Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File:                     rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier:          6l1eNB/5sDUoFZeJp2jPSgr6niMb74M+t6jrg/F4tUY=
Subject key identifier:   FE:8F:4B:1B:58:32:4C:32:A5:DE:72:F3:04:4D:C9:92:35:04:1A:8B
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer:       /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial:       019A522C050CED4FD25AD6DD25723083A5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number:          144C
Signing time:             Wed 05 Nov 2025 04:00:07 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:07 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:07 +0000
Files and hashes:         1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: 42Nt6SEohHxPDmsc9AB3mINR4Qcga2sBa+y2idje/kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:05:0c:ed:4f:d2:5a:d6:dd:25:72:30:83:a5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
        Validity
            Not Before: Nov  5 04:00:07 2025 GMT
            Not After : Nov  6 04:00:07 2025 GMT
        Subject: CN=fe8f4b1b58324c32a5de72f3044dc99235041a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:aa:36:6e:cb:5b:d0:a2:a1:c7:39:3b:13:
                    25:d0:8b:a5:f1:4c:bb:a9:b3:7f:f8:d1:2c:a1:29:
                    16:57:e0:b0:a8:3e:1f:08:e2:91:8b:42:08:9f:85:
                    08:8a:c9:4d:0f:22:4e:d4:6d:60:fc:90:b6:2a:bc:
                    3f:94:da:49:46:fb:d4:8c:d1:45:5f:bd:12:78:f3:
                    92:25:83:d9:ba:46:df:d2:e3:eb:8f:ee:04:c5:94:
                    38:3b:22:a0:db:5c:cd:19:48:a2:9a:ee:35:5e:62:
                    17:74:37:9f:5f:8a:1f:d8:f4:8f:ed:cd:c5:57:5e:
                    0e:fd:05:d9:20:ce:4d:4f:3d:1d:dc:84:e1:12:d0:
                    ea:f7:f9:a3:1b:3c:81:23:8d:97:69:60:7e:d8:b9:
                    50:9b:e4:8f:b2:ca:4f:b4:a6:94:70:9e:79:41:d0:
                    69:74:97:45:a9:6e:9d:da:0b:9b:4c:7a:a0:b7:22:
                    ed:00:2b:4d:c0:19:85:80:38:70:98:18:8e:3b:89:
                    97:7f:15:15:a5:51:66:ea:44:4e:09:1e:0d:ee:ae:
                    99:19:fc:aa:ea:64:73:03:32:98:69:9b:ef:cd:e4:
                    44:a3:be:3d:46:1c:12:84:18:fb:74:05:f0:9f:21:
                    39:0d:ed:63:8c:f4:0a:30:6c:26:e0:e6:2c:06:c0:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8F:4B:1B:58:32:4C:32:A5:DE:72:F3:04:4D:C9:92:35:04:1A:8B
            X509v3 Authority Key Identifier:
                keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:80:b6:bb:8e:43:fc:7c:63:e1:6b:14:13:07:ff:af:72:6f:
         ff:93:7d:9e:ee:8d:68:18:fd:31:dd:7c:c2:30:ab:20:43:3b:
         90:cc:4b:12:94:f0:61:de:ba:7d:b0:57:91:0a:0f:44:ea:96:
         8b:21:54:00:a0:d9:7b:56:44:6b:95:d3:e4:03:c2:a3:ac:fe:
         5e:be:62:05:70:57:45:d4:b1:04:8f:82:26:33:02:01:4f:c8:
         3f:b3:4b:af:a2:96:3d:56:35:1c:8d:5f:75:f3:88:02:9f:10:
         9e:27:f6:9a:a6:2a:79:fa:c9:48:d2:e9:05:ba:ac:f4:ec:a0:
         da:c6:f1:95:8c:be:08:3e:c6:b8:d0:96:cf:01:08:9d:53:8c:
         47:ed:6a:2c:89:e5:90:fd:ae:ba:ea:6b:d3:a7:9f:cf:40:04:
         f1:d5:3a:44:d6:59:ee:3a:a4:af:61:6e:64:f3:a7:df:b4:40:
         6f:72:c2:1d:4f:39:f0:21:bb:1f:4f:39:fd:2e:4a:84:8f:3f:
         e6:63:8e:dc:04:31:af:85:0d:c6:2b:ad:4b:a3:1d:71:aa:af:
         85:09:30:05:f8:ed:2b:d4:a6:92:67:33:5b:31:0b:89:c3:3a:
         ad:bf:b1:86:89:3a:95:9e:7e:4a:4a:d1:41:13:ce:54:9a:8d:
         3e:e2:40:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLAUM7U/SWtbdJXIwg6XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjQ1NWIxYTg1OWJjNGQ2NjE4MTc1MDU1ZjBlYzg5NjA3
ZjA1MmQwHhcNMjUxMTA1MDQwMDA3WhcNMjUxMTA2MDQwMDA3WjAzMTEwLwYDVQQD
EyhmZThmNGIxYjU4MzI0YzMyYTVkZTcyZjMwNDRkYzk5MjM1MDQxYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueeqNm7LW9Ciocc5OxMl0Iul8Uy7
qbN/+NEsoSkWV+CwqD4fCOKRi0IIn4UIislNDyJO1G1g/JC2Krw/lNpJRvvUjNFF
X70SePOSJYPZukbf0uPrj+4ExZQ4OyKg21zNGUiimu41XmIXdDefX4of2PSP7c3F
V14O/QXZIM5NTz0d3IThEtDq9/mjGzyBI42XaWB+2LlQm+SPsspPtKaUcJ55QdBp
dJdFqW6d2gubTHqgtyLtACtNwBmFgDhwmBiOO4mXfxUVpVFm6kROCR4N7q6ZGfyq
6mRzAzKYaZvvzeREo749RhwShBj7dAXwnyE5De1jjPQKMGwm4OYsBsC4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6PSxtYMkwypd5y8wRNyZI1BBqLMB8GA1UdIwQY
MBaAFKwkVbGoWbxNZhgXUFXw7IlgfwUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjct
YzcxODM2MWQ0Mzc0LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjctYzcxODM2MWQ0Mzc0
LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4C2u45D
/Hxj4WsUEwf/r3Jv/5N9nu6NaBj9Md18wjCrIEM7kMxLEpTwYd66fbBXkQoPROqW
iyFUAKDZe1ZEa5XT5APCo6z+Xr5iBXBXRdSxBI+CJjMCAU/IP7NLr6KWPVY1HI1f
dfOIAp8Qnif2mqYqefrJSNLpBbqs9Oyg2sbxlYy+CD7GuNCWzwEInVOMR+1qLInl
kP2uuupr06efz0AE8dU6RNZZ7jqkr2FuZPOn37RAb3LCHU858CG7H085/S5KhI8/
5mOO3AQxr4UNxiutS6MdcaqvhQkwBfjtK9SmkmczWzELicM6rb+xhok6lZ5+SkrR
QRPOVJqNPuJAWg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:23 2025 by rpki-client