Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File:                     XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier:          jsuPjDi82G/j06YiOirEFugsCVS24qJ67MRuisBJs5E=
Subject key identifier:   43:26:9E:F7:21:4E:94:B2:97:07:56:E2:9F:BE:AE:5C:D9:4C:84:A6
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer:       /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial:       019A537625CD9BC1661EE138AE8AC7E3E437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number:          1714
Signing time:             Wed 05 Nov 2025 10:00:43 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:43 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:43 +0000
Files and hashes:         1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
                          2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: J+uWUpO3GJ9HXh0KCmARRTzj9m4K57uwzl9LmW3YqPY=)
                          3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:76:25:cd:9b:c1:66:1e:e1:38:ae:8a:c7:e3:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
        Validity
            Not Before: Nov  5 10:00:43 2025 GMT
            Not After : Nov  6 10:00:43 2025 GMT
        Subject: CN=43269ef7214e94b2970756e29fbeae5cd94c84a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:7a:8a:72:e5:0e:9a:e7:5e:71:55:05:8d:
                    3b:ff:31:15:20:85:f1:33:ce:35:8e:a3:0c:62:2c:
                    56:ae:03:08:a1:b2:a6:15:57:c2:a4:3d:ec:5f:35:
                    0d:6e:9b:00:20:96:e4:72:38:1f:76:5f:39:6a:1a:
                    7b:25:24:85:6f:8c:25:f8:88:0d:f6:4f:85:79:f6:
                    a5:29:cd:8b:ae:75:d7:7f:3a:87:0f:82:0e:13:3b:
                    57:22:f0:c5:1d:37:ac:10:2b:61:d5:cf:a5:cb:f5:
                    00:88:04:6e:cb:b6:26:c4:24:88:20:fd:05:5b:26:
                    49:59:58:46:a8:56:46:41:be:86:62:25:00:f0:ed:
                    10:3a:31:3b:ee:4a:a7:1b:3a:84:6b:5e:a5:2f:25:
                    8e:10:be:9c:0d:91:db:09:82:e5:4f:7a:d3:da:e1:
                    61:da:55:66:33:2f:28:88:01:a4:2f:b4:24:75:3a:
                    1b:0c:8c:8a:2f:59:2f:c8:3b:89:72:04:44:6a:b5:
                    52:3a:85:38:39:75:24:59:a8:5c:b8:1b:2d:9e:54:
                    c3:14:79:bd:b5:8f:2f:2f:3d:0b:ea:f7:ff:46:ee:
                    22:6e:ad:16:48:64:03:28:53:8d:22:e9:69:16:4a:
                    c8:dc:15:a9:2a:90:d2:22:a4:d5:dd:ad:22:be:fc:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:9E:F7:21:4E:94:B2:97:07:56:E2:9F:BE:AE:5C:D9:4C:84:A6
            X509v3 Authority Key Identifier:
                keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:38:54:99:bb:52:ac:7c:94:e6:16:77:03:6b:85:12:c5:
         e4:a7:b6:98:b9:6a:35:1b:41:60:5c:22:3d:1d:d3:a2:5c:de:
         62:66:7d:9b:cb:eb:1d:84:43:04:d6:57:9d:57:5f:04:52:03:
         7c:25:37:57:4e:15:6f:09:2d:8a:72:b3:53:7e:52:a4:48:cb:
         ad:36:e5:9d:6c:f5:7d:56:fb:2b:a5:de:c3:a5:56:0e:0c:c8:
         0b:29:aa:33:ee:61:fb:f3:21:7a:ab:a5:16:42:98:27:36:7d:
         63:6c:95:98:ce:fa:69:1c:3c:1f:ef:44:1e:e9:d6:c2:b4:2b:
         ff:ea:fd:b0:a2:29:8a:74:e5:5e:0e:09:13:d3:33:4c:eb:3d:
         ef:1d:ff:ff:d0:48:92:55:0a:cc:a3:42:52:89:8b:8c:32:2d:
         0e:82:26:b0:2c:c1:1f:c2:87:ff:85:76:d2:0a:47:2e:0f:af:
         2a:d7:54:7a:47:31:82:d0:b6:62:5b:8a:4f:bd:54:9c:a2:06:
         92:ab:40:9b:f2:2c:7a:44:5e:24:eb:d9:f3:ca:14:b6:8f:09:
         6a:5b:f4:25:c4:b7:54:5c:15:fd:67:61:d3:bf:d6:f5:56:00:
         ab:80:2b:d8:ba:66:dc:1e:3a:28:62:42:38:91:b9:30:27:7d:
         b1:b0:13:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdiXNm8FmHuE4rorH4+Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUxMTA1MTAwMDQzWhcNMjUxMTA2MTAwMDQzWjAzMTEwLwYDVQQD
Eyg0MzI2OWVmNzIxNGU5NGIyOTcwNzU2ZTI5ZmJlYWU1Y2Q5NGM4NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgd6inLlDprnXnFVBY07/zEVIIXx
M841jqMMYixWrgMIobKmFVfCpD3sXzUNbpsAIJbkcjgfdl85ahp7JSSFb4wl+IgN
9k+FefalKc2LrnXXfzqHD4IOEztXIvDFHTesECth1c+ly/UAiARuy7YmxCSIIP0F
WyZJWVhGqFZGQb6GYiUA8O0QOjE77kqnGzqEa16lLyWOEL6cDZHbCYLlT3rT2uFh
2lVmMy8oiAGkL7QkdTobDIyKL1kvyDuJcgREarVSOoU4OXUkWahcuBstnlTDFHm9
tY8vLz0L6vf/Ru4ibq0WSGQDKFONIulpFkrI3BWpKpDSIqTV3a0ivvxaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMmnvchTpSylwdW4p++rlzZTISmMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXE4VJm7
Uqx8lOYWdwNrhRLF5Ke2mLlqNRtBYFwiPR3TolzeYmZ9m8vrHYRDBNZXnVdfBFID
fCU3V04VbwktinKzU35SpEjLrTblnWz1fVb7K6Xew6VWDgzICymqM+5h+/Mhequl
FkKYJzZ9Y2yVmM76aRw8H+9EHunWwrQr/+r9sKIpinTlXg4JE9MzTOs97x3//9BI
klUKzKNCUomLjDItDoImsCzBH8KH/4V20gpHLg+vKtdUekcxgtC2YluKT71UnKIG
kqtAm/IsekReJOvZ88oUto8Jalv0JcS3VFwV/Wdh07/W9VYAq4Ar2Lpm3B46KGJC
OJG5MCd9sbAT8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:31 2025 by rpki-client