Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          fKktR0xwlJdqqM8GTo/uBJyjD6ebdaspYpnjJq6IuWU=
Subject key identifier:   0A:BB:31:BB:50:22:12:D7:56:3A:22:2F:5E:C8:8F:18:83:00:9C:C0
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       0198D5BC4A925E5BFE4F57622B8CE51116CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:23 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:23 +0000
Files and hashes:         1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: pkVEDTgLF5LndTiTphaKmmTEknwqJJ8619FfpfAeC4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:4a:92:5e:5b:fe:4f:57:62:2b:8c:e5:11:16:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Aug 23 07:02:23 2025 GMT
            Not After : Aug 24 07:02:23 2025 GMT
        Subject: CN=0abb31bb502212d7563a222f5ec88f1883009cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:9b:37:aa:08:33:2e:f0:03:58:b4:b2:dc:
                    a7:d9:2b:f2:92:bf:84:25:4b:1e:c6:55:9e:61:14:
                    3d:3a:51:86:ce:c5:25:a3:23:6e:20:db:db:52:c2:
                    2f:69:05:2c:f3:4b:59:0d:b9:51:54:e2:0f:dd:6e:
                    5d:95:89:cb:71:63:20:ec:83:6c:df:05:2c:92:74:
                    98:c3:bb:01:06:c0:c0:24:c6:ec:e8:4c:fd:b7:81:
                    e3:37:41:dd:ab:db:e0:07:9e:94:4b:7d:19:af:b5:
                    d3:80:d4:5e:5d:28:1a:c1:8a:64:0b:64:75:14:0a:
                    ba:44:bc:83:00:01:ab:89:de:96:26:ee:af:2a:93:
                    d4:be:15:b6:c8:5c:d6:87:1c:e3:f5:db:ce:c2:0a:
                    e1:89:a9:52:4c:e4:78:bd:f6:2f:ad:fc:ec:3c:5c:
                    8d:30:97:72:3e:c3:a0:f9:3b:0b:70:53:31:20:bf:
                    28:5e:c6:f6:75:d4:cf:06:2a:4d:4d:b2:4e:7c:b4:
                    fa:80:2b:b2:78:21:9f:78:a1:18:7a:2f:c2:65:b9:
                    58:0c:b5:97:88:d7:ed:21:28:5c:02:7d:8e:dd:a4:
                    d6:cd:d0:dc:ce:c3:ad:7a:fa:18:16:7f:a7:b6:38:
                    34:fd:8a:48:4e:a8:9c:01:94:78:cc:e7:39:c8:2b:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:31:BB:50:22:12:D7:56:3A:22:2F:5E:C8:8F:18:83:00:9C:C0
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:82:82:e5:d1:dd:b3:b5:88:dc:98:ee:fc:f7:34:60:31:
         65:3c:c8:45:99:69:8d:d8:54:5f:87:52:fc:30:cd:89:e9:8d:
         82:f1:13:a1:d3:26:ce:84:e1:29:d2:ce:d4:d8:72:50:ec:0c:
         78:50:15:d6:e9:e6:2d:d4:37:36:d4:70:6f:94:23:25:2f:ef:
         0b:fb:0a:b8:7c:1c:be:1e:40:6b:ce:56:c5:d6:b7:50:63:39:
         ff:e3:5a:8c:85:fa:18:28:0a:0e:8d:00:60:bf:ef:83:a7:35:
         bc:e1:0d:7d:75:cf:c1:23:b9:cb:cb:e7:ce:aa:ff:2b:7a:10:
         20:a1:3b:12:8b:bf:18:16:e7:38:8d:c0:2a:95:5d:fb:79:b8:
         87:37:c6:3d:35:50:95:db:f6:1c:36:17:e5:2e:8c:ac:df:39:
         83:8d:3e:c2:50:3a:54:ef:d0:e0:c1:9c:35:0d:d8:bb:b6:44:
         45:f6:b2:24:5c:96:8d:e9:d6:0e:4c:11:49:31:2a:45:3a:68:
         9d:87:0d:9a:73:9e:58:12:e0:63:9d:f7:47:2d:31:a7:55:c4:
         9a:9f:98:b2:26:b6:7e:fd:47:26:e8:26:a3:56:5b:86:4b:bf:
         c7:a2:2d:7b:ea:ee:77:b8:67:d3:26:f1:b1:f6:07:cb:42:ab:
         cf:78:e0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEqSXlv+T1diK4zlERbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjUwODIzMDcwMjIzWhcNMjUwODI0MDcwMjIzWjAzMTEwLwYDVQQD
EygwYWJiMzFiYjUwMjIxMmQ3NTYzYTIyMmY1ZWM4OGYxODgzMDA5Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnymbN6oIMy7wA1i0styn2Svykr+E
JUsexlWeYRQ9OlGGzsUloyNuINvbUsIvaQUs80tZDblRVOIP3W5dlYnLcWMg7INs
3wUsknSYw7sBBsDAJMbs6Ez9t4HjN0Hdq9vgB56US30Zr7XTgNReXSgawYpkC2R1
FAq6RLyDAAGrid6WJu6vKpPUvhW2yFzWhxzj9dvOwgrhialSTOR4vfYvrfzsPFyN
MJdyPsOg+TsLcFMxIL8oXsb2ddTPBipNTbJOfLT6gCuyeCGfeKEYei/CZblYDLWX
iNftIShcAn2O3aTWzdDczsOtevoYFn+ntjg0/YpITqicAZR4zOc5yCvRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq7MbtQIhLXVjoiL17IjxiDAJzAMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUeCguXR
3bO1iNyY7vz3NGAxZTzIRZlpjdhUX4dS/DDNiemNgvETodMmzoThKdLO1NhyUOwM
eFAV1unmLdQ3NtRwb5QjJS/vC/sKuHwcvh5Aa85Wxda3UGM5/+NajIX6GCgKDo0A
YL/vg6c1vOENfXXPwSO5y8vnzqr/K3oQIKE7Eou/GBbnOI3AKpVd+3m4hzfGPTVQ
ldv2HDYX5S6MrN85g40+wlA6VO/Q4MGcNQ3Yu7ZERfayJFyWjenWDkwRSTEqRTpo
nYcNmnOeWBLgY533Ry0xp1XEmp+Ysia2fv1HJugmo1Zbhku/x6Ite+rud7hn0ybx
sfYHy0Krz3jgdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:38 2025 by rpki-client