Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File:                     D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier:          SEDbbQL7OY6Abf9EMYiyGTjMb8YkvxHvdoQ564BZW54=
Subject key identifier:   84:CC:46:7A:36:B1:DA:80:01:CF:49:90:4A:27:EB:72:19:F1:48:AA
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer:       /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial:       0198D4E0718320A671523C7E75D389A5D65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number:          1547
Signing time:             Sat 23 Aug 2025 03:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:15 +0000
Files and hashes:         1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
                          2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: 8x/eQrlC9GPsWm1SN9J9L6zN0udOIMrKKZ0QXq6SYxE=)
                          3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
                          4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:71:83:20:a6:71:52:3c:7e:75:d3:89:a5:d6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
        Validity
            Not Before: Aug 23 03:02:15 2025 GMT
            Not After : Aug 24 03:02:15 2025 GMT
        Subject: CN=84cc467a36b1da8001cf49904a27eb7219f148aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:ea:2e:18:47:71:e9:d3:ac:df:bb:0d:84:
                    ac:9e:75:96:bd:49:43:c1:bd:10:6c:d5:b8:cd:c8:
                    bf:7f:3d:9c:0b:01:88:a0:d8:94:78:94:c0:ab:6f:
                    d4:b7:5c:2c:f1:8c:5c:1b:8a:e7:0b:e5:a4:f9:1d:
                    ce:52:a7:cf:31:fd:be:6f:c3:d1:52:20:08:67:86:
                    0c:61:f7:64:25:c1:0f:f9:68:61:f5:d3:0f:96:27:
                    4a:8e:07:6f:e5:78:41:ae:f0:d0:76:ec:83:3c:a8:
                    67:9c:31:7c:87:5a:8b:c2:17:c7:40:e7:f5:35:fc:
                    f3:4c:da:d9:6c:5c:30:c4:ce:9b:c4:28:70:68:1e:
                    8f:d5:b3:4b:71:93:6b:67:87:a6:44:7d:47:14:92:
                    55:a7:bf:44:bc:57:91:db:66:00:c9:da:dc:a7:cd:
                    63:85:37:45:dc:aa:08:57:ac:46:7a:a9:51:94:67:
                    01:6c:96:ad:df:69:11:bd:99:73:de:ca:0e:fc:f2:
                    bb:07:d3:84:ae:69:a1:d9:36:b8:fd:76:0e:be:be:
                    a2:77:48:3f:7a:71:9d:b5:1c:40:7b:d1:24:82:7b:
                    1e:22:32:de:53:f2:00:6c:ad:1e:4d:26:12:e8:b4:
                    7d:0d:17:cf:03:9a:6d:6a:84:fd:ca:ec:40:d7:e1:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:46:7A:36:B1:DA:80:01:CF:49:90:4A:27:EB:72:19:F1:48:AA
            X509v3 Authority Key Identifier:
                keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:58:ae:2c:b5:58:a6:df:3b:4f:de:d7:49:20:c2:a6:7e:45:
         bd:aa:5a:bd:3b:3e:05:46:5b:88:33:8f:f6:c8:94:8e:39:77:
         04:47:2b:3d:e0:03:9d:76:40:63:90:2a:aa:2a:6f:d8:4f:55:
         2e:c5:be:8f:e5:af:0b:db:c7:d5:ab:aa:d0:d7:9c:83:04:f2:
         a2:de:5a:2f:7f:1d:eb:8a:90:35:3f:63:3b:38:08:05:fe:71:
         89:76:09:b7:d0:6d:98:b1:c0:bc:84:86:18:69:e7:94:fe:ce:
         ff:6b:12:6f:dc:f5:5d:b8:85:ba:0b:bc:09:fa:c9:74:11:c9:
         dd:b2:4c:eb:7b:55:05:47:85:fe:0f:30:23:e4:fa:67:b0:34:
         cc:48:1d:da:b5:dd:90:11:9d:72:1a:83:33:ba:55:3c:18:c3:
         38:07:95:15:ac:5d:01:27:d7:bd:5c:d2:9b:c7:4b:9e:46:bf:
         b5:71:87:9f:2d:2e:e8:1b:6e:3f:cb:cb:d4:c6:00:1f:5f:8c:
         5b:cf:c2:b1:0d:68:4a:33:74:1a:c1:49:9e:1c:fe:56:9d:76:
         91:8a:96:e8:b6:32:f0:20:c8:45:ed:9c:0d:71:7f:0b:01:08:
         83:61:52:cf:44:92:c6:47:b4:ce:92:d6:64:ef:ad:94:52:9b:
         87:ff:e5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HGDIKZxUjx+ddOJpdZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjUwODIzMDMwMjE1WhcNMjUwODI0MDMwMjE1WjAzMTEwLwYDVQQD
Eyg4NGNjNDY3YTM2YjFkYTgwMDFjZjQ5OTA0YTI3ZWI3MjE5ZjE0OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXnqLhhHcenTrN+7DYSsnnWWvUlD
wb0QbNW4zci/fz2cCwGIoNiUeJTAq2/Ut1ws8YxcG4rnC+Wk+R3OUqfPMf2+b8PR
UiAIZ4YMYfdkJcEP+Whh9dMPlidKjgdv5XhBrvDQduyDPKhnnDF8h1qLwhfHQOf1
NfzzTNrZbFwwxM6bxChwaB6P1bNLcZNrZ4emRH1HFJJVp79EvFeR22YAydrcp81j
hTdF3KoIV6xGeqlRlGcBbJat32kRvZlz3soO/PK7B9OErmmh2Ta4/XYOvr6id0g/
enGdtRxAe9EkgnseIjLeU/IAbK0eTSYS6LR9DRfPA5ptaoT9yuxA1+E/HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITMRno2sdqAAc9JkEon63IZ8UiqMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1iuLLVY
pt87T97XSSDCpn5FvapavTs+BUZbiDOP9siUjjl3BEcrPeADnXZAY5Aqqipv2E9V
LsW+j+WvC9vH1auq0NecgwTyot5aL38d64qQNT9jOzgIBf5xiXYJt9BtmLHAvISG
GGnnlP7O/2sSb9z1XbiFugu8CfrJdBHJ3bJM63tVBUeF/g8wI+T6Z7A0zEgd2rXd
kBGdchqDM7pVPBjDOAeVFaxdASfXvVzSm8dLnka/tXGHny0u6BtuP8vL1MYAH1+M
W8/CsQ1oSjN0GsFJnhz+Vp12kYqW6LYy8CDIRe2cDXF/CwEIg2FSz0SSxke0zpLW
ZO+tlFKbh//lhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client