Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          qpo3GpOlyaw6PsptHRPzuou/Aqq3IdKHav5VhQdugqM=
Subject key identifier:   1D:BC:6B:28:31:CA:9D:02:97:41:B7:05:C5:73:9E:F4:DD:F4:D3:69
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       0198D96050D422C6E79F4F11637B08503E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1665
Signing time:             Sun 24 Aug 2025 00:00:24 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:24 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:24 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: u+w+SuOPB5Sp5KsyrZElAwTpkayU27j5fvi0Z+e9B4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:50:d4:22:c6:e7:9f:4f:11:63:7b:08:50:3e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Aug 24 00:00:24 2025 GMT
            Not After : Aug 25 00:00:24 2025 GMT
        Subject: CN=1dbc6b2831ca9d029741b705c5739ef4ddf4d369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:5a:a4:1c:20:c7:30:ee:a7:db:e2:83:11:
                    9f:b9:5a:f9:da:b7:c8:3f:a2:ab:bd:21:ee:ec:11:
                    ef:5b:92:12:0b:4d:34:82:a6:04:59:7b:d4:f8:72:
                    fc:f6:76:d2:20:ac:9d:68:12:47:fb:18:58:7a:a1:
                    b6:9a:b8:e1:be:d1:b8:2a:11:be:7a:56:95:13:0a:
                    bf:af:e8:61:5f:fa:6d:b7:0d:03:95:69:98:fd:b6:
                    25:d6:d0:c6:5e:ff:47:a0:d0:12:49:7f:ce:78:76:
                    5b:5f:0f:1a:01:07:51:96:63:b2:06:43:49:29:66:
                    9f:f8:e8:52:96:0c:a4:55:5b:c0:d6:46:a7:d4:e6:
                    8a:fe:b6:b4:72:2b:e4:83:f7:c8:1e:d8:1c:41:c5:
                    2e:1e:08:df:16:50:49:7d:87:61:cf:de:12:41:c5:
                    66:c5:86:33:6e:cd:7c:f8:e0:ac:8a:19:7e:ef:62:
                    5e:14:6e:35:f1:db:54:5e:bb:ac:e6:97:f3:59:56:
                    92:8b:ef:b9:45:eb:1a:62:46:07:af:df:1d:ef:3d:
                    80:ed:9d:6a:85:9d:31:31:bc:d4:aa:64:22:85:05:
                    8e:75:d3:ed:12:f6:53:16:ed:85:a0:61:65:ba:52:
                    22:3c:b1:e1:94:3e:21:f5:d2:d5:05:02:af:7b:5b:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:6B:28:31:CA:9D:02:97:41:B7:05:C5:73:9E:F4:DD:F4:D3:69
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:00:9d:10:88:0e:bb:d0:d1:c9:59:91:ae:ac:e5:c8:a7:
         18:71:db:36:45:20:1f:3f:2b:9c:61:ca:9c:d3:5e:39:bf:3e:
         49:22:c6:eb:29:41:b0:d6:44:66:84:80:6a:71:ab:5c:12:cf:
         ef:02:52:6c:4e:be:f9:83:14:b6:8f:e0:3b:e3:e1:79:50:4d:
         86:a2:15:b5:c1:21:55:4f:b9:db:9a:06:1e:f8:3c:18:f9:39:
         22:72:0e:c6:93:c9:4f:17:09:41:a1:29:88:6b:2f:ba:d0:45:
         11:39:fb:2c:d6:bb:c4:e6:19:90:7e:62:eb:ad:f2:04:0a:77:
         68:eb:1b:5f:0e:2b:bf:5c:d8:6d:cf:aa:0f:3a:74:ba:c1:a9:
         e4:fb:77:26:15:c8:a9:4f:e3:7d:f7:d2:4a:d7:33:87:67:e6:
         45:04:53:e5:7b:19:03:36:d6:3c:37:da:b0:e4:72:26:0b:3d:
         13:bf:04:f7:d5:ba:bb:79:8e:fb:05:62:2b:ee:b4:44:8a:5c:
         94:dc:0b:99:46:0c:f3:52:64:59:0f:11:82:bb:ed:21:94:49:
         bb:c4:f1:c1:82:91:ab:38:e0:55:65:19:78:e7:4e:59:8a:93:
         c4:d3:7c:a8:93:73:b2:6d:9d:9d:96:f2:39:0a:67:46:19:79:
         34:ee:30:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYFDUIsbnn08RY3sIUD6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjUwODI0MDAwMDI0WhcNMjUwODI1MDAwMDI0WjAzMTEwLwYDVQQD
EygxZGJjNmIyODMxY2E5ZDAyOTc0MWI3MDVjNTczOWVmNGRkZjRkMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJapBwgxzDup9vigxGfuVr52rfI
P6KrvSHu7BHvW5ISC000gqYEWXvU+HL89nbSIKydaBJH+xhYeqG2mrjhvtG4KhG+
elaVEwq/r+hhX/pttw0DlWmY/bYl1tDGXv9HoNASSX/OeHZbXw8aAQdRlmOyBkNJ
KWaf+OhSlgykVVvA1kan1OaK/ra0civkg/fIHtgcQcUuHgjfFlBJfYdhz94SQcVm
xYYzbs18+OCsihl+72JeFG418dtUXrus5pfzWVaSi++5ResaYkYHr98d7z2A7Z1q
hZ0xMbzUqmQihQWOddPtEvZTFu2FoGFlulIiPLHhlD4h9dLVBQKve1sKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB28aygxyp0Cl0G3BcVznvTd9NNpMB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXoAnRCI
DrvQ0clZka6s5cinGHHbNkUgHz8rnGHKnNNeOb8+SSLG6ylBsNZEZoSAanGrXBLP
7wJSbE6++YMUto/gO+PheVBNhqIVtcEhVU+525oGHvg8GPk5InIOxpPJTxcJQaEp
iGsvutBFETn7LNa7xOYZkH5i663yBAp3aOsbXw4rv1zYbc+qDzp0usGp5Pt3JhXI
qU/jfffSStczh2fmRQRT5XsZAzbWPDfasORyJgs9E78E99W6u3mO+wViK+60RIpc
lNwLmUYM81JkWQ8RgrvtIZRJu8TxwYKRqzjgVWUZeOdOWYqTxNN8qJNzsm2dnZby
OQpnRhl5NO4wXA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:43:34 2025 by rpki-client