Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          SnLTHlYA8ykKHtGdq9XA3+ronY95kvsWQaP77xwDs/w=
Subject key identifier:   63:4D:EE:FA:19:D5:C4:C3:FF:94:36:0D:15:15:CA:90:50:55:6F:11
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       019A54C0CAAA9C37103CE1F220FCC998C4C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          1711
Signing time:             Wed 05 Nov 2025 16:01:52 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:52 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:52 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: kZ/lzZbMEbg9FB6HeF7FXSMLwL1q6aOXaDA2a3UwWPc=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:ca:aa:9c:37:10:3c:e1:f2:20:fc:c9:98:c4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Nov  5 16:01:52 2025 GMT
            Not After : Nov  6 16:01:52 2025 GMT
        Subject: CN=634deefa19d5c4c3ff94360d1515ca9050556f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:e9:2a:4a:57:1d:c2:16:81:ff:c7:2b:94:
                    5e:bf:68:0a:b6:7d:a8:85:49:61:0b:84:a7:1c:a9:
                    b7:01:a0:07:dd:12:66:13:79:e0:50:3d:d1:eb:fb:
                    1f:b5:f8:ec:c3:7e:b6:56:b8:17:b6:23:e7:ac:46:
                    16:ce:07:7d:be:44:f5:1d:78:c1:a2:ad:cb:d4:ba:
                    9e:41:12:36:6d:ba:26:6e:b1:26:7f:12:40:3f:fb:
                    32:55:42:63:ad:f4:a3:7b:65:bb:1c:e4:c0:36:eb:
                    7d:ae:09:10:16:da:2f:8c:85:66:e6:24:c1:62:c7:
                    1d:22:97:9a:81:e9:8b:bf:5b:2b:9e:16:39:9f:69:
                    24:40:c8:6d:79:f0:9e:ca:de:1c:aa:62:d4:dc:e1:
                    fd:f1:23:fe:cc:14:81:24:91:b9:ba:88:64:dd:07:
                    48:05:55:8b:67:2c:7f:02:f8:4f:16:f2:fc:75:40:
                    d7:0a:3a:53:52:23:e0:a2:52:fb:9e:53:aa:96:f9:
                    14:98:ef:07:73:e8:40:ce:2b:f9:ca:c7:f5:64:55:
                    fa:8e:d6:75:cb:fd:b0:c5:c5:c8:25:95:e8:16:53:
                    a3:d2:86:c4:8e:e2:7d:7b:52:40:1a:d7:5a:e4:2b:
                    1b:82:a0:1f:f4:c2:0d:5c:85:2a:49:4a:79:8b:3e:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4D:EE:FA:19:D5:C4:C3:FF:94:36:0D:15:15:CA:90:50:55:6F:11
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:75:ae:14:b7:87:25:44:e2:1c:01:da:ad:6a:14:45:7c:46:
         0f:09:40:b8:97:15:86:07:8a:00:44:a0:17:4a:7e:b8:74:48:
         47:26:b4:67:0b:7b:7a:88:6e:72:c3:6b:8d:87:03:5f:d9:be:
         7f:8f:db:5c:f7:49:de:4c:75:9c:e0:59:97:55:6a:1e:6b:dd:
         4d:d6:80:5d:a0:a6:2a:c1:10:e9:cb:7f:d4:9b:be:66:fc:52:
         df:0b:90:05:6d:33:12:40:f3:05:89:f1:1a:24:7c:72:07:c3:
         2d:43:b9:14:cd:a8:73:a9:14:4b:9b:08:11:de:95:c2:3d:87:
         41:13:55:4b:24:c5:cd:9e:05:4a:69:1b:2c:21:36:ae:9f:43:
         23:eb:be:cd:0e:ed:a3:5b:87:00:41:1e:79:17:55:f0:bb:e9:
         88:51:c7:f8:45:f6:44:b4:86:84:02:18:b4:e6:27:ae:d8:ae:
         b9:d0:81:40:1c:9c:ae:cc:ff:08:84:3e:22:e4:12:78:1d:a4:
         fd:a6:26:46:70:de:38:46:09:71:f1:dc:9b:02:9b:e1:69:4c:
         72:08:66:4c:f7:43:34:2c:86:de:76:e9:bc:8f:bc:1f:ea:47:
         cc:3e:42:63:6e:59:47:3b:c3:62:df:85:9d:d3:a4:58:af:20:
         1c:82:3f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwMqqnDcQPOHyIPzJmMTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz
ZTRmMDMwHhcNMjUxMTA1MTYwMTUyWhcNMjUxMTA2MTYwMTUyWjAzMTEwLwYDVQQD
Eyg2MzRkZWVmYTE5ZDVjNGMzZmY5NDM2MGQxNTE1Y2E5MDUwNTU2ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mDpKkpXHcIWgf/HK5Rev2gKtn2o
hUlhC4SnHKm3AaAH3RJmE3ngUD3R6/sftfjsw362VrgXtiPnrEYWzgd9vkT1HXjB
oq3L1LqeQRI2bbombrEmfxJAP/syVUJjrfSje2W7HOTANut9rgkQFtovjIVm5iTB
YscdIpeagemLv1srnhY5n2kkQMhtefCeyt4cqmLU3OH98SP+zBSBJJG5uohk3QdI
BVWLZyx/AvhPFvL8dUDXCjpTUiPgolL7nlOqlvkUmO8Hc+hAziv5ysf1ZFX6jtZ1
y/2wxcXIJZXoFlOj0obEjuJ9e1JAGtda5CsbgqAf9MINXIUqSUp5iz4bIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNN7voZ1cTD/5Q2DRUVypBQVW8RMB8GA1UdIwQY
MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt
MzViMTljZjkyZGY5LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5
LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXWuFLeH
JUTiHAHarWoURXxGDwlAuJcVhgeKAESgF0p+uHRIRya0Zwt7eohucsNrjYcDX9m+
f4/bXPdJ3kx1nOBZl1VqHmvdTdaAXaCmKsEQ6ct/1Ju+ZvxS3wuQBW0zEkDzBYnx
GiR8cgfDLUO5FM2oc6kUS5sIEd6Vwj2HQRNVSyTFzZ4FSmkbLCE2rp9DI+u+zQ7t
o1uHAEEeeRdV8LvpiFHH+EX2RLSGhAIYtOYnrtiuudCBQBycrsz/CIQ+IuQSeB2k
/aYmRnDeOEYJcfHcmwKb4WlMcghmTPdDNCyG3nbpvI+8H+pHzD5CY25ZRzvDYt+F
ndOkWK8gHII/7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:25 2025 by rpki-client