Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
File:                     8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft (raw, json)
Hash identifier:          4OvsnUB5VtO0ccgyyb03mWZz4qoji8MMI6sA6FiSBuQ=
Subject key identifier:   89:01:77:21:C2:DF:5C:34:32:10:1E:5B:CE:D2:99:60:22:CF:38:FF
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0197B70F39DE280F7E0F7DC312861560676D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
Manifest number:          1663
Signing time:             Sat 28 Jun 2025 15:01:57 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:57 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:57 +0000
Files and hashes:         1: 3nPG-CM1jjEmXF6XDlPgCgntfQg.roa (hash: Sb1ZHVgBDy5ifPkmmrVoXHsKaHLar+3PzllY+7Vhpsc=)
                          2: 46LwT3myXVrKskprjHnrNdm1oew.roa (hash: DyBB9MsmNRsg8FEme02F6pYGo5PwRlbuMCc3llnxckA=)
                          3: 4bHfzm1fuJUKFdFvq81Zj1J7nZ8.roa (hash: cYPYZrlg6fQ6IO6sn0agmIqG6bfzhmVqtlsX+KCd26U=)
                          4: 6wIUZIBC7o21wltDwigx7lx782g.roa (hash: KsD2qATWnlH1JI+kDKAmMhUibT7qf+G28GI+6ncf2G8=)
                          5: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl (hash: BdJijDiY4dAOpVHi7WeSDh0O+AjnEpxOR5sGnqen3zo=)
                          6: 9-Y0aWZrtpwstXXpKAi4n__bel4.roa (hash: GAFuW8iAmDtblZCnA4ow69qvWKaKSY18TY/SvaQs/uE=)
                          7: 9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa (hash: r9B2NrNcCL1IbHEMQ2e6VWbR42EMOv3qQYj9s2HeM6o=)
                          8: CT0vQDDLHzxy-DZhmH5lfMDO1AE.roa (hash: 2wJnl0vc/QlliM5JtS0mPybzQY83w0RW1qmvqeBag7k=)
                          9: D_OPVvimajNIkdxddRCzEZyxV38.roa (hash: ppja+zul0vsh+mpmNBN6d4rLEwyi9iHDDiod9WKUfTM=)
                          10: EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa (hash: gmkGHYqKxDCqtYbJRJf1ZjpQV4FPkXqmKecKGoXCqA4=)
                          11: KRkXrh5vqktxAukUYwKEkf01PR4.roa (hash: FhB06ea4PPxnlbrSmHt+yVwcmkem9lE6fs+aLQmy5mg=)
                          12: LxkfTjTXAGdbju5isaPCtnGLLgc.roa (hash: SeXkkuvsRzqZLCxI5NVGlHTm+cm8bKudh3134+3EtUs=)
                          13: NQPnV7taNAdtfXxvQ-xhCav1x98.roa (hash: +ogbQ4IOQIb1aVAiBrCGh9Ug+96DExtvEZ8W9Ayjx+g=)
                          14: P2ie-v_e1qakswKBkYe8ZLKWxEc.roa (hash: Pu7A+yMkzaTHEk1fItsWmMW/+SCDTYOw3FWfhMAzaK4=)
                          15: R9s7f2WwympRujpexwz_Cfqw9AE.roa (hash: 985+BT2fuoF7brmb9lo1Hwb8rpSqIgNiOncmQTYZ7YU=)
                          16: UKHZWUb2QMnIeyFceeYsJyNs2dE.roa (hash: R5MOCmFKtRGlB3Py2M6AJaYUWsq318YC7IDgmUdJw+k=)
                          17: ZWCXXdfhMKu44PX-A6YEp2UiZPA.roa (hash: QZ9nw6Rb8b+5Ipz/WfFz/MQUV3NqW6gj+wcTZJ283/A=)
                          18: _mvpzQdrT-UPeHFVLuGvqi5s8sg.roa (hash: 2qnT0PTv3mf8zPz3H6aGiUOr76hH+q7zL6DiRLrU15Y=)
                          19: en2dnDKYTzj8JiV39_-BCieoTM4.roa (hash: t2tGanJVvoRZN18O65CZXHL2kvHFCeOL9VB4L5jlOl0=)
                          20: evNnHKfdE81fV-2dA-Pl5eqaGHo.roa (hash: ywmWM1qUYAMtn//4pTN8Jv+BIv75cg5QrP0+2AUgN78=)
                          21: j9UwCmxlipTxOVkJ4tPcOkhObBg.roa (hash: TNSuDDHFWzAOl8J0VGWO14teLAdIPe7SryxmTWxtgPs=)
                          22: kOuvXCnDpTiA9udDCU-4iY-8CcM.roa (hash: gcqpXlbJSZzG6WORiT87bD6vctPSxGAC7WqcYDfGb8s=)
                          23: nBCs47rBzrSQKz6-eIcyegiDe4g.roa (hash: DKKXN9cmMjVRGS+HI+x6R9B+P7k15aRkXyGMj3g7QTQ=)
                          24: oz8WuNequXvsoaSrfyjDTnTQW3k.roa (hash: xlVm6Ij0YZyImV9HgneJ0I8dGPn1CBP8GzwgQHOUY74=)
                          25: rWYpbMjEHCEN9aKOytJ-vOYX0FM.roa (hash: 1I/9G8j84VYThsd0dTHCsgo/0XxikghX1mC9wLMt++k=)
                          26: s7If1fs88wt5UvTwMUjAybHdDyo.roa (hash: juzi9hh80WOfbwwDVrDa1fHeUNQyan4kHoDgkY/zvn0=)
                          27: uZ27zPwLhjE5BWZLO3NLV12cWgw.roa (hash: Ul7GEuNF1Gk3L7uLhyReiPLSt6uO+BwK3j2zbKIAP00=)
                          28: xu_1vuJ1Ai4m1A_TPbgHARE3j9A.roa (hash: r8L5B+cjl9zJNLUbgX20lifSmnEvuG12b/ZFYtCv7jQ=)
                          29: y1gORlfxMjjmiRqnRqP0_vdo8AM.roa (hash: mY1qaQp/3A3LYYKd1Y/STnbqtWTy7aMARdixpsDD5/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:39:de:28:0f:7e:0f:7d:c3:12:86:15:60:67:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jun 28 15:01:57 2025 GMT
            Not After : Jun 29 15:01:57 2025 GMT
        Subject: CN=89017721c2df5c3432101e5bced2996022cf38ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:44:4d:ab:05:6f:6b:76:ab:82:8f:75:59:
                    bc:e3:28:e9:a2:be:9f:79:36:01:00:b2:26:13:2b:
                    df:9b:27:cb:d0:20:c7:bf:bb:4e:dd:fd:30:d8:fb:
                    7e:4b:1e:53:18:37:7a:88:18:26:4a:25:b8:87:91:
                    f0:ad:be:1c:61:93:78:1e:e6:6c:78:f2:cc:cb:f6:
                    de:36:32:46:17:6f:66:14:c3:bc:a2:4d:d7:4e:85:
                    d8:03:1b:38:9e:ce:bb:d7:9f:70:67:fb:70:e8:c5:
                    6c:3f:35:a3:16:05:b3:57:3f:4d:23:c2:f4:cd:b3:
                    41:2e:df:52:7b:4a:99:04:16:dd:a6:c3:d7:67:ff:
                    cc:28:ea:c9:b6:13:d5:70:6d:d9:18:f8:fb:db:df:
                    94:1f:72:be:96:75:e3:78:a6:73:a8:e4:73:8b:65:
                    57:56:ac:10:aa:47:a6:71:d5:a6:b8:69:cd:e9:15:
                    33:97:66:98:4b:62:59:39:df:82:a1:ca:f4:03:7a:
                    94:06:0b:70:f6:f4:59:02:4d:55:68:b6:0e:a8:e3:
                    d3:a3:a7:f3:44:3d:d5:a6:41:cd:be:3d:d5:e9:78:
                    fc:7a:49:f4:b9:c5:d8:95:4f:81:08:8d:55:19:5b:
                    3b:00:88:a5:0c:9e:05:32:73:c2:61:c0:d3:2a:84:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:77:21:C2:DF:5C:34:32:10:1E:5B:CE:D2:99:60:22:CF:38:FF
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:b2:dd:5d:42:6c:2a:94:2c:aa:68:e4:82:85:7f:d2:df:
         29:57:e0:13:23:0b:25:5d:85:b9:4a:61:f5:c4:f0:7e:0a:af:
         de:ec:52:65:2e:32:4b:50:1b:2e:04:72:10:ec:0a:5b:ed:e4:
         6d:6d:80:f0:80:46:0f:60:16:26:65:8e:9d:94:a5:19:ea:9b:
         50:e8:df:13:8a:98:5d:ab:ba:a2:04:e0:68:43:3e:da:90:d5:
         24:4c:f1:ef:ee:d5:93:29:42:dc:89:51:ec:8f:2f:1c:63:db:
         c8:ac:4e:20:a6:05:61:d8:eb:fa:0c:30:ee:cc:75:15:f6:b1:
         3d:63:c5:cc:b4:54:b5:b1:6f:6b:5a:5b:a5:02:96:38:cc:f7:
         89:52:bf:2e:40:08:eb:33:18:81:1d:1b:78:d1:f6:c7:4a:0e:
         51:14:5e:88:e6:df:ad:9a:dd:5f:12:53:eb:14:e4:5c:49:da:
         1c:31:ca:9a:db:c2:06:3b:2d:96:20:61:e2:e1:aa:0a:46:4a:
         f5:bb:1e:1e:a1:64:be:e5:85:c2:4e:b7:5c:92:f1:2d:5a:18:
         94:7e:41:6d:ee:a6:75:20:e7:1f:1d:61:ac:ad:87:75:88:86:
         28:80:1b:7a:00:d2:ab:2c:28:2b:03:8b:e3:c0:f9:69:2d:13:
         2c:e0:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:53 2025 by rpki-client