Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          0EV8RMoLG53ZS1NfxDxBxb+L1EyYBBOzuv7LIN7RfZI=
Subject key identifier:   32:2E:47:06:21:10:62:6D:99:D5:94:74:91:B2:45:E9:09:9B:9A:CA
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       0198D69873D9CB67EF08107C18FAB6F096F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          09E8
Signing time:             Sat 23 Aug 2025 11:02:51 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:51 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:51 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
                          4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: 47dJqZvKQp7xqVAt2qo2kVQ9dvJ2re7kAjcHomQhsas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:73:d9:cb:67:ef:08:10:7c:18:fa:b6:f0:96:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Aug 23 11:02:51 2025 GMT
            Not After : Aug 24 11:02:51 2025 GMT
        Subject: CN=322e47062110626d99d5947491b245e9099b9aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:b9:1d:85:4d:ea:99:46:52:6c:0b:35:06:
                    4a:f5:14:3b:b8:5e:63:32:9d:df:8c:92:8e:54:d0:
                    b8:00:9a:7a:c8:a8:57:72:a1:92:71:5e:5a:84:68:
                    e5:e3:1f:15:28:75:24:5c:be:65:bb:ff:cc:b0:65:
                    94:6c:9e:c4:f9:07:38:73:f0:c1:82:32:94:6d:65:
                    46:04:39:2d:55:c9:3c:16:e6:42:85:a6:74:8b:2d:
                    2f:bf:8c:cf:12:9b:9b:69:87:73:0b:d4:d7:dd:4a:
                    ad:c8:d6:e6:27:a3:5f:4a:82:97:29:e7:2a:75:ae:
                    ba:2c:8f:e7:e2:8e:2d:f3:c2:1b:a7:97:70:de:3d:
                    14:88:d9:70:ba:fd:ef:dc:d5:4c:38:a6:7d:67:f8:
                    75:7f:df:36:aa:4b:7a:2d:15:9a:6d:64:10:8d:8d:
                    5d:4d:97:95:8a:34:dc:7f:85:98:04:fd:e8:71:32:
                    71:90:39:5d:26:3b:5e:92:02:f8:37:bd:d5:b1:b4:
                    87:cd:34:68:21:e3:0a:1b:f0:42:ee:46:63:a2:37:
                    61:e0:17:71:02:a9:4b:bb:3f:69:88:db:ef:17:92:
                    17:56:35:ab:33:28:12:84:ad:0f:06:6c:79:b4:dd:
                    17:57:fc:4b:bb:29:36:86:42:6e:af:56:8d:5a:a9:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2E:47:06:21:10:62:6D:99:D5:94:74:91:B2:45:E9:09:9B:9A:CA
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:5f:ea:1b:ff:21:ca:09:80:79:61:66:0d:c0:ce:7c:ef:
         c1:74:25:05:18:2d:8b:78:fb:7e:3e:7f:3b:93:2c:f5:c7:a9:
         c8:fd:f0:fc:d9:d0:f7:13:25:4c:f1:60:36:64:43:fa:74:76:
         41:cf:ee:90:1a:52:9d:be:4a:14:f3:1e:80:08:a4:df:87:06:
         54:42:a9:d5:21:ed:73:65:d4:4c:10:a3:05:fc:1b:fc:46:34:
         36:c1:5f:d7:62:4c:8e:32:50:9c:01:c2:b0:f9:b3:68:10:d6:
         8a:a0:64:be:08:aa:76:b9:e2:97:4c:30:dc:f5:29:d3:22:06:
         8f:d8:ac:dc:92:53:4b:dd:f0:0f:59:6a:69:a2:43:64:4e:39:
         9c:3f:61:f9:c7:67:10:d3:e8:69:e7:6c:66:34:e4:7c:5b:05:
         c1:b1:0f:00:97:a7:b4:7b:00:3b:02:d0:fc:1a:b1:db:f2:7c:
         45:38:2f:ae:b5:1d:fa:c6:61:3b:b4:00:a4:a8:43:37:b0:74:
         00:2a:60:ea:04:83:df:70:50:7a:35:4b:dd:b8:25:ce:14:60:
         e0:23:89:61:c3:2b:5b:b1:de:96:20:5e:5f:e6:8e:53:3f:b9:
         4c:c4:34:ae:fc:91:2b:f4:ca:f4:d2:18:1e:63:22:fe:38:2c:
         34:14:a1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmHPZy2fvCBB8GPq28JbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjUwODIzMTEwMjUxWhcNMjUwODI0MTEwMjUxWjAzMTEwLwYDVQQD
EygzMjJlNDcwNjIxMTA2MjZkOTlkNTk0NzQ5MWIyNDVlOTA5OWI5YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35i5HYVN6plGUmwLNQZK9RQ7uF5j
Mp3fjJKOVNC4AJp6yKhXcqGScV5ahGjl4x8VKHUkXL5lu//MsGWUbJ7E+Qc4c/DB
gjKUbWVGBDktVck8FuZChaZ0iy0vv4zPEpubaYdzC9TX3UqtyNbmJ6NfSoKXKecq
da66LI/n4o4t88Ibp5dw3j0UiNlwuv3v3NVMOKZ9Z/h1f982qkt6LRWabWQQjY1d
TZeVijTcf4WYBP3ocTJxkDldJjtekgL4N73VsbSHzTRoIeMKG/BC7kZjojdh4Bdx
AqlLuz9piNvvF5IXVjWrMygShK0PBmx5tN0XV/xLuyk2hkJur1aNWqmSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIuRwYhEGJtmdWUdJGyRekJm5rKMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsxf6hv/
IcoJgHlhZg3AznzvwXQlBRgti3j7fj5/O5Ms9cepyP3w/NnQ9xMlTPFgNmRD+nR2
Qc/ukBpSnb5KFPMegAik34cGVEKp1SHtc2XUTBCjBfwb/EY0NsFf12JMjjJQnAHC
sPmzaBDWiqBkvgiqdrnil0ww3PUp0yIGj9is3JJTS93wD1lqaaJDZE45nD9h+cdn
ENPoaedsZjTkfFsFwbEPAJentHsAOwLQ/Bqx2/J8RTgvrrUd+sZhO7QApKhDN7B0
ACpg6gSD33BQejVL3bglzhRg4COJYcMrW7HeliBeX+aOUz+5TMQ0rvyRK/TK9NIY
HmMi/jgsNBSh3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:36 2025 by rpki-client