Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          9EJ0cgAsj6VvePV6pnGtThxsMlhvOQhQp1LFDPTylww=
Subject key identifier:   12:64:5A:F5:5A:A5:DD:BD:35:E6:94:A1:15:4C:1C:A9:54:D9:C2:89
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       0198D5BBB58720097E98BEC036061AE7488E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          054A
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: JE8NCz0afWjm4eKUug0LLQLHIaM132OESEZQrcfnS9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b5:87:20:09:7e:98:be:c0:36:06:1a:e7:48:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=12645af55aa5ddbd35e694a1154c1ca954d9c289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:62:06:50:f2:e7:ac:0a:e9:a5:39:30:90:
                    59:8a:ed:13:06:08:35:09:f1:be:f7:51:b2:78:26:
                    63:ad:ab:3b:94:3e:25:6a:b4:6c:7e:19:30:19:8b:
                    cb:5c:21:6a:1e:59:9d:e0:f9:c6:cc:36:ee:f7:bd:
                    d4:e0:f6:1e:7a:12:ce:86:f8:93:9f:9e:fe:af:48:
                    de:71:37:1a:0a:1a:d6:3d:95:da:2c:e1:86:9b:d1:
                    49:01:8f:3d:a6:8b:08:db:ae:35:b4:c1:b4:57:d4:
                    90:35:7a:6a:4e:3f:6c:cb:19:5b:c8:f9:aa:38:72:
                    7b:0b:37:e9:b0:f1:9f:9f:bc:26:07:25:a1:f2:8d:
                    31:bc:8c:ec:4f:c3:ea:57:61:db:c1:fb:3d:2b:f5:
                    47:8d:e5:c2:e9:c8:78:69:ad:4e:2d:d7:68:e2:dd:
                    a9:0f:ad:93:fb:a1:d0:f0:5e:80:07:31:7a:f2:52:
                    59:28:a0:30:fc:dc:2f:3c:02:2e:a2:06:64:ab:10:
                    a3:f9:b6:50:ee:2a:8c:10:ad:ff:5a:43:c1:91:16:
                    ca:44:b9:92:a2:c3:a0:de:b7:2d:62:50:29:d7:df:
                    c9:0c:28:c8:51:ab:f2:49:43:7f:56:14:25:46:42:
                    14:55:98:42:1c:75:ac:30:a7:2e:95:18:b8:bf:a2:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:64:5A:F5:5A:A5:DD:BD:35:E6:94:A1:15:4C:1C:A9:54:D9:C2:89
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:70:14:7f:19:74:e0:d9:9f:ee:cc:70:78:14:6c:c0:80:68:
         fd:4e:1c:28:77:9e:4d:0c:56:5e:b6:f1:51:27:86:11:3b:e3:
         ca:a9:38:99:00:bd:fa:f6:41:a4:e1:fe:98:45:4e:d6:53:69:
         18:de:67:55:09:da:96:83:71:1b:13:d9:06:b3:15:4b:aa:74:
         35:1b:0a:f0:91:37:66:a6:28:bb:03:95:39:7b:87:6b:9e:e2:
         d8:2a:82:f7:69:b6:77:91:27:46:03:01:70:cb:b0:68:4c:19:
         5c:31:52:c4:fe:81:72:80:e6:90:9b:86:40:3e:b4:87:10:83:
         c7:10:b2:cc:e6:80:49:e5:ba:df:0f:04:fb:4f:c0:a2:21:10:
         f4:c5:7c:30:01:43:b2:65:fe:48:b2:95:13:a7:e0:79:25:ea:
         fd:04:55:76:26:20:60:9e:f4:f6:4e:f9:2b:e5:32:b5:ef:dd:
         8a:89:72:0a:c0:ea:c5:cd:f0:7e:5b:b3:c3:ed:96:63:e6:c5:
         3a:99:3b:73:12:b5:36:61:e0:5c:84:c3:c9:04:18:f3:90:43:
         10:70:88:ce:52:6f:6e:fe:4f:29:60:bb:40:b5:af:59:4b:cb:
         80:21:59:ac:5d:2d:65:48:9b:b7:d9:85:61:e7:86:0a:72:cd:
         25:94:93:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7WHIAl+mL7ANgYa50iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj
MzI4MTAwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
EygxMjY0NWFmNTVhYTVkZGJkMzVlNjk0YTExNTRjMWNhOTU0ZDljMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQdiBlDy56wK6aU5MJBZiu0TBgg1
CfG+91GyeCZjras7lD4larRsfhkwGYvLXCFqHlmd4PnGzDbu973U4PYeehLOhviT
n57+r0jecTcaChrWPZXaLOGGm9FJAY89posI2641tMG0V9SQNXpqTj9syxlbyPmq
OHJ7CzfpsPGfn7wmByWh8o0xvIzsT8PqV2Hbwfs9K/VHjeXC6ch4aa1OLddo4t2p
D62T+6HQ8F6ABzF68lJZKKAw/NwvPAIuogZkqxCj+bZQ7iqMEK3/WkPBkRbKRLmS
osOg3rctYlAp19/JDCjIUavySUN/VhQlRkIUVZhCHHWsMKculRi4v6Io2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJkWvVapd29NeaUoRVMHKlU2cKJMB8GA1UdIwQY
MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt
MzhkMGNmOGZiOGI4LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4
LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3AUfxl0
4Nmf7sxweBRswIBo/U4cKHeeTQxWXrbxUSeGETvjyqk4mQC9+vZBpOH+mEVO1lNp
GN5nVQnaloNxGxPZBrMVS6p0NRsK8JE3ZqYouwOVOXuHa57i2CqC92m2d5EnRgMB
cMuwaEwZXDFSxP6BcoDmkJuGQD60hxCDxxCyzOaASeW63w8E+0/AoiEQ9MV8MAFD
smX+SLKVE6fgeSXq/QRVdiYgYJ709k75K+Uyte/diolyCsDqxc3wfluzw+2WY+bF
Opk7cxK1NmHgXITDyQQY85BDEHCIzlJvbv5PKWC7QLWvWUvLgCFZrF0tZUibt9mF
YeeGCnLNJZST2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:20 2025 by rpki-client