Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          9ocwyW2ItBYnyaQpnMn/mErFzmDZkFt2xuup3JLBEm4=
Subject key identifier:   1C:4D:4F:13:03:C6:6F:B1:65:79:AE:C1:F9:65:04:CA:B4:CA:18:85
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       019A4F628B277260BAF3C3B6235D6CEB37A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          1504
Signing time:             Tue 04 Nov 2025 15:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:49 +0000
Files and hashes:         1: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: mkwAM7QhfB7WKRAsn3bhmDdNAazGlYBDau3KAMPt5NM=)
                          2: OnXC0EMmctW1l-eN0LPWNOjUqPw.roa (hash: k0QnDPc78XQxy2Jh6N0H9Na60K6yINLRvcu8aefMv80=)
                          3: SdvawK2l2QMTxWUsBzsvDK2l55Y.roa (hash: 0IwztZlDbvlCLqvgLhsygToSdfiJSQpbte+efGKPWYs=)
                          4: Yes96KlqbG0mr87JhVnZBvHYB_g.roa (hash: n9jcRd3MdFn9mVFhJ/Pv7xaxOHOW7HhKsR2CUBypqZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:8b:27:72:60:ba:f3:c3:b6:23:5d:6c:eb:37:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: Nov  4 15:00:49 2025 GMT
            Not After : Nov  5 15:00:49 2025 GMT
        Subject: CN=1c4d4f1303c66fb16579aec1f96504cab4ca1885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:85:65:c5:ad:87:00:17:8d:de:1a:8d:13:
                    5b:ab:c3:b3:a5:c8:48:09:ec:de:ad:e7:76:0a:08:
                    35:28:0c:1c:1a:67:5e:24:e0:de:1d:d2:78:02:e7:
                    98:5c:d0:08:35:10:d9:d9:d9:b8:a7:2c:b7:9a:b0:
                    ba:82:26:16:3c:57:6b:20:e1:dd:c6:20:eb:d3:6d:
                    e2:e9:0a:45:f3:90:6e:71:ac:8c:45:1e:5f:e2:b1:
                    4d:25:86:d7:3a:2f:40:ae:5b:66:32:4f:a7:1a:ef:
                    2a:fd:6f:a8:56:63:75:7f:0d:8b:c9:2c:a2:10:17:
                    72:f3:c5:db:a3:3d:dd:1d:bd:77:2c:56:90:aa:f0:
                    cb:83:92:a6:b6:0b:0f:58:d7:0b:a2:7e:45:f9:0c:
                    28:44:5e:de:4f:f3:2e:cf:10:5f:1b:6c:2d:89:16:
                    66:25:a0:c2:ea:29:cf:48:04:38:f7:ab:1d:01:ac:
                    ec:65:3d:de:48:a3:59:6a:e6:ae:c1:84:01:2d:d6:
                    9d:7a:9e:0f:9d:60:e1:7c:1f:88:58:07:64:71:a1:
                    d1:e0:aa:1d:b3:31:a7:97:72:b8:f8:98:8d:a1:07:
                    6a:7d:5b:1e:d1:68:03:40:44:05:dd:70:0d:86:25:
                    af:ea:de:53:b6:32:f5:8a:04:1d:27:8b:b7:7a:b8:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:4F:13:03:C6:6F:B1:65:79:AE:C1:F9:65:04:CA:B4:CA:18:85
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:fb:25:69:b2:80:40:25:1b:3c:3c:a7:f5:83:05:e1:5d:
         a8:bb:f7:2e:ec:ca:08:e1:ec:6c:0e:5c:d3:fe:dc:1a:b3:eb:
         8b:4c:c6:52:c7:42:98:ed:bb:7d:b1:fa:4c:e8:ca:91:0d:5f:
         ea:42:8d:6d:cb:c5:ed:33:40:7e:b3:43:5d:bc:2a:bc:43:72:
         2b:40:8d:91:15:43:94:b5:5e:b3:56:81:24:a9:85:36:25:72:
         71:48:cc:2f:c5:6a:34:fb:75:b3:50:96:ff:18:5d:07:be:9b:
         b2:35:f1:24:c4:5f:01:cd:f4:c6:8d:7c:26:7b:d6:a6:5c:5a:
         c1:7c:8f:c0:43:85:36:6a:4f:71:5e:c5:ec:b9:02:6b:3d:c2:
         72:5d:ce:b5:24:56:83:e0:26:2a:db:31:89:ba:d5:a9:3a:9a:
         4a:cc:75:20:46:c6:0b:f1:97:a3:03:02:e8:d2:b5:4f:b0:ea:
         81:96:e8:6f:74:70:24:f4:93:fe:4f:97:24:37:a2:3c:01:03:
         5c:59:e4:73:b5:79:be:d5:f0:c7:c2:f2:b9:a0:f8:cd:8a:a4:
         5e:bf:a6:89:cd:c3:c8:e2:e1:71:34:22:3f:c2:a3:c1:3e:72:
         c7:40:bf:e3:03:a4:1e:ad:8f:3c:dd:ce:a8:27:a9:27:dc:ff:
         8c:85:da:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYosncmC688O2I11s6zepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMzI1MzRlOGQ1NjBkNzM1NTNjNjMyYmJhMTAzNDRhN2M4
MTY2MTQwHhcNMjUxMTA0MTUwMDQ5WhcNMjUxMTA1MTUwMDQ5WjAzMTEwLwYDVQQD
EygxYzRkNGYxMzAzYzY2ZmIxNjU3OWFlYzFmOTY1MDRjYWI0Y2ExODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MWFZcWthwAXjd4ajRNbq8OzpchI
Cezered2Cgg1KAwcGmdeJODeHdJ4AueYXNAINRDZ2dm4pyy3mrC6giYWPFdrIOHd
xiDr023i6QpF85BucayMRR5f4rFNJYbXOi9ArltmMk+nGu8q/W+oVmN1fw2LySyi
EBdy88Xboz3dHb13LFaQqvDLg5KmtgsPWNcLon5F+QwoRF7eT/MuzxBfG2wtiRZm
JaDC6inPSAQ496sdAazsZT3eSKNZauauwYQBLdadep4PnWDhfB+IWAdkcaHR4Kod
szGnl3K4+JiNoQdqfVse0WgDQEQF3XANhiWv6t5TtjL1igQdJ4u3eriKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxNTxMDxm+xZXmuwfllBMq0yhiFMB8GA1UdIwQY
MBaAFAAyU06NVg1zVTxjK7oQNEp8gWYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEt
NWVhZTZlZDU4Mzc1LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEtNWVhZTZlZDU4Mzc1
LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdj7JWmy
gEAlGzw8p/WDBeFdqLv3LuzKCOHsbA5c0/7cGrPri0zGUsdCmO27fbH6TOjKkQ1f
6kKNbcvF7TNAfrNDXbwqvENyK0CNkRVDlLVes1aBJKmFNiVycUjML8VqNPt1s1CW
/xhdB76bsjXxJMRfAc30xo18JnvWplxawXyPwEOFNmpPcV7F7LkCaz3Ccl3OtSRW
g+AmKtsxibrVqTqaSsx1IEbGC/GXowMC6NK1T7DqgZbob3RwJPST/k+XJDeiPAED
XFnkc7V5vtXwx8LyuaD4zYqkXr+mic3DyOLhcTQiP8KjwT5yx0C/4wOkHq2PPN3O
qCepJ9z/jIXaag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:28 2025 by rpki-client