Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          J+RdSrFx4NvhqWUXLUyWXoWMI29hSfYToA2P0hG7i5Q=
Subject key identifier:   B7:DB:B6:84:E7:EA:FC:BC:EC:E3:20:F9:46:5F:79:56:75:54:3D:65
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019A4EF58D59A157461C0CB08ECB5D77617D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          075B
Signing time:             Tue 04 Nov 2025 13:01:46 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:46 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:46 +0000
Files and hashes:         1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=)
                          2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=)
                          3: 7_z910fyUdS3UV3iXZAalmMZpHc.roa (hash: Ccdq640YY3YzbW+naDaW3oCRMsiBEyNstC2n1WOXCqI=)
                          4: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=)
                          5: cKixBdA2YsQGbECfVrRBeHDlXYw.roa (hash: qJETwYzXO3XeLPn/+rF185rIfriEwSzO+xMEVnrI5/g=)
                          6: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=)
                          7: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=)
                          8: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: mksGiuOtqQaAD6Wt++pUxgktxW80DbbRQhNvAqCUVG0=)
                          9: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:8d:59:a1:57:46:1c:0c:b0:8e:cb:5d:77:61:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Nov  4 13:01:46 2025 GMT
            Not After : Nov  5 13:01:46 2025 GMT
        Subject: CN=b7dbb684e7eafcbcece320f9465f795675543d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:09:03:f1:a7:6a:6e:d4:96:d6:e7:8e:1d:
                    cf:60:07:ce:db:a6:f3:29:48:7e:2a:dc:e2:6d:5b:
                    f0:94:f8:47:58:97:66:93:d6:bf:f9:e3:61:84:96:
                    5d:21:82:6e:c0:45:8b:b3:17:34:a6:4d:d4:b3:28:
                    d1:e9:d3:80:7d:43:46:3a:49:f0:e2:e7:72:64:d4:
                    8f:36:48:20:c8:0c:ca:e5:32:7e:8e:6c:a8:5a:4e:
                    f3:19:2f:fd:bb:ea:bb:db:e9:ef:e3:c8:19:84:81:
                    80:6b:70:b4:b2:3c:92:04:33:b4:b5:8d:14:64:30:
                    a2:dd:d0:06:a8:53:e5:82:bd:b0:17:d3:4d:6a:3d:
                    ed:e2:89:77:31:4d:ee:78:8c:aa:0e:7b:dd:89:7e:
                    59:bd:83:eb:a2:9e:64:9a:cf:89:87:ef:bc:16:da:
                    35:40:a2:cd:dc:e7:09:29:b5:a6:58:5e:30:48:4c:
                    ae:94:b3:19:7e:17:fb:67:4f:6d:43:ac:d6:52:91:
                    6b:1b:bf:35:fa:ee:f4:5a:f5:32:ad:2a:7d:47:c4:
                    30:49:96:a7:b8:ce:97:07:4e:fe:ea:ce:78:02:04:
                    f8:52:36:3d:bb:5b:b8:f8:88:8b:19:e0:27:84:c2:
                    a5:db:18:40:38:72:e6:f6:52:d8:04:81:84:ca:93:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:B6:84:E7:EA:FC:BC:EC:E3:20:F9:46:5F:79:56:75:54:3D:65
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:73:98:a9:bf:91:33:57:b6:ff:a1:62:a5:04:3d:24:6e:f5:
         c0:3b:9f:9b:89:8d:e8:90:d9:5b:d8:f8:41:cc:cf:22:ed:17:
         51:0f:b0:bb:aa:b4:99:30:72:d2:f7:d2:cc:ae:14:1b:00:0d:
         3d:c4:cd:6a:c1:6a:65:e6:bf:77:3a:ea:b7:91:aa:dc:30:b7:
         a5:8c:db:91:47:9b:36:7d:8c:24:82:b3:2e:08:c0:97:fa:82:
         9f:96:b7:fc:7b:c5:f9:42:3c:bf:8a:cf:b6:c2:7e:97:31:04:
         64:36:6c:2d:e7:7d:e2:16:e3:65:29:d2:e0:ab:3e:fb:94:9f:
         40:32:b7:14:05:0a:55:67:49:b4:33:17:76:65:22:f6:f4:04:
         c7:fc:8a:cb:bf:65:0c:f0:49:8f:75:48:92:d5:c0:95:da:5e:
         db:89:dd:fd:ff:e3:35:c4:39:01:bf:b3:0c:13:5d:fc:5e:71:
         b5:a0:08:c5:df:25:70:b1:1c:30:7c:37:f4:2e:eb:ea:0d:41:
         64:cd:24:e7:fa:50:36:6c:f7:b3:9e:42:3f:f8:eb:13:49:32:
         db:18:7e:b6:c3:c2:c9:63:d5:f9:a1:ef:a9:63:ea:87:46:18:
         91:94:de:6b:61:6e:3c:f4:dc:f8:79:c7:68:d3:69:60:4f:ad:
         cc:59:3f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Y1ZoVdGHAywjstdd2F9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3
YmM2MTYwHhcNMjUxMTA0MTMwMTQ2WhcNMjUxMTA1MTMwMTQ2WjAzMTEwLwYDVQQD
EyhiN2RiYjY4NGU3ZWFmY2JjZWNlMzIwZjk0NjVmNzk1Njc1NTQzZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkwJA/Gnam7Ultbnjh3PYAfO26bz
KUh+KtzibVvwlPhHWJdmk9a/+eNhhJZdIYJuwEWLsxc0pk3UsyjR6dOAfUNGOknw
4udyZNSPNkggyAzK5TJ+jmyoWk7zGS/9u+q72+nv48gZhIGAa3C0sjySBDO0tY0U
ZDCi3dAGqFPlgr2wF9NNaj3t4ol3MU3ueIyqDnvdiX5ZvYProp5kms+Jh++8Fto1
QKLN3OcJKbWmWF4wSEyulLMZfhf7Z09tQ6zWUpFrG781+u70WvUyrSp9R8QwSZan
uM6XB07+6s54AgT4UjY9u1u4+IiLGeAnhMKl2xhAOHLm9lLYBIGEypNnnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfbtoTn6vy87OMg+UZfeVZ1VD1lMB8GA1UdIwQY
MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt
YmM3YTIwOGE1ZTJlLzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl
LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnOYqb+R
M1e2/6FipQQ9JG71wDufm4mN6JDZW9j4QczPIu0XUQ+wu6q0mTBy0vfSzK4UGwAN
PcTNasFqZea/dzrqt5Gq3DC3pYzbkUebNn2MJIKzLgjAl/qCn5a3/HvF+UI8v4rP
tsJ+lzEEZDZsLed94hbjZSnS4Ks++5SfQDK3FAUKVWdJtDMXdmUi9vQEx/yKy79l
DPBJj3VIktXAldpe24nd/f/jNcQ5Ab+zDBNd/F5xtaAIxd8lcLEcMHw39C7r6g1B
ZM0k5/pQNmz3s55CP/jrE0ky2xh+tsPCyWPV+aHvqWPqh0YYkZTea2FuPPTc+HnH
aNNpYE+tzFk/MQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:58 2025 by rpki-client