Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          DOjDBN0QwIPPXJNkSQQN5l48Aa4h0YirQxIdAyLzptA=
Subject key identifier:   E5:4F:20:77:89:17:CF:EB:E8:79:6B:50:F2:8B:7A:82:A3:DA:1A:83
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019A4F273E523894F11F8DAC5B2AF0D133F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          11B5
Signing time:             Tue 04 Nov 2025 13:56:03 +0000
Manifest this update:     Tue 04 Nov 2025 13:56:03 +0000
Manifest next update:     Wed 05 Nov 2025 13:56:03 +0000
Files and hashes:         1: 2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa (hash: cCZE3JeNkWpHPZrQkRbXS7MTAFRrdoU+BJzK4LD0G4Y=)
                          2: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: reozrU2QDbslVAnB/L0WZa8wH1kXCtIQeIYZxG1byqs=)
                          3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
                          4: JfoIPjXYxzDMg2Fk91casbkylHE.roa (hash: LEmsudTH6L3328g4/unRQrE45kEbv6vgtSyjmeaPcrY=)
                          5: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:27:3e:52:38:94:f1:1f:8d:ac:5b:2a:f0:d1:33:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Nov  4 13:56:03 2025 GMT
            Not After : Nov  5 13:56:03 2025 GMT
        Subject: CN=e54f20778917cfebe8796b50f28b7a82a3da1a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:9d:ba:8a:03:f6:0b:bb:c0:bd:6a:ce:c3:
                    51:dc:ea:a3:94:9e:1a:b3:8d:e7:57:67:bd:bd:c3:
                    12:22:f5:ca:4b:9d:5b:7f:87:c3:57:5d:6d:3d:de:
                    2e:9b:cf:4c:72:39:57:a3:ac:0a:e7:17:28:62:b5:
                    b7:6f:e0:41:92:bc:da:65:ad:03:3e:c0:df:60:cc:
                    04:f6:9f:69:a3:75:94:3c:d0:a3:ae:2a:f4:a6:50:
                    6b:88:6a:16:70:eb:b4:ec:aa:f5:94:2b:0d:2f:b4:
                    6f:29:99:27:62:78:eb:9e:2c:f4:70:33:3c:21:c5:
                    6b:31:4c:d4:fd:2d:f7:5d:c6:bd:22:41:59:61:4b:
                    9a:af:cb:34:88:85:ab:70:43:0c:de:0a:01:c7:2e:
                    1b:73:01:3d:40:f0:99:c3:1f:5e:bb:49:97:b4:2d:
                    42:33:39:9d:fc:05:e6:cd:92:3b:1d:88:ff:af:37:
                    8a:45:72:62:7f:27:4f:5d:16:95:ca:76:ad:8f:28:
                    c2:27:f3:bc:ac:5c:d7:b8:ef:24:75:12:65:2e:71:
                    ca:78:d2:94:b4:f2:bb:04:9e:c4:a4:2f:54:26:9a:
                    1a:11:c4:b7:0e:13:0c:23:bf:06:ae:ad:69:b7:4c:
                    51:0f:fd:96:b9:da:c9:b0:12:11:58:dc:44:67:21:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:20:77:89:17:CF:EB:E8:79:6B:50:F2:8B:7A:82:A3:DA:1A:83
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bf:8d:50:90:82:81:de:5e:7f:9e:83:0e:41:03:83:32:a6:
         a9:0d:49:96:38:b8:40:98:b9:ea:dd:75:42:88:49:ad:e6:a5:
         19:51:87:89:ff:18:5f:db:7d:08:cf:3a:bb:1f:a1:2b:44:a7:
         85:2f:9b:ee:cc:8d:7b:b6:c6:5e:62:2b:18:65:f2:0e:0c:b2:
         ce:9f:63:22:bc:9c:0b:05:e7:c0:e7:6a:d8:0c:9c:ed:df:18:
         d6:91:5f:d7:42:ad:cc:2c:f8:d9:38:51:91:60:50:59:e9:8d:
         06:d3:a9:b1:d5:03:fb:6a:7b:34:a4:42:50:8d:ed:4c:eb:c2:
         e5:e2:6f:a9:fb:4c:ad:35:3c:93:54:02:ec:d7:17:be:6b:fd:
         06:50:91:f9:53:e1:af:95:e3:b3:ea:b1:0d:13:2a:ae:10:db:
         c8:80:dd:55:b6:ef:05:43:e9:cc:51:ae:6e:8e:24:92:f9:3d:
         48:87:f5:25:e9:a9:38:7d:47:5d:0c:8b:5e:a7:1f:7c:fe:fa:
         30:df:61:ac:5c:77:c8:f5:09:22:fd:dd:e6:2e:a3:11:71:d8:
         63:5c:cc:3d:4c:43:93:d3:5c:a1:59:92:40:32:17:e6:38:3d:
         95:47:17:37:9c:aa:15:dc:6c:2f:4b:f7:1c:64:5b:65:0c:f0:
         db:b4:63:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPJz5SOJTxH42sWyrw0TPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjUxMTA0MTM1NjAzWhcNMjUxMTA1MTM1NjAzWjAzMTEwLwYDVQQD
EyhlNTRmMjA3Nzg5MTdjZmViZTg3OTZiNTBmMjhiN2E4MmEzZGExYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQaduooD9gu7wL1qzsNR3OqjlJ4a
s43nV2e9vcMSIvXKS51bf4fDV11tPd4um89McjlXo6wK5xcoYrW3b+BBkrzaZa0D
PsDfYMwE9p9po3WUPNCjrir0plBriGoWcOu07Kr1lCsNL7RvKZknYnjrniz0cDM8
IcVrMUzU/S33Xca9IkFZYUuar8s0iIWrcEMM3goBxy4bcwE9QPCZwx9eu0mXtC1C
Mzmd/AXmzZI7HYj/rzeKRXJifydPXRaVynatjyjCJ/O8rFzXuO8kdRJlLnHKeNKU
tPK7BJ7EpC9UJpoaEcS3DhMMI78Grq1pt0xRD/2WudrJsBIRWNxEZyH2GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVPIHeJF8/r6HlrUPKLeoKj2hqDMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7+NUJCC
gd5ef56DDkEDgzKmqQ1Jlji4QJi56t11QohJrealGVGHif8YX9t9CM86ux+hK0Sn
hS+b7syNe7bGXmIrGGXyDgyyzp9jIrycCwXnwOdq2Ayc7d8Y1pFf10KtzCz42ThR
kWBQWemNBtOpsdUD+2p7NKRCUI3tTOvC5eJvqftMrTU8k1QC7NcXvmv9BlCR+VPh
r5Xjs+qxDRMqrhDbyIDdVbbvBUPpzFGubo4kkvk9SIf1JempOH1HXQyLXqcffP76
MN9hrFx3yPUJIv3d5i6jEXHYY1zMPUxDk9NcoVmSQDIX5jg9lUcXN5yqFdxsL0v3
HGRbZQzw27RjpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:03 2025 by rpki-client