Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          quoWlk3rWFBZKLP930/9iR16r0faZVdnszm9dvgbm3g=
Subject key identifier:   BA:CF:C0:8D:63:B8:AA:23:3F:AF:A8:56:FA:A9:16:44:D7:4C:76:2A
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       0198D4DFD72FC6C772E53DAB84B7616EB117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          117C
Signing time:             Sat 23 Aug 2025 03:01:36 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:36 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:36 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: fkyv3hgIyuG40//3u51w3rEGA6fg/pMGQlCMtnF0Z00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:d7:2f:c6:c7:72:e5:3d:ab:84:b7:61:6e:b1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Aug 23 03:01:36 2025 GMT
            Not After : Aug 24 03:01:36 2025 GMT
        Subject: CN=bacfc08d63b8aa233fafa856faa91644d74c762a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:34:53:af:22:a5:da:17:69:30:fc:75:38:
                    39:6a:9c:5a:44:9d:7f:6e:d1:1f:c7:15:12:3d:10:
                    fd:a2:42:61:eb:5c:2c:60:7f:de:8b:ab:46:95:ad:
                    55:bb:54:40:b8:63:ae:f1:fe:86:04:51:8b:b0:a3:
                    5b:71:9e:da:21:75:96:c7:8a:5d:b3:16:4b:53:cb:
                    1c:4d:85:36:46:58:0d:be:9b:1b:52:3c:ba:18:0e:
                    dc:18:26:73:3e:84:42:c0:f1:6e:ef:48:b6:50:03:
                    9f:d2:7a:39:10:97:95:c8:91:54:be:70:2a:55:36:
                    6d:6a:a0:16:aa:10:bd:a5:ae:1d:f1:b6:c9:85:6f:
                    a0:7e:2c:7a:71:a2:b9:03:1d:1d:ab:a4:95:ac:4c:
                    03:18:12:e2:3b:40:47:43:05:cc:ae:55:34:e2:1a:
                    d9:f5:b7:cb:2b:75:55:05:10:1d:b8:ad:ec:e7:f5:
                    79:34:fa:8e:b3:46:1e:07:2e:65:0e:cb:b6:39:13:
                    c0:25:39:3e:09:1a:ed:a3:2b:90:66:52:d4:13:b8:
                    1a:ad:40:60:a4:9f:72:38:73:93:35:36:e2:97:e9:
                    d8:0f:6f:c8:6e:c4:34:4f:d6:8f:e8:19:d2:79:8c:
                    14:13:07:65:82:ad:98:dd:b5:4c:65:b8:e4:d8:37:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:C0:8D:63:B8:AA:23:3F:AF:A8:56:FA:A9:16:44:D7:4C:76:2A
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:51:2a:4a:f2:06:82:0d:8e:7d:44:bf:42:46:3e:25:63:
         d1:c6:be:33:18:a9:d3:d2:2f:c7:b3:c1:8f:49:2f:88:eb:0d:
         2a:92:7a:88:c3:e4:5f:d6:d8:9f:87:0f:25:5f:e6:e4:a8:e6:
         16:c7:51:76:1e:8a:22:52:3b:90:ae:35:4f:d0:ac:24:a5:25:
         38:41:34:b9:ef:8f:6c:a1:50:01:c0:49:d8:67:b6:ea:82:b0:
         3f:b3:6d:6a:93:10:7f:1a:67:e7:8f:48:a8:09:7c:75:0e:32:
         ff:64:a3:33:49:6f:14:19:76:16:68:bd:0c:d8:b0:80:94:e2:
         d6:b9:48:f9:00:6c:d5:20:b4:8b:32:4e:8d:7d:6d:92:2a:21:
         87:50:9a:4c:dd:83:4c:b0:13:67:09:a3:bf:eb:22:5b:f2:03:
         09:6b:41:06:9a:ca:ea:4f:a0:08:e0:51:80:87:4a:dd:a1:ff:
         7b:0a:d3:eb:aa:20:8c:a0:1e:eb:ab:2c:d8:43:cc:c4:ae:8d:
         ec:fe:9b:21:90:b6:c7:b4:fc:de:d1:b1:fb:f3:5b:74:30:d3:
         da:77:a0:a3:de:84:67:fe:73:0a:91:8e:c9:12:86:97:70:e9:
         85:1c:b6:f3:03:4e:29:f1:af:30:43:f7:ee:9c:23:72:77:b5:
         e6:22:2b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39cvxsdy5T2rhLdhbrEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2
ODhlNmUwHhcNMjUwODIzMDMwMTM2WhcNMjUwODI0MDMwMTM2WjAzMTEwLwYDVQQD
EyhiYWNmYzA4ZDYzYjhhYTIzM2ZhZmE4NTZmYWE5MTY0NGQ3NGM3NjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry40U68ipdoXaTD8dTg5apxaRJ1/
btEfxxUSPRD9okJh61wsYH/ei6tGla1Vu1RAuGOu8f6GBFGLsKNbcZ7aIXWWx4pd
sxZLU8scTYU2RlgNvpsbUjy6GA7cGCZzPoRCwPFu70i2UAOf0no5EJeVyJFUvnAq
VTZtaqAWqhC9pa4d8bbJhW+gfix6caK5Ax0dq6SVrEwDGBLiO0BHQwXMrlU04hrZ
9bfLK3VVBRAduK3s5/V5NPqOs0YeBy5lDsu2ORPAJTk+CRrtoyuQZlLUE7garUBg
pJ9yOHOTNTbil+nYD2/IbsQ0T9aP6BnSeYwUEwdlgq2Y3bVMZbjk2Dee2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrPwI1juKojP6+oVvqpFkTXTHYqMB8GA1UdIwQY
MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt
ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj
LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4hRKkry
BoINjn1Ev0JGPiVj0ca+Mxip09Ivx7PBj0kviOsNKpJ6iMPkX9bYn4cPJV/m5Kjm
FsdRdh6KIlI7kK41T9CsJKUlOEE0ue+PbKFQAcBJ2Ge26oKwP7NtapMQfxpn549I
qAl8dQ4y/2SjM0lvFBl2Fmi9DNiwgJTi1rlI+QBs1SC0izJOjX1tkiohh1CaTN2D
TLATZwmjv+siW/IDCWtBBprK6k+gCOBRgIdK3aH/ewrT66ogjKAe66ss2EPMxK6N
7P6bIZC2x7T83tGx+/NbdDDT2nego96EZ/5zCpGOyRKGl3DphRy28wNOKfGvMEP3
7pwjcne15iIr/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:11 2025 by rpki-client