Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          efKR6z/bF2Ypux+ldVibthzPmHPA706fVmNzHMfURJ4=
Subject key identifier:   82:4C:C6:5C:07:AF:97:D1:FF:40:E8:39:79:A0:D2:66:2E:E7:C4:B5
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       019A522C40B1E964A0E4AD09D66E2187D49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          170C
Signing time:             Wed 05 Nov 2025 04:00:23 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:23 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:23 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: JRgLxsGzK1hi/wLUD27tfXOq9IRYvENopEiM211wRWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:40:b1:e9:64:a0:e4:ad:09:d6:6e:21:87:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Nov  5 04:00:23 2025 GMT
            Not After : Nov  6 04:00:23 2025 GMT
        Subject: CN=824cc65c07af97d1ff40e83979a0d2662ee7c4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:70:c3:57:05:d8:8b:8d:28:13:61:04:10:
                    6d:b4:9c:1d:64:11:1f:9f:bc:36:5b:04:84:0d:89:
                    f8:f1:29:90:6c:25:82:f8:66:fe:a7:a3:07:70:11:
                    3e:dd:2d:dd:b1:19:5d:03:a0:c7:85:0b:02:aa:bb:
                    6e:09:4a:11:12:04:b3:a1:f1:54:bb:4a:3b:b2:ff:
                    52:01:16:db:c8:ea:11:ea:9a:f7:56:ee:3e:3b:e1:
                    4a:a9:ce:0e:8f:46:53:df:e2:7c:03:d9:41:92:d7:
                    6e:5e:5f:b6:b2:c7:2b:72:bb:be:dd:80:08:0d:c2:
                    f2:7b:ce:ac:a9:31:ac:b7:59:cd:34:c7:b1:34:81:
                    72:48:4d:d5:dd:37:11:a5:15:3b:e5:0c:2a:ec:be:
                    0f:52:25:4d:83:cb:2f:48:25:46:cd:d4:19:55:fb:
                    a2:3e:dc:24:a9:5b:6b:5d:dd:df:84:0e:27:d7:15:
                    7d:2d:1d:c0:fd:ed:f0:56:e9:15:8d:47:0a:b7:eb:
                    4c:df:2a:e3:af:a9:75:4a:84:e3:09:79:18:f9:03:
                    4a:18:0e:77:94:d1:e6:8b:a7:b9:79:13:b3:69:42:
                    b3:a4:51:13:43:d5:b4:89:41:4b:27:87:6c:e1:72:
                    11:a1:ee:06:33:b9:8f:f9:c9:15:09:f3:7c:1b:b2:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4C:C6:5C:07:AF:97:D1:FF:40:E8:39:79:A0:D2:66:2E:E7:C4:B5
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:39:22:a3:05:e9:70:07:a6:17:84:01:77:2f:bd:47:bc:
         e8:dc:1a:6e:51:a9:1e:02:4e:27:69:bf:66:c2:c5:a7:60:97:
         d1:a2:a9:32:65:4a:94:27:87:4a:7b:c2:af:fc:68:1e:37:f7:
         1f:e9:c9:87:7b:92:bb:7a:e9:5a:cb:be:5c:1c:a7:b1:fc:05:
         6f:df:c0:5b:9d:60:26:f5:91:c4:d4:a6:70:ba:dc:1c:b6:4b:
         71:48:5d:58:5d:bc:db:09:60:e7:c1:77:cc:aa:af:54:bc:69:
         42:c5:d6:bc:67:fc:d0:76:e0:51:36:83:5d:fe:95:63:29:8c:
         6e:2a:7c:35:8e:78:cc:b5:94:19:ab:78:f7:7a:29:8b:7a:fb:
         1a:0c:8f:c9:f6:ca:26:c6:d1:3d:25:c2:3a:48:29:c4:04:fe:
         fc:f0:ff:b9:3a:60:28:fb:65:75:b8:86:d1:88:0b:a4:a9:50:
         d7:61:d9:5f:f4:b1:41:28:05:4d:7d:84:ff:ef:4a:78:ae:c9:
         f9:6d:80:9e:59:0c:a1:bd:27:35:db:f6:7d:ef:04:2d:8d:22:
         36:fb:20:97:5d:93:0b:5a:f4:12:18:56:8c:cf:92:c5:c1:08:
         81:2e:92:0a:1d:e8:c7:b2:44:7f:c2:88:25:ab:67:db:11:49:
         5f:3e:9c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLECx6WSg5K0J1m4hh9SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw
NDA3OWUwHhcNMjUxMTA1MDQwMDIzWhcNMjUxMTA2MDQwMDIzWjAzMTEwLwYDVQQD
Eyg4MjRjYzY1YzA3YWY5N2QxZmY0MGU4Mzk3OWEwZDI2NjJlZTdjNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh9ww1cF2IuNKBNhBBBttJwdZBEf
n7w2WwSEDYn48SmQbCWC+Gb+p6MHcBE+3S3dsRldA6DHhQsCqrtuCUoREgSzofFU
u0o7sv9SARbbyOoR6pr3Vu4+O+FKqc4Oj0ZT3+J8A9lBktduXl+2sscrcru+3YAI
DcLye86sqTGst1nNNMexNIFySE3V3TcRpRU75Qwq7L4PUiVNg8svSCVGzdQZVfui
PtwkqVtrXd3fhA4n1xV9LR3A/e3wVukVjUcKt+tM3yrjr6l1SoTjCXkY+QNKGA53
lNHmi6e5eROzaUKzpFETQ9W0iUFLJ4ds4XIRoe4GM7mP+ckVCfN8G7JvQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJMxlwHr5fR/0DoOXmg0mYu58S1MB8GA1UdIwQY
MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt
YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj
LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQew5IqMF
6XAHpheEAXcvvUe86NwablGpHgJOJ2m/ZsLFp2CX0aKpMmVKlCeHSnvCr/xoHjf3
H+nJh3uSu3rpWsu+XBynsfwFb9/AW51gJvWRxNSmcLrcHLZLcUhdWF282wlg58F3
zKqvVLxpQsXWvGf80HbgUTaDXf6VYymMbip8NY54zLWUGat493opi3r7GgyPyfbK
JsbRPSXCOkgpxAT+/PD/uTpgKPtldbiG0YgLpKlQ12HZX/SxQSgFTX2E/+9KeK7J
+W2AnlkMob0nNdv2fe8ELY0iNvsgl12TC1r0EhhWjM+SxcEIgS6SCh3ox7JEf8KI
Jatn2xFJXz6cKw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:53 2025 by rpki-client