Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File:                     qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier:          Q0d8LypRuP0w6rHbcmxMf8g2g6K4Xv0A/SU1+lE7WMw=
Subject key identifier:   96:94:7D:AD:AF:47:9D:B8:9F:55:45:61:94:13:47:84:2F:D5:C6:F4
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer:       /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial:       0197C61420445EF2615BB899C436A239B8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number:          1308
Signing time:             Tue 01 Jul 2025 13:01:37 +0000
Manifest this update:     Tue 01 Jul 2025 13:01:37 +0000
Manifest next update:     Wed 02 Jul 2025 13:01:37 +0000
Files and hashes:         1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
                          2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: Zr7/GSRQP2+dk0vg/d9F4/gfoxtFz44rTnFgh4DhTgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:20:44:5e:f2:61:5b:b8:99:c4:36:a2:39:b8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
        Validity
            Not Before: Jul  1 13:01:37 2025 GMT
            Not After : Jul  2 13:01:37 2025 GMT
        Subject: CN=96947dadaf479db89f554561941347842fd5c6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:7d:26:21:2d:97:fa:c7:b9:16:22:c5:08:
                    90:1a:49:d9:15:f7:b7:73:07:ef:83:77:f2:a5:05:
                    6b:69:64:4a:97:1e:7b:76:4f:7d:a4:30:15:b7:eb:
                    02:e5:07:17:1f:fe:78:af:ff:cb:88:44:d6:02:15:
                    59:67:fb:00:f9:50:bb:1f:ff:49:61:76:86:cd:b7:
                    3c:fe:22:3e:fd:3e:3c:5f:23:b4:46:a9:56:ba:1a:
                    ac:86:16:19:ec:28:8b:e3:3b:3b:c6:8d:67:82:97:
                    43:2e:b8:57:4d:c0:55:4e:fd:71:49:60:79:ed:af:
                    09:ca:63:6e:53:d8:f5:f4:72:d2:e0:11:c3:23:2b:
                    98:c9:bf:97:c6:43:41:64:17:cc:2c:27:dd:fa:0c:
                    2e:2a:d6:e3:b9:1c:55:a7:4b:c4:71:8c:c6:d5:7c:
                    ed:6b:9a:2c:64:03:9f:26:e6:09:a2:9c:c7:0d:36:
                    70:95:ac:ed:f1:09:0c:f0:46:5a:04:1d:87:a6:a8:
                    ef:bd:b9:1d:32:7b:17:aa:95:fe:86:24:da:e9:7c:
                    72:b2:a1:cd:02:e8:38:8a:89:27:79:84:46:51:d6:
                    73:bb:86:be:3d:3a:60:82:b6:1d:39:5d:51:b1:72:
                    4f:88:a8:ea:e0:f2:45:d6:2e:2a:4e:9c:e8:7d:0d:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:7D:AD:AF:47:9D:B8:9F:55:45:61:94:13:47:84:2F:D5:C6:F4
            X509v3 Authority Key Identifier:
                keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:e0:23:ff:e5:5f:91:58:40:c9:34:f1:dc:be:98:8c:6a:
         f5:9c:94:ae:1e:7e:92:90:d8:28:a5:4f:7c:6e:15:38:65:48:
         58:25:63:c1:2a:96:fc:e6:57:c7:14:29:af:d6:0f:d5:67:b7:
         be:d4:48:85:1e:26:bb:07:16:9c:d5:be:a4:a6:f1:6a:9c:15:
         73:b6:45:43:a4:58:be:4d:41:66:e0:bb:6e:9d:bd:91:aa:c1:
         37:5c:58:5e:53:9e:8f:64:f9:16:c1:2f:2b:d7:7f:7c:72:b0:
         88:24:8d:84:28:c2:18:af:af:39:1c:b2:59:ca:c8:35:37:88:
         ed:39:04:a6:26:14:b8:a2:4b:70:92:a4:b4:7c:f8:59:7f:47:
         47:e2:4c:d7:52:2a:f3:58:80:d7:b6:ed:50:08:86:d9:e9:8f:
         0a:a6:64:2e:09:0a:8c:9d:67:46:c4:d5:ba:35:97:e9:2c:3d:
         d3:b0:04:f3:eb:84:f5:fb:46:99:7a:9f:6b:7c:1a:0e:37:9c:
         b7:51:d5:15:d0:27:4d:f4:29:43:72:14:90:1d:d5:3f:3f:89:
         92:6d:81:60:38:14:25:6d:d1:d9:08:3c:e9:b6:71:06:65:e8:
         51:42:e0:91:cf:50:8f:64:b8:b4:01:3f:56:c6:df:fa:a3:1a:
         ae:89:e7:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFCBEXvJhW7iZxDaiObi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1
YmQyNDkwHhcNMjUwNzAxMTMwMTM3WhcNMjUwNzAyMTMwMTM3WjAzMTEwLwYDVQQD
Eyg5Njk0N2RhZGFmNDc5ZGI4OWY1NTQ1NjE5NDEzNDc4NDJmZDVjNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwed9JiEtl/rHuRYixQiQGknZFfe3
cwfvg3fypQVraWRKlx57dk99pDAVt+sC5QcXH/54r//LiETWAhVZZ/sA+VC7H/9J
YXaGzbc8/iI+/T48XyO0RqlWuhqshhYZ7CiL4zs7xo1ngpdDLrhXTcBVTv1xSWB5
7a8JymNuU9j19HLS4BHDIyuYyb+XxkNBZBfMLCfd+gwuKtbjuRxVp0vEcYzG1Xzt
a5osZAOfJuYJopzHDTZwlazt8QkM8EZaBB2HpqjvvbkdMnsXqpX+hiTa6XxysqHN
Aug4iokneYRGUdZzu4a+PTpggrYdOV1RsXJPiKjq4PJF1i4qTpzofQ0Z7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaUfa2vR524n1VFYZQTR4Qv1cb0MB8GA1UdIwQY
MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt
YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw
LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO7gI//l
X5FYQMk08dy+mIxq9ZyUrh5+kpDYKKVPfG4VOGVIWCVjwSqW/OZXxxQpr9YP1We3
vtRIhR4muwcWnNW+pKbxapwVc7ZFQ6RYvk1BZuC7bp29karBN1xYXlOej2T5FsEv
K9d/fHKwiCSNhCjCGK+vORyyWcrINTeI7TkEpiYUuKJLcJKktHz4WX9HR+JM11Iq
81iA17btUAiG2emPCqZkLgkKjJ1nRsTVujWX6Sw907AE8+uE9ftGmXqfa3waDjec
t1HVFdAnTfQpQ3IUkB3VPz+Jkm2BYDgUJW3R2Qg86bZxBmXoUULgkc9Qj2S4tAE/
Vsbf+qMaronnNw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:40:54 2025 by rpki-client