Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File:                     9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier:          4XBO0ypXL27yV6T8ncaQ7oTwOL0pNyIihlqYmMC06lM=
Subject key identifier:   05:62:60:91:FF:96:C7:6F:4A:F7:A7:A7:33:1F:CD:D2:77:1C:47:D9
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer:       /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial:       0198D660002ED7CE151F9FB2E396798F7BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:01:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:12 +0000
Files and hashes:         1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: z9dMIQ6hLdO73LGOFey+Am3W6T2LXWKoO4juXdAmXVU=)
                          2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:00:2e:d7:ce:15:1f:9f:b2:e3:96:79:8f:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
        Validity
            Not Before: Aug 23 10:01:12 2025 GMT
            Not After : Aug 24 10:01:12 2025 GMT
        Subject: CN=05626091ff96c76f4af7a7a7331fcdd2771c47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:be:4b:9c:e3:d0:41:1e:ec:13:eb:3f:8d:
                    75:68:03:76:01:16:94:53:f6:08:d7:2a:a0:5a:25:
                    46:54:42:94:4f:aa:fc:9a:79:e7:8d:69:71:ab:a6:
                    2b:9f:9c:4c:74:24:58:70:8c:b5:61:71:43:6b:1c:
                    08:2a:62:1e:5e:83:6b:a4:b1:90:1f:d8:d3:53:8b:
                    1d:9e:28:8f:aa:f1:12:0a:47:5e:98:7c:e0:c3:d6:
                    14:bc:27:2b:5b:cd:6f:6b:fe:e8:b1:a3:f7:ae:08:
                    95:8f:1b:5a:eb:f3:bc:fb:59:48:88:ad:0e:23:da:
                    af:ea:99:e8:70:0c:38:18:18:b0:55:11:c1:63:5c:
                    33:bf:3c:43:6c:24:64:9d:fe:36:af:af:86:a8:3d:
                    30:0e:46:49:f6:3f:aa:9c:60:57:27:85:d3:28:45:
                    b1:cd:cb:90:44:09:43:54:08:55:85:de:19:70:f4:
                    87:61:2a:31:50:82:7f:e0:79:c0:c2:0e:9d:8d:e4:
                    a3:40:20:5b:42:85:7b:c3:a9:92:da:82:61:9e:2e:
                    cf:ff:d4:e5:7d:87:e6:bf:46:a7:c5:6f:77:39:c9:
                    2a:fc:5b:45:ac:f1:42:71:1c:54:6c:26:ce:04:b8:
                    10:d7:5e:db:af:da:cb:81:8e:e6:b4:0b:90:e4:9a:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:60:91:FF:96:C7:6F:4A:F7:A7:A7:33:1F:CD:D2:77:1C:47:D9
            X509v3 Authority Key Identifier:
                keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:91:38:85:d6:f3:3c:fc:ea:22:7e:18:2f:06:80:61:fb:
         d7:c7:41:ea:3f:7f:b8:51:2a:f6:d6:1b:59:cf:29:2e:24:b0:
         87:e0:88:e7:12:e7:f8:23:7e:f4:cc:64:44:cd:9b:be:e4:9d:
         5f:5e:00:40:dc:35:9b:b1:32:c6:3d:5a:bc:57:fd:d9:ce:9c:
         84:8e:9a:a5:9b:ca:21:ba:d5:50:ab:b3:06:ff:90:e1:10:0f:
         33:dc:7f:f7:28:21:14:a6:b7:85:27:d4:6f:1e:14:4c:15:f0:
         74:4e:65:bb:96:51:66:9e:3f:f4:4b:cd:14:43:ca:f1:18:c0:
         3c:e1:73:10:b1:2f:2c:5f:37:bb:40:b8:ad:92:84:f5:61:d8:
         f3:b7:df:4b:98:04:c9:b8:e5:fb:e3:50:59:9f:ee:c1:9a:e8:
         45:d0:12:82:7a:ac:f8:ed:14:a5:c1:d5:d3:bd:d3:55:63:c4:
         52:34:0d:55:13:de:b9:4e:dc:35:1a:16:14:b7:d9:c2:ee:1c:
         21:de:b6:4e:27:d3:81:f6:ff:a9:d1:f5:09:f9:6c:34:f5:69:
         00:5b:13:81:f6:3b:ac:7d:79:77:f5:36:f8:39:b6:bc:6f:7e:
         a9:54:e7:93:1e:42:af:f1:06:f8:18:32:b4:81:ef:06:25:11:
         38:25:d9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAAu184VH5+y45Z5j3u6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4
MzgxODAwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
EygwNTYyNjA5MWZmOTZjNzZmNGFmN2E3YTczMzFmY2RkMjc3MWM0N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMy+S5zj0EEe7BPrP411aAN2ARaU
U/YI1yqgWiVGVEKUT6r8mnnnjWlxq6Yrn5xMdCRYcIy1YXFDaxwIKmIeXoNrpLGQ
H9jTU4sdniiPqvESCkdemHzgw9YUvCcrW81va/7osaP3rgiVjxta6/O8+1lIiK0O
I9qv6pnocAw4GBiwVRHBY1wzvzxDbCRknf42r6+GqD0wDkZJ9j+qnGBXJ4XTKEWx
zcuQRAlDVAhVhd4ZcPSHYSoxUIJ/4HnAwg6djeSjQCBbQoV7w6mS2oJhni7P/9Tl
fYfmv0anxW93Ockq/FtFrPFCcRxUbCbOBLgQ117br9rLgY7mtAuQ5Jpi0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAViYJH/lsdvSvenpzMfzdJ3HEfZMB8GA1UdIwQY
MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut
ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0
LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe2ROIXW
8zz86iJ+GC8GgGH718dB6j9/uFEq9tYbWc8pLiSwh+CI5xLn+CN+9MxkRM2bvuSd
X14AQNw1m7Eyxj1avFf92c6chI6apZvKIbrVUKuzBv+Q4RAPM9x/9yghFKa3hSfU
bx4UTBXwdE5lu5ZRZp4/9EvNFEPK8RjAPOFzELEvLF83u0C4rZKE9WHY87ffS5gE
ybjl++NQWZ/uwZroRdASgnqs+O0UpcHV073TVWPEUjQNVRPeuU7cNRoWFLfZwu4c
Id62TifTgfb/qdH1CflsNPVpAFsTgfY7rH15d/U2+Dm2vG9+qVTnkx5Cr/EG+Bgy
tIHvBiUROCXZmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:34 2025 by rpki-client