                    67:b3:f0:58:f4:55:80:e0:7b:db:0d:c9:ba:1e:d3:
                    b5:4f:f5:7f:12:68:73:67:17:7e:11:b7:d3:54:41:
                    e3:b2:54:ba:98:f8:14:0b:8c:40:cc:8a:d2:1b:28:
                    39:94:28:89:4d:26:05:c5:a4:b8:9d:45:bb:3a:33:
                    f5:3a:6b:de:50:f4:8b:68:74:a6:3e:de:f0:cc:55:
                    83:50:fd:d8:47:22:d9:8c:7a:dd:c0:f4:ee:9d:2d:
                    8d:b1:30:17:ad:d6:82:81:83:e9:12:ce:94:1e:b6:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2C:91:DD:E8:26:8B:3C:5E:5C:B2:D3:8F:97:75:1B:24:6C:07:B0
            X509v3 Authority Key Identifier:
                keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:02:3f:8d:46:25:97:d8:08:d4:66:b2:37:4d:d5:c5:8d:68:
         c2:85:a7:55:16:c5:ea:d4:20:ae:8f:77:6c:70:5f:3b:ea:66:
         3e:9e:1d:8e:09:23:99:31:92:73:34:55:8b:bc:4d:23:43:63:
         86:80:78:14:f0:cc:f3:a4:b9:c4:57:84:a6:1f:8e:c8:22:e9:
         6a:8f:a0:46:f1:47:6f:7e:9e:38:06:ff:8e:40:ff:40:ae:8f:
         e8:a5:32:82:93:12:ec:89:be:0e:8f:53:96:f4:bc:69:5a:5c:
         2a:df:9c:4e:35:da:a5:79:d6:ab:f2:99:8a:b9:d1:e3:f0:94:
         a5:7e:fd:ba:2e:67:34:79:c8:2f:79:32:98:25:79:db:78:20:
         06:3a:f8:15:05:ee:6b:86:24:a6:71:0d:14:2d:e5:54:83:8b:
         da:5d:72:da:d3:c4:c8:46:94:c1:10:cc:16:ec:6b:a2:16:ca:
         7b:a2:9c:a3:7b:1b:ee:29:b9:25:97:f3:ab:0a:20:77:fb:ab:
         f4:c2:18:ac:aa:1b:94:1b:f9:4a:28:20:48:ab:24:4e:66:05:
         4e:f2:8b:ab:ae:e3:0b:4a:e9:46:80:3d:0f:14:38:4c:7c:cf:
         61:30:da:02:bc:8d:ee:1d:9a:a4:ba:aa:0f:aa:dd:89:4e:d0:
         a2:a7:bb:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4iPKTAx58sS+ekuPTFvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk
NDE3NDUwHhcNMjUxMTA0MDgwMDU3WhcNMjUxMTA1MDgwMDU3WjAzMTEwLwYDVQQD
EygzNDJjOTFkZGU4MjY4YjNjNWU1Y2IyZDM4Zjk3NzUxYjI0NmMwN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCm3t2aonpqETHfynzZ7KGjRnUfV
tJyG7H8Q5JhBIoc4BG6INlr9rHRQjDTWkM9k+MqnGQNwQPv77IprHWmRDTeufGWm
Vlz48M+NZoJ2h38BS0dW3klduja7E4W8ZOML2yv4EnDqzZCtCJBXYyFlA6mdcnxk
T5kysotod2XfrksU3Zmn+zGtMpJZ2xSHHlsbT+xph6hns/BY9FWA4HvbDcm6HtO1
T/V/EmhzZxd+EbfTVEHjslS6mPgUC4xAzIrSGyg5lCiJTSYFxaS4nUW7OjP1Omve
UPSLaHSmPt7wzFWDUP3YRyLZjHrdwPTunS2NsTAXrdaCgYPpEs6UHrYbEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQskd3oJos8Xlyy04+XdRskbAewMB8GA1UdIwQY
MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt
MWJjZTNiYzY3OGVkLzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk
LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwI/jUYl
l9gI1GayN03VxY1owoWnVRbF6tQgro93bHBfO+pmPp4djgkjmTGSczRVi7xNI0Nj
hoB4FPDM86S5xFeEph+OyCLpao+gRvFHb36eOAb/jkD/QK6P6KUygpMS7Im+Do9T
lvS8aVpcKt+cTjXapXnWq/KZirnR4/CUpX79ui5nNHnIL3kymCV523ggBjr4FQXu
a4YkpnENFC3lVIOL2l1y2tPEyEaUwRDMFuxrohbKe6Kco3sb7im5JZfzqwogd/ur
9MIYrKoblBv5SiggSKskTmYFTvKLq67jC0rpRoA9DxQ4THzPYTDaAryN7h2apLqq
D6rdiU7Qoqe7+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:43 2025 by rpki-client