Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File:                     Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier:          9voU2CITQCDyB3KNwlRUhEINegqszVfDu7SqbbJ4HFk=
Subject key identifier:   4C:91:8C:C1:39:BC:DE:EE:90:5F:62:C0:EC:16:3A:61:D8:40:F5:59
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer:       /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial:       0198D583F2519361A86C88970157986B8ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: XCk7shMeNoh/0X24oaYpjtcI0D280mJ7r3FoEwdpfl4=)
                          2: v9geoE7KmWCRnCztGaTkN5bSNF0.roa (hash: yJ1Hvyh5t82gNQ9PRDa/lCyqTlzjssbfVD5EEeI11lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f2:51:93:61:a8:6c:88:97:01:57:98:6b:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=4c918cc139bcdeee905f62c0ec163a61d840f559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:55:3e:15:f4:fa:2e:3a:0d:ee:c4:ff:a0:
                    a0:1f:3a:06:68:75:b9:e4:89:44:8a:b0:a4:e8:82:
                    da:78:8a:ec:ec:b1:53:17:84:91:d0:ae:32:20:d1:
                    6b:5a:9b:58:c3:86:d6:43:ac:30:d6:7f:6f:78:f7:
                    e2:d7:39:30:a8:1a:cb:ef:5e:af:2f:81:19:1e:10:
                    47:ba:8d:98:55:cf:10:a2:d7:59:10:a0:2e:79:1b:
                    f0:f0:c0:bc:72:4c:93:75:7a:4a:97:12:cf:3c:cf:
                    c3:e6:8d:f3:0d:6e:c8:22:dc:e0:50:36:1e:eb:c5:
                    88:d2:6c:d9:85:b0:45:b8:4e:4e:bc:32:6c:64:e2:
                    52:f2:0d:20:74:7e:07:5a:ca:79:90:a0:c6:c4:5b:
                    be:3c:cb:93:bf:c5:65:e6:19:ef:30:45:bc:49:d7:
                    66:25:40:fb:23:ea:4a:a3:1e:49:12:f2:94:db:46:
                    eb:4e:e3:a7:a1:fb:15:40:03:54:50:0e:f3:c2:0f:
                    01:e0:fe:27:e6:04:38:96:02:78:90:10:d9:a4:82:
                    ab:14:13:8e:6f:a0:26:8d:19:d2:7c:33:a9:fb:91:
                    aa:d9:e5:9e:8e:d8:7b:e0:f6:e7:64:88:85:2b:7f:
                    8e:e5:e9:5c:8b:5b:90:e2:f2:be:8d:cb:5b:c0:3e:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:8C:C1:39:BC:DE:EE:90:5F:62:C0:EC:16:3A:61:D8:40:F5:59
            X509v3 Authority Key Identifier:
                keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:df:f8:20:67:f5:78:90:92:4c:4a:f4:1e:5d:a2:08:3f:e5:
         0e:16:33:0a:b1:42:1b:ad:2d:0e:f6:39:c9:07:8d:da:47:b5:
         15:fe:1c:7f:8f:15:f4:cd:41:90:25:48:49:44:a5:1b:32:bd:
         67:f4:89:4f:97:bc:5d:58:a1:b1:fc:fc:c4:f1:85:80:1d:43:
         40:86:54:73:26:75:a7:db:b9:01:96:89:16:d9:6c:5b:d8:22:
         4e:ee:f2:1b:c0:a7:1b:37:04:5a:5c:63:63:01:ea:64:f6:ba:
         48:29:22:bd:ac:aa:d7:07:f7:f2:91:48:96:ed:ef:75:0d:cd:
         47:c7:76:2d:d6:2f:28:77:1c:da:7a:5f:16:fc:c9:6c:07:36:
         81:a8:4d:77:e5:fa:ac:d0:8f:38:fc:72:18:c3:15:74:07:0a:
         19:69:b1:4c:c2:ab:d0:46:61:02:b0:2a:b6:ca:b0:41:21:dd:
         a0:81:72:cd:68:fa:ce:7b:ef:f7:d3:23:d8:75:8d:9c:66:14:
         aa:67:08:03:ba:42:81:2a:b5:c3:58:04:04:79:c4:cf:72:90:
         4d:ed:50:b2:0d:3b:0c:f9:a6:cb:87:c0:fb:b7:26:ab:b9:33:
         ef:44:50:e7:36:5e:c9:fd:c0:37:cd:22:e5:e4:0f:04:40:8a:
         b8:6c:01:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/JRk2GobIiXAVeYa47TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjUwODIzMDYwMDUwWhcNMjUwODI0MDYwMDUwWjAzMTEwLwYDVQQD
Eyg0YzkxOGNjMTM5YmNkZWVlOTA1ZjYyYzBlYzE2M2E2MWQ4NDBmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVVVPhX0+i46De7E/6CgHzoGaHW5
5IlEirCk6ILaeIrs7LFTF4SR0K4yINFrWptYw4bWQ6ww1n9vePfi1zkwqBrL716v
L4EZHhBHuo2YVc8QotdZEKAueRvw8MC8ckyTdXpKlxLPPM/D5o3zDW7IItzgUDYe
68WI0mzZhbBFuE5OvDJsZOJS8g0gdH4HWsp5kKDGxFu+PMuTv8Vl5hnvMEW8Sddm
JUD7I+pKox5JEvKU20brTuOnofsVQANUUA7zwg8B4P4n5gQ4lgJ4kBDZpIKrFBOO
b6AmjRnSfDOp+5Gq2eWejth74PbnZIiFK3+O5elci1uQ4vK+jctbwD7URwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyRjME5vN7ukF9iwOwWOmHYQPVZMB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed/4IGf1
eJCSTEr0Hl2iCD/lDhYzCrFCG60tDvY5yQeN2ke1Ff4cf48V9M1BkCVISUSlGzK9
Z/SJT5e8XVihsfz8xPGFgB1DQIZUcyZ1p9u5AZaJFtlsW9giTu7yG8CnGzcEWlxj
YwHqZPa6SCkivayq1wf38pFIlu3vdQ3NR8d2LdYvKHcc2npfFvzJbAc2gahNd+X6
rNCPOPxyGMMVdAcKGWmxTMKr0EZhArAqtsqwQSHdoIFyzWj6znvv99Mj2HWNnGYU
qmcIA7pCgSq1w1gEBHnEz3KQTe1Qsg07DPmmy4fA+7cmq7kz70RQ5zZeyf3AN80i
5eQPBECKuGwB4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:30 2025 by rpki-client