Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File:                     rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier:          DAlkDE7Npu1rP3TfMNDy8voRvEMY0W5DOJe19l7Isxc=
Subject key identifier:   05:F4:23:E1:EB:4B:6C:CF:12:41:B7:77:AC:24:ED:D0:67:B4:96:26
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer:       /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial:       0198D6610D8B001F407BDAA96D4EDBFBDD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number:          061E
Signing time:             Sat 23 Aug 2025 10:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:21 +0000
Files and hashes:         1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
                          2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: thAuPznoCORf176q0vfKq0Ss9IIh5IFAuKQSKWXdZRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:0d:8b:00:1f:40:7b:da:a9:6d:4e:db:fb:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
        Validity
            Not Before: Aug 23 10:02:21 2025 GMT
            Not After : Aug 24 10:02:21 2025 GMT
        Subject: CN=05f423e1eb4b6ccf1241b777ac24edd067b49626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:b9:a5:21:f2:a0:39:44:2c:d5:6a:68:7b:
                    3a:87:71:6e:46:55:80:20:a0:ec:41:1a:e4:5a:5e:
                    ec:37:7c:0e:5b:75:b3:d6:b7:2d:f2:3f:33:0c:a8:
                    4f:4c:95:61:51:7d:80:d3:0c:96:d7:9c:d0:13:69:
                    89:d9:23:3a:5b:40:ac:03:e5:2a:9b:07:66:ff:1a:
                    56:d3:47:3d:c1:ea:3b:93:e9:52:92:4d:7b:7b:34:
                    cf:cb:fb:07:aa:d2:4b:6c:04:91:fc:de:87:c9:58:
                    cd:34:11:8c:c1:e8:ef:e4:8d:49:51:7a:57:0c:fa:
                    e7:0f:fb:5a:f7:91:8b:a3:98:68:7e:88:3d:b5:46:
                    48:b5:07:03:63:da:20:49:71:7c:72:77:1d:6d:fe:
                    80:e3:9a:eb:92:78:e8:96:48:2e:dd:9d:f2:a4:2d:
                    db:ae:00:bf:36:08:cb:ea:2f:8c:68:8e:72:56:c9:
                    71:3e:bc:15:9b:42:2a:57:c5:c1:c4:8e:98:d2:75:
                    71:99:cd:0e:bc:9a:b1:18:f6:8f:db:b4:39:de:12:
                    fa:ae:f2:6a:3d:d8:e6:a8:00:e9:74:0a:dc:17:23:
                    38:d9:02:cb:9d:20:d3:d1:4d:7a:7d:58:f7:7a:3f:
                    44:b0:c2:62:15:e2:e9:c6:67:c8:94:45:5f:0a:91:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:23:E1:EB:4B:6C:CF:12:41:B7:77:AC:24:ED:D0:67:B4:96:26
            X509v3 Authority Key Identifier:
                keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:ba:5a:58:34:dd:7d:e3:84:4a:73:2b:6b:b0:b3:56:50:
         05:3e:db:8d:8a:f3:40:3d:e5:c7:ac:dd:be:22:10:d1:77:1a:
         36:51:93:f8:71:2d:7d:5f:d1:8f:59:11:50:39:ec:bb:c4:29:
         bd:28:5f:13:98:cd:cf:47:28:0b:e4:43:5b:e2:ee:8b:d9:4f:
         81:1b:41:43:c2:55:5b:fe:82:8e:1e:da:1c:30:fb:4e:0f:3a:
         1a:ed:45:10:41:e3:a2:4a:71:13:a5:25:de:4f:a4:30:52:45:
         11:ae:f5:26:e2:9a:fa:4d:47:fd:31:2f:d1:a7:24:ec:15:13:
         5e:f4:0a:44:51:af:91:2b:24:34:47:29:5d:66:79:9f:b0:a8:
         39:5f:2d:f6:07:c9:35:04:28:10:06:24:36:68:c8:d3:67:b6:
         cd:31:9a:ca:d6:fe:08:af:81:e3:39:62:35:72:dc:f5:05:ef:
         83:12:b5:08:af:95:e9:ff:18:a9:85:5d:92:7c:8f:e8:6d:df:
         af:49:b2:1b:f2:48:13:d6:a3:0a:94:ff:5b:8b:a1:11:b6:2c:
         ad:4b:9d:46:f2:34:53:ae:83:eb:3a:fd:4f:15:15:b6:89:ef:
         a8:fa:25:bd:6e:6a:cb:73:54:a9:b2:98:6e:c7:ca:03:fa:fc:
         ae:94:be:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQ2LAB9Ae9qpbU7b+92CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDZiZTk3YmNmZTEyYmVjYmU4MmI3ODQxMDQ3ZjU3OTcy
YTkzNWEwHhcNMjUwODIzMTAwMjIxWhcNMjUwODI0MTAwMjIxWjAzMTEwLwYDVQQD
EygwNWY0MjNlMWViNGI2Y2NmMTI0MWI3NzdhYzI0ZWRkMDY3YjQ5NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF25pSHyoDlELNVqaHs6h3FuRlWA
IKDsQRrkWl7sN3wOW3Wz1rct8j8zDKhPTJVhUX2A0wyW15zQE2mJ2SM6W0CsA+Uq
mwdm/xpW00c9weo7k+lSkk17ezTPy/sHqtJLbASR/N6HyVjNNBGMwejv5I1JUXpX
DPrnD/ta95GLo5hofog9tUZItQcDY9ogSXF8cncdbf6A45rrknjolkgu3Z3ypC3b
rgC/NgjL6i+MaI5yVslxPrwVm0IqV8XBxI6Y0nVxmc0OvJqxGPaP27Q53hL6rvJq
PdjmqADpdArcFyM42QLLnSDT0U16fVj3ej9EsMJiFeLpxmfIlEVfCpHUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX0I+HrS2zPEkG3d6wk7dBntJYmMB8GA1UdIwQY
MBaAFKzWvpe8/hK+y+greEEEf1eXKpNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQt
MmE4NGFjYmUwN2VlLzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQtMmE4NGFjYmUwN2Vl
LzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOe6Wlg0
3X3jhEpzK2uws1ZQBT7bjYrzQD3lx6zdviIQ0XcaNlGT+HEtfV/Rj1kRUDnsu8Qp
vShfE5jNz0coC+RDW+Lui9lPgRtBQ8JVW/6Cjh7aHDD7Tg86Gu1FEEHjokpxE6Ul
3k+kMFJFEa71JuKa+k1H/TEv0ack7BUTXvQKRFGvkSskNEcpXWZ5n7CoOV8t9gfJ
NQQoEAYkNmjI02e2zTGaytb+CK+B4zliNXLc9QXvgxK1CK+V6f8YqYVdknyP6G3f
r0myG/JIE9ajCpT/W4uhEbYsrUudRvI0U66D6zr9TxUVtonvqPolvW5qy3NUqbKY
bsfKA/r8rpS+NA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:39 2025 by rpki-client