Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          KHx/55I4ABGRL0ap8ehQiVFmRS9lPgzC4alu1oxwDY4=
Subject key identifier:   2A:C8:05:72:31:3E:2A:22:E4:6B:B2:5F:21:F1:75:2E:09:21:7E:DA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       0198D515B6D2253F818FF56CC0C3C8F0DE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          05AE
Signing time:             Sat 23 Aug 2025 04:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:26 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: ZWK0iqLUmKtlldbJ6MB13la23PW4Wp7L3/xmT5A8zEo=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: RDzymZpCcV0bpni3siQGqq1farc.roa (hash: NbY5Sdgr9o+O/ZEjGJenKUtZltIspdl+18YYsBTTJSE=)
                          10: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          11: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          12: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          13: Zn1uERCyM9lEjvRsAPSyamVWLyg.roa (hash: 0KLALM14jtrwTWxpwmZgqY8sGpxJvCuiB3E1GnJX2PA=)
                          14: djjJEwSaIQf9rj9IFEF8bQF9Iy8.roa (hash: h+aBwx2dPNS5WCu/btXV8X6mRzUXSE9KioahlGmpFA0=)
                          15: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          16: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          17: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          18: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          19: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          20: uu7x8ws28T4QdM70FvKBJCd6ke0.roa (hash: mYpdS0B5YDMrQaeH22PB2fPiErznb3n7AJTmk2e5j1U=)
                          21: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          22: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b6:d2:25:3f:81:8f:f5:6c:c0:c3:c8:f0:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Aug 23 04:00:26 2025 GMT
            Not After : Aug 24 04:00:26 2025 GMT
        Subject: CN=2ac80572313e2a22e46bb25f21f1752e09217eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:a0:58:56:80:f6:3b:eb:55:b6:fd:bd:d4:
                    c2:cd:a6:d8:6d:20:61:ac:03:f6:7f:a3:d2:fe:bd:
                    6e:08:01:d3:c8:88:57:af:76:a4:56:e9:44:5b:63:
                    7f:5a:50:ec:00:71:04:05:cd:d4:aa:b2:97:65:a7:
                    26:69:b9:2f:68:84:8f:c5:65:b3:5f:00:6d:b0:ed:
                    71:7f:13:43:e4:a0:01:ab:7b:9f:3d:08:88:76:d2:
                    20:7b:a3:0e:79:3a:62:80:5c:65:9c:d1:cd:14:00:
                    27:59:dc:f6:13:d5:c9:a9:60:48:cf:66:65:52:86:
                    28:15:ef:a5:2d:19:4d:71:22:8d:8f:41:ca:56:12:
                    c4:4f:90:40:a1:85:2d:76:29:8f:55:06:60:46:93:
                    5f:a8:71:16:b5:f1:49:00:1a:7c:da:10:5a:87:ad:
                    70:69:0b:53:89:89:36:4b:7c:0b:7a:66:f3:a6:e7:
                    4c:63:04:0d:74:0f:b2:75:54:eb:3a:65:0a:2b:11:
                    ab:f2:cc:bf:5e:73:2a:da:86:12:7f:83:55:76:14:
                    33:a8:2e:5d:ba:8f:16:eb:50:e9:d3:e2:a8:d6:d6:
                    c5:b6:a0:5b:d9:74:80:2c:90:c8:b4:a5:fe:51:9d:
                    3f:8b:b2:6e:53:9b:35:f9:f8:7b:52:fb:59:e6:1d:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:05:72:31:3E:2A:22:E4:6B:B2:5F:21:F1:75:2E:09:21:7E:DA
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:06:01:ad:a7:f3:26:06:76:f8:bf:eb:71:88:6a:8b:89:
         2a:d1:57:6c:f0:0e:a1:33:2b:46:4e:58:6e:93:0a:3c:ca:fe:
         08:91:47:1f:00:6e:27:53:cd:e4:71:de:70:f1:89:9c:ec:48:
         92:b1:bd:7a:d0:cb:72:64:f3:46:5d:ff:a6:2f:4e:7c:81:b5:
         50:5c:5f:87:0d:c2:07:24:aa:1e:36:d0:4f:d4:b8:93:05:01:
         f4:be:ca:73:53:e2:e3:59:3e:c0:a2:75:fa:6e:bc:cb:48:e3:
         40:4d:0e:36:ff:e5:f9:74:f2:17:91:bc:b6:f0:f8:a9:ee:13:
         b7:d3:9d:97:25:57:0e:e3:71:37:b3:81:a6:07:c1:fb:6f:b5:
         36:10:9d:b4:6c:72:a2:c3:fe:5c:70:4a:df:11:04:7f:b2:e5:
         2a:a5:1c:7a:5f:06:ff:24:48:db:90:06:94:02:4d:a8:51:3e:
         1e:f4:9f:9f:05:57:b5:51:7e:d1:47:62:d0:25:8a:f4:ca:a7:
         ac:cc:7e:07:75:8d:c3:00:fd:33:47:95:60:96:3e:9d:10:83:
         73:30:39:a8:84:e1:5d:f5:19:a0:07:b2:b5:a3:45:db:f5:a6:
         1d:0c:27:4f:c0:e9:a0:06:52:4a:50:c6:2b:c2:26:0e:21:cb:
         fc:4d:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:24 2025 by rpki-client