Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          /cEpr1tGjDeH61huy8iYhZ6rNDT1ernvFPqtRI8V7oM=
Subject key identifier:   6B:33:11:99:48:BF:21:79:A1:B7:BC:13:9A:DC:28:0B:CA:3B:AF:47
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       0198D3967A0413086A1B91E634B95966F3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          164B
Signing time:             Fri 22 Aug 2025 21:01:50 +0000
Manifest this update:     Fri 22 Aug 2025 21:01:50 +0000
Manifest next update:     Sat 23 Aug 2025 21:01:50 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: mT4BhoX9B3JhtsHK/Uocy98toh24M0ReMu5wjETTj6o=)
                          2: DhrEeypsTDYQFqtn5MxSVP9RNeU.roa (hash: YbsKC7hbnZNHtFxguJmaXdHmEbB7PGi2yECVIv3in+Y=)
                          3: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (hash: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=)
                          4: bU9Ico-cyM-PvgK1SQj6vU4e1Ls.roa (hash: doVS673KgZlyTzdhMbWDR8Kab55ovw32HoLTIKOV1EA=)
                          5: voL46_JMwU4qTPsD8VeKh98SS14.roa (hash: qZtqKCrc3zkDk9p5tCOUN22BVn6pEnapViAnA8r2BYY=)
                          6: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (hash: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 21:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d3:96:7a:04:13:08:6a:1b:91:e6:34:b9:59:66:f3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Aug 22 21:01:50 2025 GMT
            Not After : Aug 23 21:01:50 2025 GMT
        Subject: CN=6b33119948bf2179a1b7bc139adc280bca3baf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:08:71:e0:0f:5e:86:3f:7f:4f:0f:a0:df:
                    16:27:d7:13:65:0b:c6:ee:a0:34:a0:c2:8c:13:a2:
                    15:8b:99:94:a8:37:8e:4a:29:78:5f:61:09:7b:5d:
                    f2:e1:1d:1b:4e:30:31:72:31:38:04:14:98:d5:d6:
                    95:96:71:3e:73:3b:6b:e0:40:3b:63:bb:8d:9b:bf:
                    ad:05:2b:5b:cb:32:96:3b:33:28:e2:9b:f9:46:fc:
                    ab:11:65:e5:b1:ed:4c:f9:f2:cc:07:8d:56:fe:45:
                    9e:97:59:9f:90:61:c7:17:f7:ff:45:2b:fb:ee:a5:
                    23:1b:12:70:70:3f:a8:7d:f0:6c:49:cc:8a:24:62:
                    db:3c:78:6a:81:75:f4:68:cd:7a:c8:b7:8b:d6:2a:
                    96:9b:78:e0:0b:81:70:30:20:92:13:81:ca:88:80:
                    de:82:57:00:9f:8b:6f:48:84:1f:22:89:4b:ab:47:
                    80:8e:e6:98:65:62:c0:46:e4:2d:38:6a:43:ea:e6:
                    97:6d:d4:2e:85:98:48:38:02:78:88:ee:c2:58:aa:
                    06:05:eb:a8:b6:a2:17:77:4f:89:2b:44:14:a0:25:
                    90:83:54:73:d5:3a:8a:e5:7e:e2:6b:d7:5e:89:f1:
                    7a:2e:47:07:96:a3:52:38:f5:c6:d7:12:6d:a7:ff:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:11:99:48:BF:21:79:A1:B7:BC:13:9A:DC:28:0B:CA:3B:AF:47
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:67:af:97:5c:62:d9:84:11:ab:56:76:99:5e:ff:21:6f:b0:
         eb:30:50:12:da:b8:c2:d4:18:33:81:e8:33:fd:77:86:f9:f1:
         cf:65:2e:99:b6:73:83:77:de:a2:a4:66:80:91:51:68:cb:32:
         71:3a:18:fc:ed:1a:37:c1:47:7b:b7:a2:a6:1a:d8:e4:e0:4b:
         65:a8:a2:b6:93:45:50:db:3d:92:be:a6:54:1a:8a:3f:00:09:
         8c:1a:da:27:bb:4b:10:aa:e4:f1:3b:08:1d:61:8d:ad:9c:a0:
         d8:78:17:c9:d7:46:eb:fc:85:12:07:1b:a7:39:73:07:d8:d2:
         d2:b3:23:6c:d0:4e:73:aa:7b:f2:aa:53:c1:5e:7e:24:36:fe:
         af:93:d0:c7:61:02:32:9c:d4:97:0b:06:50:f1:a1:87:12:3f:
         55:ca:96:a8:2a:75:aa:27:a7:96:ee:f8:3b:4b:3b:95:ca:31:
         30:e2:17:9b:ce:38:d0:4d:24:21:1c:48:fb:af:c1:4a:ee:3f:
         e4:5a:da:ec:be:1d:45:7e:e8:da:95:95:07:d3:0d:b6:95:fd:
         69:5b:5a:52:7d:64:3d:d9:54:d2:f8:61:1d:3e:13:5a:88:c4:
         d3:6c:5d:60:48:e8:47:1f:a8:48:33:ef:c1:83:4d:cc:18:60:
         80:14:bd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjTlnoEEwhqG5HmNLlZZvO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy
ZWQ5MzEwHhcNMjUwODIyMjEwMTUwWhcNMjUwODIzMjEwMTUwWjAzMTEwLwYDVQQD
Eyg2YjMzMTE5OTQ4YmYyMTc5YTFiN2JjMTM5YWRjMjgwYmNhM2JhZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FsIceAPXoY/f08PoN8WJ9cTZQvG
7qA0oMKME6IVi5mUqDeOSil4X2EJe13y4R0bTjAxcjE4BBSY1daVlnE+cztr4EA7
Y7uNm7+tBStbyzKWOzMo4pv5RvyrEWXlse1M+fLMB41W/kWel1mfkGHHF/f/RSv7
7qUjGxJwcD+offBsScyKJGLbPHhqgXX0aM16yLeL1iqWm3jgC4FwMCCSE4HKiIDe
glcAn4tvSIQfIolLq0eAjuaYZWLARuQtOGpD6uaXbdQuhZhIOAJ4iO7CWKoGBeuo
tqIXd0+JK0QUoCWQg1Rz1TqK5X7ia9deifF6LkcHlqNSOPXG1xJtp/8rdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGszEZlIvyF5obe8E5rcKAvKO69HMB8GA1UdIwQY
MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt
NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw
LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWevl1xi
2YQRq1Z2mV7/IW+w6zBQEtq4wtQYM4HoM/13hvnxz2UumbZzg3feoqRmgJFRaMsy
cToY/O0aN8FHe7eiphrY5OBLZaiitpNFUNs9kr6mVBqKPwAJjBraJ7tLEKrk8TsI
HWGNrZyg2HgXyddG6/yFEgcbpzlzB9jS0rMjbNBOc6p78qpTwV5+JDb+r5PQx2EC
MpzUlwsGUPGhhxI/VcqWqCp1qienlu74O0s7lcoxMOIXm8440E0kIRxI+6/BSu4/
5Fra7L4dRX7o2pWVB9MNtpX9aVtaUn1kPdlU0vhhHT4TWojE02xdYEjoRx+oSDPv
wYNNzBhggBS96Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:56:11 2025 by rpki-client