Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File:                     3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier:          /W+IAWAJ48BgDItGB0FiyV3Akd4D2ccAgymZ1kmq2ZM=
Subject key identifier:   A9:4A:F2:C1:03:57:DF:C0:81:D9:F8:7F:8A:39:94:2A:A1:1E:28:63
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer:       /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial:       0198D54E3972F5954273DD93E34EC425CBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number:          1651
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: Dg2gsjNPibgj4PRlFWd5+JMG9cKONfIK0JGtnbYjYiM=)
                          2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
                          3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:39:72:f5:95:42:73:dd:93:e3:4e:c4:25:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=a94af2c10357dfc081d9f87f8a39942aa11e2863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:00:ad:72:c0:36:71:f7:9a:f1:f3:8e:02:
                    d0:bc:d5:6b:12:35:71:e8:08:cd:a0:da:7d:ee:fb:
                    d6:d6:89:90:c5:76:5b:9d:da:b8:9c:be:bc:da:32:
                    b7:a0:6b:f6:04:3a:57:9b:56:6a:f2:ce:b0:9d:e9:
                    9f:c4:8d:7e:73:0c:3e:31:11:68:9e:07:f8:18:c8:
                    51:82:9d:1e:29:b7:ec:51:3a:d9:0c:82:72:7b:e6:
                    e0:02:a0:a8:d9:fb:fd:b7:d7:e3:f8:64:66:a6:3d:
                    c8:5e:50:20:f8:e2:67:4c:8c:4a:be:c6:a6:7d:b6:
                    c0:86:0e:31:d6:72:ef:b2:01:61:4e:af:17:9d:13:
                    35:76:11:d1:83:c2:1d:c0:87:43:c5:8e:c9:3a:e1:
                    32:74:0c:b9:1a:5b:ef:8b:63:ee:d9:86:f5:0f:51:
                    1d:55:35:03:b8:05:f5:3e:72:ac:fe:be:45:a1:44:
                    91:c7:66:f4:5a:84:51:e8:3d:bb:d1:52:a6:1f:6f:
                    f3:a4:13:d4:2d:a0:ab:4f:53:5a:b3:3a:7f:8c:df:
                    7a:a3:d6:f0:fd:32:59:23:0a:9d:d3:da:82:a6:20:
                    2c:31:db:24:a6:78:2e:8a:6f:26:1b:55:c3:1d:e4:
                    4c:d1:d2:4a:55:bf:ea:86:97:c4:16:ad:e1:a2:e1:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:F2:C1:03:57:DF:C0:81:D9:F8:7F:8A:39:94:2A:A1:1E:28:63
            X509v3 Authority Key Identifier:
                keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:2e:c2:bf:96:67:6d:70:b1:86:20:22:01:70:fd:76:e9:
         fd:fe:71:a2:62:c2:58:ca:2d:4a:cf:ab:eb:53:de:b5:8b:fe:
         b6:61:ab:2d:f3:60:c7:1a:b1:d8:b0:20:04:88:b2:61:b4:3e:
         c9:84:90:28:f3:61:0b:f0:8f:8d:0b:82:86:19:ee:fe:43:88:
         2b:df:a7:d8:f0:90:73:53:4e:05:05:eb:0b:72:26:b4:91:69:
         96:68:9f:86:2e:35:c5:6d:e9:9f:c5:3f:a8:1e:ac:33:04:21:
         79:c7:5b:3a:ad:b5:da:54:54:7b:0a:9d:00:75:b7:d8:d7:3b:
         b1:e7:0e:bf:bd:d3:c1:76:39:fb:20:a6:6e:16:f2:eb:7a:30:
         04:74:a6:8c:23:3e:e2:f2:16:fa:a5:12:7c:50:b7:64:08:3b:
         7a:79:30:48:61:ca:ec:93:99:ab:6f:c1:72:71:22:82:b7:79:
         91:c9:0d:0e:01:52:b3:12:fd:01:92:ea:05:b6:ea:1a:3e:8f:
         b1:12:7c:b6:3e:57:fb:08:eb:fa:1e:0e:82:0a:f4:25:b4:6d:
         c4:2c:6d:84:bc:14:21:06:50:7d:36:77:ca:8b:5c:1c:e9:28:
         4e:47:d2:28:54:6e:a0:8b:13:c3:8e:e1:5e:b5:62:00:8d:e5:
         fc:bc:f5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjly9ZVCc92T407EJcvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
EyhhOTRhZjJjMTAzNTdkZmMwODFkOWY4N2Y4YTM5OTQyYWExMWUyODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9wArXLANnH3mvHzjgLQvNVrEjVx
6AjNoNp97vvW1omQxXZbndq4nL682jK3oGv2BDpXm1Zq8s6wnemfxI1+cww+MRFo
ngf4GMhRgp0eKbfsUTrZDIJye+bgAqCo2fv9t9fj+GRmpj3IXlAg+OJnTIxKvsam
fbbAhg4x1nLvsgFhTq8XnRM1dhHRg8IdwIdDxY7JOuEydAy5Glvvi2Pu2Yb1D1Ed
VTUDuAX1PnKs/r5FoUSRx2b0WoRR6D270VKmH2/zpBPULaCrT1Naszp/jN96o9bw
/TJZIwqd09qCpiAsMdskpnguim8mG1XDHeRM0dJKVb/qhpfEFq3houGzOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlK8sEDV9/Agdn4f4o5lCqhHihjMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojouwr+W
Z21wsYYgIgFw/Xbp/f5xomLCWMotSs+r61PetYv+tmGrLfNgxxqx2LAgBIiyYbQ+
yYSQKPNhC/CPjQuChhnu/kOIK9+n2PCQc1NOBQXrC3ImtJFplmifhi41xW3pn8U/
qB6sMwQhecdbOq212lRUewqdAHW32Nc7secOv73TwXY5+yCmbhby63owBHSmjCM+
4vIW+qUSfFC3ZAg7enkwSGHK7JOZq2/BcnEigrd5kckNDgFSsxL9AZLqBbbqGj6P
sRJ8tj5X+wjr+h4Oggr0JbRtxCxthLwUIQZQfTZ3yotcHOkoTkfSKFRuoIsTw47h
XrViAI3l/Lz13g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:01 2025 by rpki-client