Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          yFs+IT9ahYhbJ6SOKaRnC7QiNl7f8nBHmv2loXIm/Wc=
Subject key identifier:   7B:5A:B0:72:AF:75:41:65:3C:CB:84:8B:4E:9C:26:63:B0:B6:20:A8
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       0198D65F0B2B9ECD8840782A255146E98EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0A82
Signing time:             Sat 23 Aug 2025 10:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:09 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: zKP3CwNRKXH1rNOOYfdsFBV+51bB+1duC3IJQ7Oi67Q=)
                          2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0b:2b:9e:cd:88:40:78:2a:25:51:46:e9:8e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Aug 23 10:00:09 2025 GMT
            Not After : Aug 24 10:00:09 2025 GMT
        Subject: CN=7b5ab072af7541653ccb848b4e9c2663b0b620a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a9:6c:2a:f0:b0:17:cc:dd:5c:f6:64:23:ec:
                    1e:ec:d4:8f:62:71:5a:73:04:c1:26:df:77:9a:43:
                    73:ae:e1:38:7f:4c:66:e1:a3:37:96:a6:7e:24:ca:
                    f7:94:84:c8:ff:e7:96:34:db:a1:87:4e:19:22:00:
                    37:44:c2:dc:a5:de:b1:ee:3d:ab:cc:f4:db:d8:d8:
                    bc:42:9c:ec:30:78:92:ee:8e:18:0e:5f:1a:31:f9:
                    cd:fa:b6:94:a6:af:23:7a:24:40:ae:73:18:50:0a:
                    44:e1:47:5c:a6:6f:2e:0e:be:ac:71:de:f5:06:fb:
                    0a:b5:dc:14:a9:e4:0b:8f:f2:74:6b:97:90:56:fb:
                    d4:9c:03:7f:fb:ff:01:42:ab:de:6a:12:80:a9:c6:
                    5a:55:fe:1a:57:40:b0:73:13:0d:48:d6:9f:3c:b9:
                    18:25:16:7a:76:be:99:75:c0:ed:98:a8:2a:46:5c:
                    1d:53:4c:70:65:66:8e:92:a5:8e:51:ad:d9:25:49:
                    ba:e1:6f:67:c9:4e:de:89:ca:f6:2e:b4:95:03:c2:
                    de:2a:81:ba:20:2a:14:1f:81:d0:df:ad:2a:82:aa:
                    16:b2:f7:81:19:3d:14:9e:bd:b8:3b:19:3a:d1:0d:
                    60:5a:b4:f2:db:d6:bf:6c:0c:df:4a:a2:ae:41:cf:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:B0:72:AF:75:41:65:3C:CB:84:8B:4E:9C:26:63:B0:B6:20:A8
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:57:8c:44:cd:20:2f:8d:26:b9:22:1c:74:6b:bb:c4:6e:13:
         c5:61:cd:2b:38:d7:07:35:69:16:ba:48:32:2c:4c:c9:11:e7:
         d6:d7:4f:df:f5:37:25:c3:71:2f:48:8d:c2:41:e2:11:15:83:
         c5:66:8b:de:32:0f:88:f7:16:12:12:a0:cc:ed:b9:05:5c:8b:
         82:27:83:29:e4:8d:f2:62:e2:77:ff:0c:c8:80:7a:1d:48:57:
         20:57:d0:9f:75:4c:e5:5f:70:69:61:83:c5:53:5b:45:61:e7:
         33:23:f1:10:7a:bb:0c:80:bc:23:fc:21:24:43:35:81:98:ab:
         ca:2a:d3:fc:63:79:4f:be:43:b4:b9:04:7f:cf:6a:61:2d:20:
         02:ea:b2:67:94:32:c1:e8:8f:62:3a:ef:29:b3:82:a8:20:5c:
         a6:59:96:d6:a1:b8:9d:a5:3c:fc:d4:8b:0a:1e:48:c3:2e:3c:
         0b:c2:2d:08:e3:87:46:6f:49:33:e4:0c:48:7d:c8:bc:c5:a1:
         16:87:43:ed:64:01:ea:61:88:13:70:8e:fb:79:47:9d:73:36:
         9f:d2:89:cf:e8:d1:42:15:14:fa:cf:41:fb:10:2c:ad:5d:a9:
         04:dc:29:71:31:61:63:de:ed:ca:8d:bd:4e:c6:83:b3:18:43:
         aa:e7:6d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwsrns2IQHgqJVFG6Y6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjUwODIzMTAwMDA5WhcNMjUwODI0MTAwMDA5WjAzMTEwLwYDVQQD
Eyg3YjVhYjA3MmFmNzU0MTY1M2NjYjg0OGI0ZTljMjY2M2IwYjYyMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KlsKvCwF8zdXPZkI+we7NSPYnFa
cwTBJt93mkNzruE4f0xm4aM3lqZ+JMr3lITI/+eWNNuhh04ZIgA3RMLcpd6x7j2r
zPTb2Ni8QpzsMHiS7o4YDl8aMfnN+raUpq8jeiRArnMYUApE4Udcpm8uDr6scd71
BvsKtdwUqeQLj/J0a5eQVvvUnAN/+/8BQqveahKAqcZaVf4aV0CwcxMNSNafPLkY
JRZ6dr6ZdcDtmKgqRlwdU0xwZWaOkqWOUa3ZJUm64W9nyU7eicr2LrSVA8LeKoG6
ICoUH4HQ360qgqoWsveBGT0Unr24Oxk60Q1gWrTy29a/bAzfSqKuQc/+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtasHKvdUFlPMuEi06cJmOwtiCoMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVeMRM0g
L40muSIcdGu7xG4TxWHNKzjXBzVpFrpIMixMyRHn1tdP3/U3JcNxL0iNwkHiERWD
xWaL3jIPiPcWEhKgzO25BVyLgieDKeSN8mLid/8MyIB6HUhXIFfQn3VM5V9waWGD
xVNbRWHnMyPxEHq7DIC8I/whJEM1gZiryirT/GN5T75DtLkEf89qYS0gAuqyZ5Qy
weiPYjrvKbOCqCBcplmW1qG4naU8/NSLCh5Iwy48C8ItCOOHRm9JM+QMSH3IvMWh
FodD7WQB6mGIE3CO+3lHnXM2n9KJz+jRQhUU+s9B+xAsrV2pBNwpcTFhY97tyo29
TsaDsxhDqudtmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:24 2025 by rpki-client