Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          bV8ePseUJy5ODGJY2okFcS6f3uxhqqyyXpWLgoovwhE=
Subject key identifier:   A1:C0:6F:98:41:6C:19:B5:07:28:24:5C:CE:D4:D1:81:FF:8C:C5:D8
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019A4FD052142932173353755D569C269616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 17:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:43 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: /xn3f2uRVvX+yAFpNhxc0EBa7OPZ3Aa6ISa+9ywLnqU=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:52:14:29:32:17:33:53:75:5d:56:9c:26:96:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Nov  4 17:00:43 2025 GMT
            Not After : Nov  5 17:00:43 2025 GMT
        Subject: CN=a1c06f98416c19b50728245cced4d181ff8cc5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:7d:96:d3:82:cc:c7:c9:40:eb:24:f9:f5:
                    56:cc:b4:cb:9f:92:c1:51:e5:b7:fe:dd:f1:12:ff:
                    74:4b:30:bf:69:96:bf:48:6c:20:8b:06:e8:aa:a1:
                    64:db:5d:b4:51:99:f1:67:a9:70:50:84:c2:a4:2e:
                    57:e9:ea:b0:60:cf:d4:c5:d5:b1:7c:ad:5f:d7:07:
                    69:ef:3e:6b:32:a6:7f:65:84:72:a0:6b:b5:21:a3:
                    3b:d6:23:31:14:39:22:7f:88:bc:f2:93:49:b3:cb:
                    bf:66:91:0c:bd:42:04:45:0d:ad:86:fe:ed:97:c3:
                    9e:45:fc:0d:75:03:20:7f:54:05:2e:25:50:a3:37:
                    a9:9b:3c:89:a2:73:e1:69:01:11:69:2d:98:f9:89:
                    90:3e:db:50:00:6f:e2:76:d4:5e:c0:6d:e4:ed:57:
                    55:a2:62:b3:4a:75:ef:38:cd:89:58:41:45:70:38:
                    e7:3b:e1:28:61:36:0f:72:89:85:cf:12:21:0c:80:
                    5c:d1:95:de:df:87:97:78:59:d1:e1:ac:7d:c9:32:
                    29:a4:89:44:75:28:9e:19:8f:c0:11:73:cb:d1:65:
                    f7:99:64:cd:48:e1:bf:00:80:bb:ab:d9:ca:c1:22:
                    c8:95:bc:9a:e7:3d:31:4d:c2:ef:6c:b3:6a:f8:67:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C0:6F:98:41:6C:19:B5:07:28:24:5C:CE:D4:D1:81:FF:8C:C5:D8
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:fe:d9:c1:cb:e2:b6:aa:7f:60:51:c8:bd:92:e6:b7:cb:4e:
         cd:9e:72:33:f8:00:87:74:3e:0b:8a:96:11:c0:68:2b:2e:d6:
         de:e5:b8:bc:73:fb:47:a4:d9:a0:12:43:ab:ca:d4:87:5d:00:
         86:56:f0:cf:9a:8f:96:6a:8f:0a:20:b5:1e:08:59:9e:01:0e:
         48:6a:d6:9d:2b:61:f4:bd:3e:85:d9:5b:1d:90:ab:74:34:e5:
         38:4d:6e:e4:24:e2:dc:e7:e5:83:4c:49:b0:37:29:cb:ac:3e:
         c8:95:88:0b:ef:fe:2b:71:c2:b4:78:8c:4a:86:e9:33:ad:da:
         c6:f0:6e:46:bd:0d:4c:31:28:2f:32:36:45:61:bc:78:83:97:
         63:de:f5:50:05:56:39:5c:8b:a0:cb:95:44:36:42:2e:68:87:
         ee:a7:67:19:fa:df:e3:33:f5:34:fb:9b:e6:98:df:f7:12:b1:
         ee:4f:b8:ad:fa:42:f0:f8:7b:fd:ed:eb:f6:0f:9e:4f:61:6d:
         80:7b:cd:7e:fa:1a:e0:ab:1d:64:3a:7a:81:ec:c8:bb:a1:b3:
         eb:29:4a:94:2f:9b:9c:b3:4b:91:3c:f8:66:80:eb:c8:9c:a8:
         52:b9:c5:bf:76:c4:b2:46:02:ad:e4:73:ad:ba:d3:8f:f6:93:
         ad:f3:14:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0FIUKTIXM1N1XVacJpYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk
ZDM3MDIwHhcNMjUxMTA0MTcwMDQzWhcNMjUxMTA1MTcwMDQzWjAzMTEwLwYDVQQD
EyhhMWMwNmY5ODQxNmMxOWI1MDcyODI0NWNjZWQ0ZDE4MWZmOGNjNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG59ltOCzMfJQOsk+fVWzLTLn5LB
UeW3/t3xEv90SzC/aZa/SGwgiwboqqFk2120UZnxZ6lwUITCpC5X6eqwYM/UxdWx
fK1f1wdp7z5rMqZ/ZYRyoGu1IaM71iMxFDkif4i88pNJs8u/ZpEMvUIERQ2thv7t
l8OeRfwNdQMgf1QFLiVQozepmzyJonPhaQERaS2Y+YmQPttQAG/idtRewG3k7VdV
omKzSnXvOM2JWEFFcDjnO+EoYTYPcomFzxIhDIBc0ZXe34eXeFnR4ax9yTIppIlE
dSieGY/AEXPL0WX3mWTNSOG/AIC7q9nKwSLIlbya5z0xTcLvbLNq+GdmqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHAb5hBbBm1BygkXM7U0YH/jMXYMB8GA1UdIwQY
MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt
MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3
LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyP7Zwcvi
tqp/YFHIvZLmt8tOzZ5yM/gAh3Q+C4qWEcBoKy7W3uW4vHP7R6TZoBJDq8rUh10A
hlbwz5qPlmqPCiC1HghZngEOSGrWnSth9L0+hdlbHZCrdDTlOE1u5CTi3Oflg0xJ
sDcpy6w+yJWIC+/+K3HCtHiMSobpM63axvBuRr0NTDEoLzI2RWG8eIOXY971UAVW
OVyLoMuVRDZCLmiH7qdnGfrf4zP1NPub5pjf9xKx7k+4rfpC8Ph7/e3r9g+eT2Ft
gHvNfvoa4KsdZDp6gezIu6Gz6ylKlC+bnLNLkTz4ZoDryJyoUrnFv3bEskYCreRz
rbrTj/aTrfMUgA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:36 2025 by rpki-client