Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          iIH1Y8eEk+UEmSInoV8YRt4AOkP8QYuwcl7b2KQYTmY=
Subject key identifier:   18:93:EC:E2:98:03:9E:70:2E:48:E7:23:70:4C:56:0D:6A:87:DC:C8
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019A4F99429DDFE4EEF5DD8A45163CF9E9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          1315
Signing time:             Tue 04 Nov 2025 16:00:35 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:35 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:35 +0000
Files and hashes:         1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=)
                          2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=)
                          3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=)
                          4: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=)
                          5: DNKZJXST2kGoKjhKfNecPwD9F3A.roa (hash: hRAyyWzBrmRGz8fLB2bN07ZS6ISPKILq/slATox9sto=)
                          6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=)
                          7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=)
                          8: HDMlPqzgtZrs5BaUVuoFr5HECpI.roa (hash: 9BBjLS8Yikm9FGwjGKZk9OGf+SsmyUdyuY7eW3ej8mg=)
                          9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=)
                          10: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=)
                          11: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=)
                          12: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=)
                          13: brk2eWKkbDOeEGphbM_FR9qqM9A.roa (hash: yHMenONPVTRm7WPjBi5HPXl1TTgaMoeCdfTRvLQgfGk=)
                          14: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=)
                          15: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=)
                          16: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: zkP/78Y8/SIjAJnY0MUZFacoaoONobg5fZkDfgJXy5c=)
                          17: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=)
                          18: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=)
                          19: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=)
                          20: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=)
                          21: j4qMrNazE4U-55TjMmv1LIDcc_A.roa (hash: Gj4NvJCKAdxN+LOAFljaCnKHiV1lpQyFMbBfJ0I+GNM=)
                          22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=)
                          23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=)
                          24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=)
                          25: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=)
                          26: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=)
                          27: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=)
                          28: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=)
                          29: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=)
                          30: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=)
                          31: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:42:9d:df:e4:ee:f5:dd:8a:45:16:3c:f9:e9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Nov  4 16:00:35 2025 GMT
            Not After : Nov  5 16:00:35 2025 GMT
        Subject: CN=1893ece298039e702e48e723704c560d6a87dcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:94:aa:b1:d0:77:a9:0b:e3:7a:e3:29:dd:
                    39:d8:ff:21:e9:79:e5:58:28:05:45:99:23:25:78:
                    d5:8f:47:2e:79:2a:d0:77:cd:f9:73:ee:b2:54:b2:
                    2d:ec:12:bd:46:d3:9a:a4:19:6b:42:6f:77:3c:40:
                    e7:d8:bc:4f:dd:87:7f:99:bd:45:2b:a2:37:85:5d:
                    d3:89:d9:0f:69:a1:e9:a0:d3:ba:e4:7e:30:d5:e2:
                    a5:b8:1e:17:dc:a1:bf:3a:f2:87:f0:39:6b:ff:3d:
                    0c:90:c1:3d:ad:4d:52:51:1d:f8:ec:8c:25:c1:e6:
                    39:b5:3b:2b:b8:dc:c2:97:90:b7:20:ab:e7:35:42:
                    2e:3c:6a:c7:4b:6c:c1:1a:78:32:c8:f2:d5:11:56:
                    f1:67:af:17:d2:e3:f9:8e:3b:79:2e:36:17:a6:68:
                    8d:4c:0f:1d:6e:62:c6:51:ef:78:67:87:4b:6d:0b:
                    f4:8c:4c:9b:06:20:ef:db:9d:e2:ff:1b:6b:f0:4d:
                    e3:62:c6:92:df:1f:8d:a3:75:e2:ba:b8:08:ba:72:
                    a7:5d:b4:a2:8a:4f:af:4c:05:e4:f6:4d:00:4b:a2:
                    2a:37:f0:1f:73:28:e5:fc:82:aa:1f:e5:6f:8f:70:
                    df:ff:58:db:de:ac:05:d0:55:5d:a7:e4:3b:36:de:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:EC:E2:98:03:9E:70:2E:48:E7:23:70:4C:56:0D:6A:87:DC:C8
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:18:08:a9:c2:5b:52:b8:49:b3:6d:34:c3:04:b5:76:b7:8a:
         8f:fd:7b:3c:6c:2b:a5:8a:67:10:9e:fb:cd:e0:4a:b2:e2:36:
         a6:05:24:ff:2d:2a:f3:78:3e:59:bb:43:7d:26:c7:c3:7c:b1:
         5f:06:f4:53:03:74:3e:bc:e1:4e:39:c0:bb:e5:48:2f:80:fc:
         e0:c0:7c:2d:bf:62:18:9d:c9:a9:9e:ef:f2:df:a7:1e:36:d0:
         99:b8:80:4b:ba:34:5d:60:55:06:58:21:4e:e5:4f:9b:c0:7f:
         85:79:16:a4:28:71:f0:14:a3:c6:9d:31:72:13:1f:e9:d6:7a:
         a5:37:df:c3:9c:d8:a7:67:5c:7b:59:fb:a7:57:95:7f:14:a3:
         5a:e9:e8:81:fd:6c:ae:f4:08:1b:73:91:d9:c5:55:6d:95:8c:
         2f:2f:e9:d7:36:a9:56:d8:97:e6:e1:09:0b:07:a9:b0:f3:6a:
         8c:13:f4:dd:1f:1e:2e:f0:de:d8:cc:e1:fc:d4:c1:37:44:88:
         a6:a5:cd:05:a1:c0:80:56:b9:12:87:c3:fc:b5:9f:83:ae:aa:
         41:82:4f:10:b5:db:fb:d7:e4:44:32:19:ab:78:a7:41:b1:a0:
         46:04:e0:19:7f:30:c4:3e:ea:da:23:c2:ef:8b:b9:d0:38:db:
         f0:82:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:47 2025 by rpki-client