Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          egufca0laH7ZGUFn6BqZ8Uvzkf71Kwrdq1mTBNs/ivs=
Subject key identifier:   28:76:01:A4:D5:B3:2F:37:E6:39:30:ED:9B:BC:3E:DA:CC:67:51:82
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       0198D5BC6368A63F2B10A954780CBDFF3B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:29 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: xgzYWjDLWjA1sPIIUjFwF++EjwPwQ//JmhRQlGP/M9M=)
                          2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
                          3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
                          4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:63:68:a6:3f:2b:10:a9:54:78:0c:bd:ff:3b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Aug 23 07:02:29 2025 GMT
            Not After : Aug 24 07:02:29 2025 GMT
        Subject: CN=287601a4d5b32f37e63930ed9bbc3edacc675182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:46:0e:aa:3e:c7:71:2f:70:37:62:30:1f:
                    b7:02:53:3e:f1:89:86:53:fb:34:87:d7:c3:e7:82:
                    44:ed:63:91:17:b2:be:b6:ce:04:d7:33:91:e7:05:
                    3c:17:92:31:a7:44:12:24:08:d5:1e:72:b8:11:85:
                    f6:26:9e:b2:05:20:09:f0:58:60:b4:c1:57:2d:35:
                    4d:0d:f2:fc:e2:32:74:14:7e:0a:99:93:7d:98:85:
                    13:65:23:2e:7e:64:3e:16:cb:0f:78:86:f5:31:7f:
                    c7:83:60:e8:f3:4d:df:30:f0:46:d4:bc:cb:1c:cc:
                    11:71:82:06:be:06:b1:b3:60:d1:c3:69:ae:b3:a0:
                    f2:31:35:d3:08:43:ff:b9:e8:54:d4:59:bd:db:c0:
                    90:7a:6e:03:6e:a7:a5:b0:69:72:6a:96:b5:4d:24:
                    fd:82:8b:a0:74:8d:e4:5b:86:c9:05:97:e9:d2:fd:
                    36:d4:09:0d:1d:ca:a6:dc:42:d8:be:82:96:11:66:
                    69:2d:05:e0:86:bb:f8:d9:87:2d:cd:28:c3:dc:de:
                    43:20:10:c3:b3:1d:dc:e3:35:24:4f:27:4b:41:04:
                    ea:5f:af:8a:6a:c8:03:56:8d:92:59:ce:89:97:e2:
                    18:7b:80:b0:8a:df:98:24:7c:a0:59:fa:bd:0b:62:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:01:A4:D5:B3:2F:37:E6:39:30:ED:9B:BC:3E:DA:CC:67:51:82
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:04:e5:fe:0a:fc:c2:42:84:5d:d2:b0:fd:6e:ec:f2:bf:99:
         9a:82:4c:b0:8d:ca:d9:dc:0d:e9:15:d4:06:4f:e4:39:d5:e3:
         30:88:0d:06:1e:a8:ff:3f:93:44:f2:96:ef:8a:59:8a:8a:de:
         99:ac:f1:3c:fa:68:18:f9:8f:d6:6f:a4:b1:c3:07:6c:4d:e8:
         4f:b8:f3:1e:24:c7:06:aa:67:98:e4:52:d4:50:4f:c7:e6:82:
         0d:83:43:dd:7a:75:7e:88:be:70:3c:c9:15:9a:53:1d:ce:49:
         ee:98:77:b4:34:3c:cb:7d:88:72:a8:ac:cb:12:49:e9:1d:40:
         5a:32:d6:68:cf:a7:7c:52:a8:5a:e1:59:a9:43:e7:f5:d4:7c:
         07:76:68:8a:2b:3e:4b:57:b4:37:f3:d9:e3:bf:0c:3b:97:b6:
         c9:d3:b5:5e:8d:14:bb:bd:b0:73:b3:89:8c:10:4b:72:33:de:
         22:e3:1b:60:a2:69:61:dc:21:24:56:9a:99:07:7a:e9:64:73:
         88:ab:2e:8b:43:79:2c:d2:78:fd:2a:0f:c4:49:d0:d6:8b:38:
         00:5c:96:38:61:51:10:e1:94:d7:32:88:73:56:db:90:ff:92:
         ba:76:23:10:da:41:91:6e:15:86:1b:41:dc:d0:95:fc:c5:79:
         9f:b5:ad:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvGNopj8rEKlUeAy9/ztIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk
OTNmNjYwHhcNMjUwODIzMDcwMjI5WhcNMjUwODI0MDcwMjI5WjAzMTEwLwYDVQQD
EygyODc2MDFhNGQ1YjMyZjM3ZTYzOTMwZWQ5YmJjM2VkYWNjNjc1MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGRGDqo+x3EvcDdiMB+3AlM+8YmG
U/s0h9fD54JE7WORF7K+ts4E1zOR5wU8F5Ixp0QSJAjVHnK4EYX2Jp6yBSAJ8Fhg
tMFXLTVNDfL84jJ0FH4KmZN9mIUTZSMufmQ+FssPeIb1MX/Hg2Do803fMPBG1LzL
HMwRcYIGvgaxs2DRw2mus6DyMTXTCEP/uehU1Fm928CQem4DbqelsGlyapa1TST9
gougdI3kW4bJBZfp0v021AkNHcqm3ELYvoKWEWZpLQXghrv42YctzSjD3N5DIBDD
sx3c4zUkTydLQQTqX6+KasgDVo2SWc6Jl+IYe4Cwit+YJHygWfq9C2KKsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh2AaTVsy835jkw7Zu8PtrMZ1GCMB8GA1UdIwQY
MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt
ZWJkZjM4YjAwOTVjLzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj
LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwTl/gr8
wkKEXdKw/W7s8r+ZmoJMsI3K2dwN6RXUBk/kOdXjMIgNBh6o/z+TRPKW74pZiore
mazxPPpoGPmP1m+kscMHbE3oT7jzHiTHBqpnmORS1FBPx+aCDYND3Xp1foi+cDzJ
FZpTHc5J7ph3tDQ8y32IcqisyxJJ6R1AWjLWaM+nfFKoWuFZqUPn9dR8B3Zoiis+
S1e0N/PZ478MO5e2ydO1Xo0Uu72wc7OJjBBLcjPeIuMbYKJpYdwhJFaamQd66WRz
iKsui0N5LNJ4/SoPxEnQ1os4AFyWOGFREOGU1zKIc1bbkP+SunYjENpBkW4VhhtB
3NCV/MV5n7WtFw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:06 2025 by rpki-client