Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File:                     rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier:          5PfwZGEeQx0QueBpShMJneuMLWVtows4UL9nezEBR9g=
Subject key identifier:   AE:60:FF:DF:84:D2:2F:DE:C2:02:84:51:C9:49:77:5A:D6:0B:B9:61
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer:       /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial:       0198D5BC5AC88B0957C58E783CAA29E4AA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:27 +0000
Files and hashes:         1: 7a4UPx06lYNEEu_8hOujHiCjI3I.roa (hash: KGEycmI2h25GEHvIQbSwQGJ1oU96GoNn5z0Fg/wO3lQ=)
                          2: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
                          3: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
                          4: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: QUpxgKxR5ksSX3xNh2lZbkXEUXn305UPPK3lhn88zxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:5a:c8:8b:09:57:c5:8e:78:3c:aa:29:e4:aa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
        Validity
            Not Before: Aug 23 07:02:27 2025 GMT
            Not After : Aug 24 07:02:27 2025 GMT
        Subject: CN=ae60ffdf84d22fdec2028451c949775ad60bb961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:b2:11:b5:da:65:a2:89:f9:c3:cf:b5:1f:
                    00:60:b5:e1:e6:94:e9:39:bd:da:57:13:b2:3e:6c:
                    76:ac:35:be:96:a0:d0:3b:be:99:a9:22:9f:51:e1:
                    c6:0f:38:54:06:24:1d:58:56:d9:6d:18:d1:aa:d0:
                    58:8c:62:22:37:6f:c0:27:0a:79:ea:6e:44:2d:69:
                    69:d5:01:af:56:fb:e8:a8:54:4a:83:16:e6:7f:cd:
                    14:2e:32:c3:b2:37:ee:a6:b0:0b:d0:54:5a:b0:00:
                    1a:98:bc:25:47:85:9b:87:88:2a:8b:39:19:8c:c9:
                    9c:c9:35:e2:24:33:76:c6:cf:06:e4:b6:99:d7:c6:
                    e2:19:7f:36:fe:0a:28:eb:0b:73:58:36:f2:75:83:
                    c8:83:10:d5:19:09:96:78:4c:a4:8b:9a:11:fd:d2:
                    c7:c9:94:db:3b:51:3b:71:42:2f:8e:bd:38:ee:14:
                    98:8d:9e:98:41:17:dd:99:0a:fb:45:a9:57:06:3b:
                    1c:eb:45:db:11:bb:06:49:71:e1:87:d3:5a:34:96:
                    76:64:42:00:e9:69:6c:8d:06:2e:88:44:02:f1:fb:
                    5c:22:0a:90:5e:27:45:65:6e:d8:00:8b:cc:cd:12:
                    03:1b:9f:42:d3:f2:78:b6:1f:08:e8:f2:1a:a3:93:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:60:FF:DF:84:D2:2F:DE:C2:02:84:51:C9:49:77:5A:D6:0B:B9:61
            X509v3 Authority Key Identifier:
                keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:fb:c9:2d:f6:5c:0d:f8:ab:da:7e:68:0f:49:3e:c4:37:
         5d:3a:b3:f9:66:1f:c1:a7:b3:a7:34:3c:f2:e6:a1:b2:ca:38:
         5d:6a:e8:2d:52:cc:d3:31:a5:3e:9e:7a:b1:6a:84:e5:d9:73:
         52:d3:87:56:4f:e9:d7:ec:d8:49:f8:f1:56:61:5f:59:e6:3b:
         a6:0f:73:3e:bd:9f:3a:3a:8e:d2:16:2e:24:9b:4f:2a:80:ae:
         aa:82:ef:8d:3f:d5:16:d1:aa:c9:77:6c:55:6b:42:4b:40:bc:
         1b:b1:92:63:ff:82:76:6b:82:cb:02:a7:11:28:1e:4d:e2:aa:
         a4:8e:96:74:1a:8f:15:38:57:03:04:0a:e7:5e:fb:f2:5a:81:
         a3:ed:71:e6:b8:82:38:db:75:7a:66:5b:b0:31:17:07:88:74:
         e2:0a:38:e9:af:c4:f2:88:92:69:dd:9d:fe:40:d5:07:3d:24:
         4a:32:be:fe:10:43:3a:cb:85:01:25:5e:97:8b:28:7e:b8:80:
         f5:91:3f:fa:25:93:0b:b1:06:81:c6:7b:bc:90:c3:4a:d4:ea:
         a8:05:1c:61:28:65:07:d8:4b:f2:cc:b8:82:3a:ee:2e:28:d7:
         31:9a:01:fb:42:90:10:ec:b1:4f:c0:46:3b:15:5b:39:7f:3c:
         e6:79:17:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvFrIiwlXxY54PKop5KomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0
YzhiYzcwHhcNMjUwODIzMDcwMjI3WhcNMjUwODI0MDcwMjI3WjAzMTEwLwYDVQQD
EyhhZTYwZmZkZjg0ZDIyZmRlYzIwMjg0NTFjOTQ5Nzc1YWQ2MGJiOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks+yEbXaZaKJ+cPPtR8AYLXh5pTp
Ob3aVxOyPmx2rDW+lqDQO76ZqSKfUeHGDzhUBiQdWFbZbRjRqtBYjGIiN2/AJwp5
6m5ELWlp1QGvVvvoqFRKgxbmf80ULjLDsjfuprAL0FRasAAamLwlR4Wbh4gqizkZ
jMmcyTXiJDN2xs8G5LaZ18biGX82/goo6wtzWDbydYPIgxDVGQmWeEyki5oR/dLH
yZTbO1E7cUIvjr047hSYjZ6YQRfdmQr7RalXBjsc60XbEbsGSXHhh9NaNJZ2ZEIA
6WlsjQYuiEQC8ftcIgqQXidFZW7YAIvMzRIDG59C0/J4th8I6PIao5M/cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5g/9+E0i/ewgKEUclJd1rWC7lhMB8GA1UdIwQY
MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt
MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx
LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ77yS32
XA34q9p+aA9JPsQ3XTqz+WYfwaezpzQ88uahsso4XWroLVLM0zGlPp56sWqE5dlz
UtOHVk/p1+zYSfjxVmFfWeY7pg9zPr2fOjqO0hYuJJtPKoCuqoLvjT/VFtGqyXds
VWtCS0C8G7GSY/+CdmuCywKnESgeTeKqpI6WdBqPFThXAwQK51778lqBo+1x5riC
ONt1emZbsDEXB4h04go46a/E8oiSad2d/kDVBz0kSjK+/hBDOsuFASVel4sofriA
9ZE/+iWTC7EGgcZ7vJDDStTqqAUcYShlB9hL8sy4gjruLijXMZoB+0KQEOyxT8BG
OxVbOX885nkXMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:51 2025 by rpki-client