Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File:                     1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier:          ey45PM9QlIIqI/oDuTVZxz32tS2CKRtD/8xsUk38XIU=
Subject key identifier:   46:38:9C:0B:D9:11:4D:12:8C:D2:F7:F9:8D:87:A8:5E:67:AE:7D:92
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer:       /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial:       019A54BFBFD3D3C035DB6D414E6F56A59864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number:          1712
Signing time:             Wed 05 Nov 2025 16:00:43 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:43 +0000
Manifest next update:     Thu 06 Nov 2025 16:00:43 +0000
Files and hashes:         1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: /szvLLUI4/j30Z6KGcKU8Dpj0PRit3kZ6sVfjuPcRaA=)
                          2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:bf:bf:d3:d3:c0:35:db:6d:41:4e:6f:56:a5:98:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
        Validity
            Not Before: Nov  5 16:00:43 2025 GMT
            Not After : Nov  6 16:00:43 2025 GMT
        Subject: CN=46389c0bd9114d128cd2f7f98d87a85e67ae7d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:91:13:c0:6e:9d:89:69:42:5c:82:0b:7a:
                    62:f4:d4:f2:a8:80:39:e5:83:b4:b6:d4:36:56:ab:
                    fb:2a:b9:4c:cf:ec:a1:fd:a6:81:89:d4:48:96:bc:
                    a7:59:2b:b5:80:13:74:11:89:68:7b:c1:bb:6b:8b:
                    61:83:94:44:33:f5:a9:28:48:2c:c8:b3:05:0a:18:
                    7f:e5:a9:87:a8:b8:11:f3:49:e2:63:e1:a7:b7:b1:
                    94:04:7c:f6:09:b2:f2:37:b0:a8:a9:59:1f:8c:42:
                    36:37:e5:c4:e4:32:bc:dd:23:34:ab:5f:11:2d:36:
                    44:6b:ff:4e:6e:26:30:d2:40:b2:51:b9:a9:2f:81:
                    1d:20:2d:ff:9d:60:53:ff:be:07:75:35:8d:e1:66:
                    7f:ad:5b:04:13:37:6b:52:41:62:fe:88:a3:fa:c8:
                    f3:e6:f7:35:aa:3b:a1:6e:32:5f:a6:41:89:51:6d:
                    52:a9:65:c4:40:b4:ad:63:04:61:ab:c5:8b:63:db:
                    2f:ad:ee:1c:a9:7c:f3:39:43:f5:86:0f:16:cb:15:
                    4e:44:1a:35:d0:3e:63:1c:23:ce:f4:20:d3:48:10:
                    68:86:ff:2e:61:e4:1c:8d:11:54:36:bb:ec:41:72:
                    7f:c5:62:bb:45:7d:e1:0e:ca:30:09:73:34:2f:c7:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:38:9C:0B:D9:11:4D:12:8C:D2:F7:F9:8D:87:A8:5E:67:AE:7D:92
            X509v3 Authority Key Identifier:
                keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:e6:2d:d6:70:d3:04:12:c7:fb:e9:d0:09:15:49:84:5b:
         c9:36:95:f4:74:8c:61:3d:f2:df:b2:dc:81:27:ac:9d:96:9a:
         c3:d0:c5:95:6d:63:c9:d8:ec:e1:4c:3f:7b:46:7c:a3:73:3c:
         85:d1:f1:a0:3b:cf:b7:03:76:be:bf:b8:7f:51:e2:00:f6:2f:
         30:3e:d2:47:a1:d2:70:57:24:ba:33:96:90:a0:c1:ce:14:4e:
         65:63:1f:79:da:a2:66:12:1f:2f:41:08:77:9d:6c:4a:2a:7e:
         87:24:2e:f2:a9:8c:88:5f:2b:27:0c:de:f4:34:fe:a0:ee:4e:
         3d:66:63:ca:2b:19:8e:9d:63:f3:d0:57:50:7a:26:fe:56:6a:
         b9:8e:f4:6d:22:ea:f3:9e:0e:65:6e:d9:e0:4b:72:38:e3:f2:
         96:bc:cd:8b:27:99:7c:80:75:13:8d:95:f5:2d:2d:39:47:a1:
         3c:32:0c:04:b4:d1:c8:10:9e:85:1f:66:0f:ca:1d:13:7e:3f:
         ed:f1:a6:74:ad:13:66:1d:c8:87:bc:f6:fb:b3:12:91:1e:7a:
         f8:ea:a0:20:fe:f7:43:4d:a5:a2:b7:5b:5a:6e:a6:58:31:d0:
         6d:56:3e:1d:33:72:04:e5:bd:54:57:03:a4:b3:7e:35:a3:be:
         cf:06:30:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpUv7/T08A1221BTm9WpZhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWIyN2MxZDU0M2FlMWVmZTgzYTE0MWJlMTI0NDRlOTI0
MThmZjMwHhcNMjUxMTA1MTYwMDQzWhcNMjUxMTA2MTYwMDQzWjAzMTEwLwYDVQQD
Eyg0NjM4OWMwYmQ5MTE0ZDEyOGNkMmY3Zjk4ZDg3YTg1ZTY3YWU3ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVSRE8BunYlpQlyCC3pi9NTyqIA5
5YO0ttQ2Vqv7KrlMz+yh/aaBidRIlrynWSu1gBN0EYloe8G7a4thg5REM/WpKEgs
yLMFChh/5amHqLgR80niY+Gnt7GUBHz2CbLyN7CoqVkfjEI2N+XE5DK83SM0q18R
LTZEa/9ObiYw0kCyUbmpL4EdIC3/nWBT/74HdTWN4WZ/rVsEEzdrUkFi/oij+sjz
5vc1qjuhbjJfpkGJUW1SqWXEQLStYwRhq8WLY9svre4cqXzzOUP1hg8WyxVORBo1
0D5jHCPO9CDTSBBohv8uYeQcjRFUNrvsQXJ/xWK7RX3hDsowCXM0L8e+9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEY4nAvZEU0SjNL3+Y2HqF5nrn2SMB8GA1UdIwQY
MBaAFPlbJ8HVQ64e/oOhQb4SRE6SQY/zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wc253ZFZEcmg3LWc2RkJ2aEpFVHBKQmpfTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4
LWFiYWQxZmZiODExYy8xLzEtVnNud2RWRHJoNy1nNkZCdmhKRVRwSkJqX00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NiL2FlODU1NC03NDRhLTQyZDktYjUxOC1hYmFkMWZmYjgx
MWMvMS8xLVZzbndkVkRyaDctZzZGQnZoSkVUcEpCal9NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZn3m
LdZw0wQSx/vp0AkVSYRbyTaV9HSMYT3y37LcgSesnZaaw9DFlW1jydjs4Uw/e0Z8
o3M8hdHxoDvPtwN2vr+4f1HiAPYvMD7SR6HScFckujOWkKDBzhROZWMfedqiZhIf
L0EId51sSip+hyQu8qmMiF8rJwze9DT+oO5OPWZjyisZjp1j89BXUHom/lZquY70
bSLq854OZW7Z4EtyOOPylrzNiyeZfIB1E42V9S0tOUehPDIMBLTRyBCehR9mD8od
E34/7fGmdK0TZh3Ih7z2+7MSkR56+OqgIP73Q02lordbWm6mWDHQbVY+HTNyBOW9
VFcDpLN+NaO+zwYwng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:52 2025 by rpki-client