Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          V/35yAWHRtRVXw1lYpJMw0Z7aR2H9rTerC1oNqJwBx0=
Subject key identifier:   A5:9F:9B:96:8D:85:46:2A:73:DC:62:DB:C9:C6:99:D0:33:DF:63:97
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       0198D516280BBDAC4CD5184D57985A8F50FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          0448
Signing time:             Sat 23 Aug 2025 04:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:55 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: 98Rjv48L9mCwnoCZM3K6VVg1va/2v8//hcQxosubTPc=)
                          2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:28:0b:bd:ac:4c:d5:18:4d:57:98:5a:8f:50:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Aug 23 04:00:55 2025 GMT
            Not After : Aug 24 04:00:55 2025 GMT
        Subject: CN=a59f9b968d85462a73dc62dbc9c699d033df6397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:57:dd:46:e9:cb:da:5a:fc:4c:40:39:35:
                    0e:62:f4:03:71:e2:6c:72:95:ff:87:16:ad:33:c6:
                    f4:aa:58:47:dd:d3:a0:b3:77:25:58:e4:92:e9:b1:
                    30:5d:fb:35:3d:92:95:18:18:41:07:a6:4a:3c:8d:
                    ca:bc:eb:4f:26:a8:e4:19:d9:56:8f:e4:7f:ec:5b:
                    71:91:f7:d7:64:64:dc:b2:9a:f2:a4:9b:f3:ee:a1:
                    ff:5f:b4:af:d3:70:34:ac:33:b8:11:fb:6f:c5:ba:
                    8d:d6:65:95:5e:67:56:d9:5e:c7:ef:68:9e:89:65:
                    1c:4c:46:12:09:13:e9:0a:30:13:02:91:47:fa:a3:
                    1a:3c:73:ef:93:3f:ff:b2:cd:78:b0:e1:20:96:87:
                    98:cb:78:39:30:5a:9c:90:6e:c2:20:ed:61:a1:02:
                    bb:47:89:78:25:64:e7:43:83:78:a7:41:cf:82:5b:
                    1c:8a:17:2a:99:a0:ac:ce:ee:f9:03:1c:d4:15:89:
                    1d:48:b6:5f:60:b9:1c:7c:89:4b:44:69:da:25:77:
                    cb:f9:4b:30:45:3f:24:6e:82:c8:43:03:60:b1:f4:
                    c3:38:23:19:8e:ec:7c:ac:ad:d0:11:8a:49:f2:7f:
                    49:7e:6d:3d:8a:7d:bf:58:18:f0:a6:bc:36:97:33:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:9B:96:8D:85:46:2A:73:DC:62:DB:C9:C6:99:D0:33:DF:63:97
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:ad:f7:6d:44:86:60:3e:bf:31:0b:e0:b1:34:41:0e:cf:
         03:94:0a:d3:9b:61:d0:62:77:02:f1:23:18:67:15:53:e6:28:
         3c:63:8b:84:ad:a4:0a:12:d6:74:f3:4a:6d:be:5a:e9:12:34:
         ed:4c:e9:e1:3b:83:91:57:07:d3:26:44:2f:c6:c6:0b:90:4f:
         a8:18:29:e5:15:f2:90:20:31:ae:a3:46:b4:f0:b5:f3:24:cc:
         c3:2c:cb:fd:73:18:b5:74:6f:5c:8e:8e:71:69:cb:ec:c2:23:
         35:77:c6:d5:35:27:92:c3:7d:56:81:10:95:f6:a2:03:27:94:
         30:dd:38:6a:62:d4:e9:d8:52:19:03:cd:e2:60:47:49:ec:08:
         13:12:15:0f:6b:39:d4:52:98:fe:89:2b:50:de:3e:15:f7:be:
         29:75:59:81:07:40:f2:36:39:db:88:68:69:87:e4:e0:f1:90:
         e9:5d:ad:ff:0a:2d:a9:68:bf:33:6e:87:25:b5:fa:fe:fb:f0:
         c3:74:db:93:c4:af:6d:0b:6c:b0:d3:2c:eb:03:81:7e:63:de:
         50:e9:7a:d4:5a:69:a1:e3:18:54:57:a5:eb:62:dd:9d:1d:82:
         be:67:37:80:65:7e:f3:45:bc:e0:f8:74:53:e9:8e:f7:05:a2:
         ac:6b:72:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFigLvaxM1RhNV5haj1D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVmYzhjZjAyYjhhNGUzNzJmYTViYzY0MDk0NGZlYmMy
NGYxZmUwHhcNMjUwODIzMDQwMDU1WhcNMjUwODI0MDQwMDU1WjAzMTEwLwYDVQQD
EyhhNTlmOWI5NjhkODU0NjJhNzNkYzYyZGJjOWM2OTlkMDMzZGY2Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSdX3Ubpy9pa/ExAOTUOYvQDceJs
cpX/hxatM8b0qlhH3dOgs3clWOSS6bEwXfs1PZKVGBhBB6ZKPI3KvOtPJqjkGdlW
j+R/7FtxkffXZGTcsprypJvz7qH/X7Sv03A0rDO4EftvxbqN1mWVXmdW2V7H72ie
iWUcTEYSCRPpCjATApFH+qMaPHPvkz//ss14sOEgloeYy3g5MFqckG7CIO1hoQK7
R4l4JWTnQ4N4p0HPglscihcqmaCszu75AxzUFYkdSLZfYLkcfIlLRGnaJXfL+Usw
RT8kboLIQwNgsfTDOCMZjux8rK3QEYpJ8n9Jfm09in2/WBjwprw2lzNZ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWfm5aNhUYqc9xi28nGmdAz32OXMB8GA1UdIwQY
MBaAFAc1/IzwK4pONy+lvGQJRP68JPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMt
NzMxZTkzMzlkNmFjLzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMtNzMxZTkzMzlkNmFj
LzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz2t921E
hmA+vzEL4LE0QQ7PA5QK05th0GJ3AvEjGGcVU+YoPGOLhK2kChLWdPNKbb5a6RI0
7Uzp4TuDkVcH0yZEL8bGC5BPqBgp5RXykCAxrqNGtPC18yTMwyzL/XMYtXRvXI6O
cWnL7MIjNXfG1TUnksN9VoEQlfaiAyeUMN04amLU6dhSGQPN4mBHSewIExIVD2s5
1FKY/okrUN4+Ffe+KXVZgQdA8jY524hoaYfk4PGQ6V2t/wotqWi/M26HJbX6/vvw
w3Tbk8SvbQtssNMs6wOBfmPeUOl61FppoeMYVFel62LdnR2Cvmc3gGV+80W84Ph0
U+mO9wWirGtyew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:26 2025 by rpki-client