Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File:                     g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier:          shnJhOhYY9Holzz09nXKpofQXA1n0w6IMBdKjkdMjC4=
Subject key identifier:   6A:6C:01:10:2D:DD:DF:E2:40:99:CC:53:22:8F:15:D5:B8:B2:58:2E
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer:       /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial:       0198D5F1AA45DAB5CB0CC2C79DEEB01470F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number:          0C15
Signing time:             Sat 23 Aug 2025 08:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:41 +0000
Files and hashes:         1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
                          2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: plu6cUrnwOKozKuwKxWi1UDsx0PySzmOJK75B6+5P2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:aa:45:da:b5:cb:0c:c2:c7:9d:ee:b0:14:70:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
        Validity
            Not Before: Aug 23 08:00:41 2025 GMT
            Not After : Aug 24 08:00:41 2025 GMT
        Subject: CN=6a6c01102ddddfe24099cc53228f15d5b8b2582e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:42:3a:5e:86:a5:fe:71:3e:e4:6d:be:46:
                    a9:23:a1:39:4f:f9:2a:90:cf:11:2b:f4:1a:0a:62:
                    53:04:b5:ee:10:5d:e4:74:fe:e5:3f:3a:ad:fb:f6:
                    45:5f:b1:a6:0e:9b:4c:41:6b:2c:3f:24:48:ac:14:
                    9c:82:f6:69:64:9f:cc:96:84:31:0d:c6:62:e0:04:
                    72:87:84:15:ed:b5:d2:5c:7b:9a:bf:ea:fd:ae:08:
                    29:52:98:86:c4:59:28:c2:bd:49:9f:3d:f8:5f:7c:
                    23:3a:37:56:fd:03:7b:82:01:f0:3e:58:14:13:c6:
                    2c:cb:32:3f:57:f7:81:05:49:a1:5c:41:ca:99:e9:
                    63:54:a8:77:13:25:18:4e:d1:40:11:fd:9f:57:15:
                    ea:af:73:04:10:ac:0c:5f:07:18:1c:36:36:c1:86:
                    2d:0d:8b:21:eb:8b:34:97:be:06:d6:28:e3:b4:99:
                    3e:aa:cf:cd:2b:a2:77:a0:0c:6b:e7:0c:a2:b2:0d:
                    8c:b0:b2:24:26:63:f5:28:7b:63:5e:45:5f:c0:8c:
                    bc:58:4c:84:71:b8:ff:07:a3:10:a7:64:d1:83:16:
                    40:52:21:22:f7:06:a1:dd:b9:0d:42:50:3a:3d:60:
                    16:3c:e6:f9:fe:03:45:28:4a:a0:cf:6c:69:b4:79:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:01:10:2D:DD:DF:E2:40:99:CC:53:22:8F:15:D5:B8:B2:58:2E
            X509v3 Authority Key Identifier:
                keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:de:72:53:f8:c8:22:8c:04:a8:f0:51:0c:ac:17:c5:7f:
         24:12:5c:ef:d9:f0:9f:86:58:12:6f:87:ad:c6:bc:f2:f8:20:
         19:df:b5:ed:ee:11:7a:24:b7:89:d7:84:d3:ce:56:84:2f:f7:
         d0:b8:22:c2:ed:8b:18:2c:29:b9:66:a6:da:3c:89:c5:52:1d:
         1e:ea:2f:69:3b:6b:c1:49:dc:29:a0:8e:46:5b:46:f8:d2:82:
         bd:02:ab:8e:58:b8:76:34:fc:8a:87:61:fe:af:10:82:a9:de:
         01:0f:08:fa:54:93:2f:29:48:b8:87:4f:3d:5d:42:e9:e4:69:
         a7:05:76:84:0c:4c:57:ca:ba:54:82:25:e4:96:27:c7:ea:1c:
         68:c5:f7:d2:92:d0:44:76:f9:f4:f4:0d:39:1e:7c:f4:f4:b3:
         63:ec:19:31:4d:61:ed:c0:17:a0:3d:fe:14:7d:1a:bd:c4:ae:
         a2:74:66:83:b2:83:92:52:a7:2c:69:23:18:68:0d:ec:1a:66:
         7c:f9:40:c9:2e:93:99:7e:e3:f1:8b:37:d9:60:1e:4e:76:6c:
         2f:65:4c:5a:82:68:3e:69:61:61:e8:50:2f:62:94:a9:e7:ad:
         b5:8d:71:74:c6:22:04:4a:f6:25:e2:0d:aa:56:33:6e:43:d3:
         a0:dc:13:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8apF2rXLDMLHne6wFHD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzk2NmRhNWVlYWQ1MDkwNTA5MWMzYjU5OWM5YTQ0MDc0
NzM5ZDAwHhcNMjUwODIzMDgwMDQxWhcNMjUwODI0MDgwMDQxWjAzMTEwLwYDVQQD
Eyg2YTZjMDExMDJkZGRkZmUyNDA5OWNjNTMyMjhmMTVkNWI4YjI1ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SdCOl6Gpf5xPuRtvkapI6E5T/kq
kM8RK/QaCmJTBLXuEF3kdP7lPzqt+/ZFX7GmDptMQWssPyRIrBScgvZpZJ/MloQx
DcZi4ARyh4QV7bXSXHuav+r9rggpUpiGxFkowr1Jnz34X3wjOjdW/QN7ggHwPlgU
E8YsyzI/V/eBBUmhXEHKmeljVKh3EyUYTtFAEf2fVxXqr3MEEKwMXwcYHDY2wYYt
DYsh64s0l74G1ijjtJk+qs/NK6J3oAxr5wyisg2MsLIkJmP1KHtjXkVfwIy8WEyE
cbj/B6MQp2TRgxZAUiEi9wah3bkNQlA6PWAWPOb5/gNFKEqgz2xptHltiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpsARAt3d/iQJnMUyKPFdW4slguMB8GA1UdIwQY
MBaAFIPJZtpe6tUJBQkcO1mcmkQHRznQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQt
ZjU3MmEwZmNlMGVlLzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQtZjU3MmEwZmNlMGVl
LzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMfeclP4
yCKMBKjwUQysF8V/JBJc79nwn4ZYEm+Hrca88vggGd+17e4ReiS3ideE085WhC/3
0Lgiwu2LGCwpuWam2jyJxVIdHuovaTtrwUncKaCORltG+NKCvQKrjli4djT8iodh
/q8QgqneAQ8I+lSTLylIuIdPPV1C6eRppwV2hAxMV8q6VIIl5JYnx+ocaMX30pLQ
RHb59PQNOR589PSzY+wZMU1h7cAXoD3+FH0avcSuonRmg7KDklKnLGkjGGgN7Bpm
fPlAyS6TmX7j8Ys32WAeTnZsL2VMWoJoPmlhYehQL2KUqeettY1xdMYiBEr2JeIN
qlYzbkPToNwTJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:30 2025 by rpki-client