Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          Lpp5h/0E8P2OQGsDBA7z32M/71q323gJBhw17KCkWos=
Subject key identifier:   14:FA:2B:38:F3:1D:77:0C:B3:FF:AC:D6:DE:42:FA:31:A0:87:B8:BA
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       0198D54E4DD47EC8357B2BF416E80CF0D478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 05:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:15 +0000
Files and hashes:         1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=)
                          2: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=)
                          3: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=)
                          4: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (hash: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: NwXUe/zxaH7X0h6sEMgdvSz06lDnFYwfBA+VRWQGkOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:4d:d4:7e:c8:35:7b:2b:f4:16:e8:0c:f0:d4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Aug 23 05:02:15 2025 GMT
            Not After : Aug 24 05:02:15 2025 GMT
        Subject: CN=14fa2b38f31d770cb3ffacd6de42fa31a087b8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:d0:03:10:aa:bf:20:cd:61:27:e4:e7:ba:
                    33:ca:04:09:58:c2:d7:90:60:4f:4e:22:f5:b3:6b:
                    27:2a:c1:04:61:14:5b:3b:b7:bf:c8:38:f6:ab:9d:
                    36:2c:76:89:1a:9e:98:b5:5e:1a:66:07:00:2e:62:
                    bf:52:dd:9e:4e:b4:c6:52:ff:e8:fc:82:be:d9:05:
                    f0:b3:cf:ca:24:cf:f1:71:fd:6a:47:50:76:93:27:
                    7e:cb:0d:d1:a4:9d:cf:ed:42:12:23:fd:02:c4:9a:
                    e1:59:c9:5f:9a:9f:5b:c4:2e:ba:b3:b8:a8:2a:b4:
                    d1:0c:5c:f6:31:ad:48:5e:43:48:94:d2:db:cd:db:
                    b2:e3:22:5e:78:b6:60:ad:6c:a0:82:10:0c:e1:5f:
                    ff:51:4c:48:56:8e:5a:81:b9:c8:d1:71:9f:70:5f:
                    22:e7:d0:c0:2a:de:11:1c:fa:a4:3f:79:59:63:34:
                    65:73:e5:0e:e8:eb:26:50:fa:93:f8:b4:60:65:40:
                    f4:dd:c2:8c:1b:22:c8:45:f6:8f:d4:df:d2:e2:22:
                    1b:76:3b:29:13:26:09:53:70:a9:eb:b3:81:02:8d:
                    c9:a6:dc:9a:08:b7:e5:47:73:22:85:b5:d3:e3:57:
                    a0:e5:6c:9b:a1:a9:96:22:af:d5:f0:fe:68:0a:81:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:2B:38:F3:1D:77:0C:B3:FF:AC:D6:DE:42:FA:31:A0:87:B8:BA
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:7e:9c:07:55:7f:f0:65:7d:d0:95:37:7e:56:61:1e:81:
         e1:e8:63:03:1b:b2:6d:85:92:1a:e6:f5:2f:52:9e:58:3a:6f:
         21:f3:06:6a:34:b3:ef:3a:81:ed:9e:58:54:bf:45:c7:21:f8:
         ef:fa:47:1b:13:12:c2:56:ef:1a:fb:9b:b0:28:a0:e8:25:fd:
         f8:ee:08:22:21:76:e8:05:09:7f:8c:6a:e4:36:4f:0b:a4:d8:
         e6:90:cd:e0:13:fa:f9:e1:7a:c3:4c:74:01:28:d8:66:c9:59:
         23:f3:3e:2f:fe:19:fd:c1:41:b9:be:7c:e8:79:43:f1:ed:b5:
         3b:60:ae:98:b0:24:f1:72:c2:37:24:88:b3:ab:cc:41:d8:81:
         e7:ed:74:58:3a:10:1d:75:de:c4:40:91:80:47:8a:0f:8f:0a:
         b9:7f:5a:d0:a2:ad:a2:af:3a:a9:7c:12:2b:65:f8:4f:65:80:
         4a:40:c6:ce:7b:d5:b8:61:6d:ad:d2:7b:00:ab:2e:86:a4:37:
         23:df:e2:65:88:79:e0:66:ec:4f:84:64:22:19:41:b9:a1:bd:
         11:02:dd:f1:7c:88:11:07:5f:73:a2:95:8b:2a:5c:c9:8a:fd:
         ea:a4:ca:40:86:4a:66:e7:21:b1:10:10:6f:5b:d0:6a:f6:6c:
         62:02:6f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTk3Ufsg1eyv0FugM8NR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4
MDFiYTEwHhcNMjUwODIzMDUwMjE1WhcNMjUwODI0MDUwMjE1WjAzMTEwLwYDVQQD
EygxNGZhMmIzOGYzMWQ3NzBjYjNmZmFjZDZkZTQyZmEzMWEwODdiOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3QAxCqvyDNYSfk57ozygQJWMLX
kGBPTiL1s2snKsEEYRRbO7e/yDj2q502LHaJGp6YtV4aZgcALmK/Ut2eTrTGUv/o
/IK+2QXws8/KJM/xcf1qR1B2kyd+yw3RpJ3P7UISI/0CxJrhWclfmp9bxC66s7io
KrTRDFz2Ma1IXkNIlNLbzduy4yJeeLZgrWygghAM4V//UUxIVo5agbnI0XGfcF8i
59DAKt4RHPqkP3lZYzRlc+UO6OsmUPqT+LRgZUD03cKMGyLIRfaP1N/S4iIbdjsp
EyYJU3Cp67OBAo3JptyaCLflR3MihbXT41eg5WyboamWIq/V8P5oCoFAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT6KzjzHXcMs/+s1t5C+jGgh7i6MB8GA1UdIwQY
MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt
NDVkNTQyZDVmNTVmLzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm
LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjul+nAdV
f/BlfdCVN35WYR6B4ehjAxuybYWSGub1L1KeWDpvIfMGajSz7zqB7Z5YVL9FxyH4
7/pHGxMSwlbvGvubsCig6CX9+O4IIiF26AUJf4xq5DZPC6TY5pDN4BP6+eF6w0x0
ASjYZslZI/M+L/4Z/cFBub586HlD8e21O2CumLAk8XLCNySIs6vMQdiB5+10WDoQ
HXXexECRgEeKD48KuX9a0KKtoq86qXwSK2X4T2WASkDGznvVuGFtrdJ7AKsuhqQ3
I9/iZYh54GbsT4RkIhlBuaG9EQLd8XyIEQdfc6KViypcyYr96qTKQIZKZuchsRAQ
b1vQavZsYgJvqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:47 2025 by rpki-client