Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File:                     XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier:          gqOrVn0IYmQtekzT4FFquPfy6I8Ib95mBQgY/imDl6M=
Subject key identifier:   C8:83:03:87:92:22:07:86:82:E5:A1:42:93:31:91:66:DB:81:8A:2F
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       0198D5BC2DF0E5D2A58D0F6C7F78353F5FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:16 +0000
Files and hashes:         1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
                          2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: o+ecOXpW6gDwyiimmCWjKOq5heobpb54o/KNMPNTook=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2d:f0:e5:d2:a5:8d:0f:6c:7f:78:35:3f:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Aug 23 07:02:16 2025 GMT
            Not After : Aug 24 07:02:16 2025 GMT
        Subject: CN=c88303879222078682e5a14293319166db818a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:dd:2b:84:88:fc:e8:7e:5c:3b:5f:79:cb:
                    db:47:7f:81:ed:f6:26:3e:ba:0e:e4:88:89:7a:26:
                    f4:8b:a7:20:37:04:32:38:06:b9:fe:21:10:d6:5d:
                    72:65:77:bb:ef:d9:18:65:dc:95:4a:d2:24:9f:5d:
                    b8:e5:4d:0c:b7:0c:1b:43:01:8a:7e:16:4c:d9:75:
                    5b:35:dc:b7:5c:5e:01:01:a8:1a:0b:e2:10:ed:dc:
                    44:20:a2:5c:a3:33:df:11:4c:19:fc:21:9e:b2:4d:
                    d6:60:17:f2:b6:8e:57:34:0a:a2:2c:22:45:63:ae:
                    ec:54:99:b8:14:2c:ae:17:fe:fd:6a:0b:cd:9e:81:
                    bb:05:41:1e:5f:9a:20:ca:e4:10:86:39:27:66:66:
                    d2:e8:6a:f6:1e:3c:eb:17:46:4f:cc:21:62:0f:2c:
                    32:87:53:33:8b:89:53:24:95:e0:37:65:1a:41:02:
                    c9:f0:b0:a4:0d:60:95:0a:d4:b0:7b:af:54:fc:74:
                    4f:96:a7:2f:fb:af:03:c6:40:72:1e:84:3d:27:75:
                    7e:8b:60:2e:e2:24:50:67:81:7c:1c:94:a0:80:18:
                    12:93:9b:47:b6:11:d0:ef:72:a9:53:b6:b2:07:30:
                    9c:27:f5:0b:6e:8f:69:7b:1b:b8:f4:d2:fc:19:88:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:03:87:92:22:07:86:82:E5:A1:42:93:31:91:66:DB:81:8A:2F
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c4:f5:c3:26:26:cd:c1:67:84:f1:0c:49:10:5e:dc:63:95:
         a6:40:31:ee:c8:c2:aa:52:f8:62:a8:07:2c:7a:f9:f2:fa:1d:
         43:55:46:a4:98:72:5a:df:13:89:04:cb:3b:aa:4c:b0:be:d3:
         bb:91:09:e2:7e:8e:6d:9c:9b:e4:c1:51:dd:e6:79:f7:34:96:
         a9:51:ab:b8:c2:e4:26:07:b8:20:86:bc:31:54:c3:47:8d:3c:
         9e:87:42:57:e9:7e:51:58:ea:69:b5:e9:4b:4b:1e:41:59:21:
         a3:cc:1d:64:ee:12:02:d9:8e:a0:d7:a4:cf:7b:e2:01:72:12:
         78:00:05:15:00:e1:73:16:37:93:96:ee:c2:ea:bf:59:cc:bc:
         51:a1:0e:b2:fa:1b:e4:b0:8d:2a:7a:85:ea:5a:ae:e6:84:5d:
         be:17:62:d3:f8:07:a1:52:90:b4:73:3a:8a:f2:20:f8:02:c8:
         e6:72:74:9c:c6:ee:bd:23:5b:d9:41:b8:bc:00:16:6c:7f:a4:
         c8:f7:4e:55:e3:80:a7:71:1b:6a:9e:64:7b:c6:bb:d8:87:55:
         80:1c:d6:c3:39:9f:ed:ed:15:e0:36:4c:7c:dd:1e:f3:c9:fa:
         48:33:0f:6b:32:48:8b:a2:bf:e6:8b:17:c2:a1:39:99:ad:49:
         51:30:c8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvC3w5dKljQ9sf3g1P1+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy
MTZiNDEwHhcNMjUwODIzMDcwMjE2WhcNMjUwODI0MDcwMjE2WjAzMTEwLwYDVQQD
EyhjODgzMDM4NzkyMjIwNzg2ODJlNWExNDI5MzMxOTE2NmRiODE4YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF3dK4SI/Oh+XDtfecvbR3+B7fYm
ProO5IiJeib0i6cgNwQyOAa5/iEQ1l1yZXe779kYZdyVStIkn1245U0MtwwbQwGK
fhZM2XVbNdy3XF4BAagaC+IQ7dxEIKJcozPfEUwZ/CGesk3WYBfyto5XNAqiLCJF
Y67sVJm4FCyuF/79agvNnoG7BUEeX5ogyuQQhjknZmbS6Gr2HjzrF0ZPzCFiDywy
h1Mzi4lTJJXgN2UaQQLJ8LCkDWCVCtSwe69U/HRPlqcv+68DxkByHoQ9J3V+i2Au
4iRQZ4F8HJSggBgSk5tHthHQ73KpU7ayBzCcJ/ULbo9pexu49NL8GYho7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiDA4eSIgeGguWhQpMxkWbbgYovMB8GA1UdIwQY
MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct
ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw
LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8T1wyYm
zcFnhPEMSRBe3GOVpkAx7sjCqlL4YqgHLHr58vodQ1VGpJhyWt8TiQTLO6pMsL7T
u5EJ4n6ObZyb5MFR3eZ59zSWqVGruMLkJge4IIa8MVTDR408nodCV+l+UVjqabXp
S0seQVkho8wdZO4SAtmOoNekz3viAXISeAAFFQDhcxY3k5buwuq/Wcy8UaEOsvob
5LCNKnqF6lqu5oRdvhdi0/gHoVKQtHM6ivIg+ALI5nJ0nMbuvSNb2UG4vAAWbH+k
yPdOVeOAp3Ebap5ke8a72IdVgBzWwzmf7e0V4DZMfN0e88n6SDMPazJIi6K/5osX
wqE5ma1JUTDIMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:30 2025 by rpki-client