Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          2E9Oa4uKXmhcf1avEAH8BO3HQsutqy01RT0cnIELbHQ=
Subject key identifier:   C0:3E:82:C6:B7:22:C6:0F:CD:07:E8:22:7F:FC:7C:E0:BA:BA:C6:E2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       0198D5BC3D007C83BF1030E7C261A9742EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          167C
Signing time:             Sat 23 Aug 2025 07:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:19 +0000
Files and hashes:         1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=)
                          2: 64BuSo6QeM7L2F_aJTPA9sLOhdA.roa (hash: PMaqbn0zm5F2agi1ODk8ksX5oGo5YkM5MuQW4TQfPLY=)
                          3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=)
                          4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=)
                          5: MoOd3UbtCS1jCqfk4Eq1ESLwwHA.roa (hash: IUTY6Kac0RWR6KocRHT3FV3q0t8rT1+uiwnGYkc7UDc=)
                          6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=)
                          7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=)
                          8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=)
                          9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: AmPgD+MJjar+63Ut7KxWv8xFnAbtPrCvA3jRE5miDQo=)
                          11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=)
                          12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=)
                          13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=)
                          14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=)
                          15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=)
                          16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=)
                          17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:3d:00:7c:83:bf:10:30:e7:c2:61:a9:74:2e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Aug 23 07:02:19 2025 GMT
            Not After : Aug 24 07:02:19 2025 GMT
        Subject: CN=c03e82c6b722c60fcd07e8227ffc7ce0babac6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:17:c0:54:16:c8:95:e6:78:f1:e1:b0:b8:
                    03:5e:1c:18:d3:9b:c5:1f:09:3d:47:05:81:4f:73:
                    c4:c8:0d:95:2e:84:5c:a6:61:ed:84:13:ef:91:ce:
                    f6:69:c0:e0:12:26:2e:b1:e0:cd:ae:48:b6:87:5b:
                    88:2f:7c:50:20:ce:6a:3d:6b:1e:24:a2:45:58:37:
                    f6:ff:d3:3e:52:fe:fa:f4:02:fd:95:59:d8:1b:1a:
                    67:eb:71:5c:b5:c3:e1:09:a0:91:61:a5:17:74:ad:
                    94:b1:91:1a:7e:e2:b1:82:ef:bb:ec:16:9d:12:9d:
                    52:f4:db:42:79:9c:b6:a4:c0:25:8b:4a:79:d6:3b:
                    49:83:ee:ae:6d:af:15:8f:bb:17:56:bf:7c:0d:dd:
                    6c:26:f1:d4:7c:c3:69:b5:87:8c:27:45:93:38:f1:
                    ec:e1:34:51:52:21:43:ea:b8:98:ac:d4:41:8d:b3:
                    8b:70:da:09:79:8b:78:7a:6c:24:37:fc:32:68:89:
                    df:6a:e5:09:e5:1b:50:4a:eb:95:7e:8b:76:02:c5:
                    dc:bc:ec:e1:be:bf:ee:18:7d:9e:4e:f6:68:48:ca:
                    76:d4:ac:f7:77:3e:60:15:17:b6:8f:5f:09:7f:ae:
                    74:fd:ac:ec:43:af:4a:b1:9d:10:51:38:21:ae:92:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3E:82:C6:B7:22:C6:0F:CD:07:E8:22:7F:FC:7C:E0:BA:BA:C6:E2
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:34:fc:86:31:d2:73:1c:b7:0c:ec:8e:f2:a6:4d:6c:69:9a:
         e2:65:50:31:83:74:38:4c:f6:6c:81:95:80:f1:f0:52:4e:a3:
         69:91:21:21:a3:b7:dd:c9:d7:c3:7f:0e:a6:b1:b0:f1:0c:4d:
         49:56:2e:50:a4:8f:8d:7b:9f:7f:50:ff:21:2f:e7:71:42:7b:
         c2:33:0d:17:02:65:31:45:8a:47:25:c8:4b:58:df:3e:b4:df:
         69:2c:fa:90:15:cb:8d:f8:b3:8b:1b:88:75:93:33:1c:36:48:
         02:8d:99:03:5f:7e:4c:f8:75:c6:28:9f:fe:6b:8e:0a:76:e2:
         ce:7f:10:50:f1:d3:99:57:39:7c:ca:e1:1c:7b:a1:df:ea:3f:
         69:d0:b6:81:d7:09:37:99:99:19:62:4a:0c:c0:e3:3f:1b:15:
         80:d1:86:bf:7e:74:f1:fe:00:5f:9d:95:9e:6e:28:69:0e:83:
         36:7d:a3:4f:27:60:d4:51:5c:5f:ee:b0:78:68:50:aa:ec:08:
         59:e6:e9:d3:1f:69:f4:8d:4f:d8:ba:dc:63:5f:02:00:d1:aa:
         c7:cd:94:30:7c:ce:30:32:8e:72:a2:d1:c0:c2:df:1b:9d:2e:
         59:a0:cf:af:70:c8:ab:f6:34:62:90:64:8e:b2:f3:3e:50:99:
         d6:5a:3b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD0AfIO/EDDnwmGpdC6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwODIzMDcwMjE5WhcNMjUwODI0MDcwMjE5WjAzMTEwLwYDVQQD
EyhjMDNlODJjNmI3MjJjNjBmY2QwN2U4MjI3ZmZjN2NlMGJhYmFjNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQUXwFQWyJXmePHhsLgDXhwY05vF
Hwk9RwWBT3PEyA2VLoRcpmHthBPvkc72acDgEiYuseDNrki2h1uIL3xQIM5qPWse
JKJFWDf2/9M+Uv769AL9lVnYGxpn63FctcPhCaCRYaUXdK2UsZEafuKxgu+77Bad
Ep1S9NtCeZy2pMAli0p51jtJg+6uba8Vj7sXVr98Dd1sJvHUfMNptYeMJ0WTOPHs
4TRRUiFD6riYrNRBjbOLcNoJeYt4emwkN/wyaInfauUJ5RtQSuuVfot2AsXcvOzh
vr/uGH2eTvZoSMp21Kz3dz5gFRe2j18Jf650/azsQ69KsZ0QUTghrpJ6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA+gsa3IsYPzQfoIn/8fOC6usbiMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDT8hjHS
cxy3DOyO8qZNbGma4mVQMYN0OEz2bIGVgPHwUk6jaZEhIaO33cnXw38OprGw8QxN
SVYuUKSPjXuff1D/IS/ncUJ7wjMNFwJlMUWKRyXIS1jfPrTfaSz6kBXLjfizixuI
dZMzHDZIAo2ZA19+TPh1xiif/muOCnbizn8QUPHTmVc5fMrhHHuh3+o/adC2gdcJ
N5mZGWJKDMDjPxsVgNGGv3508f4AX52Vnm4oaQ6DNn2jTydg1FFcX+6weGhQquwI
Webp0x9p9I1P2LrcY18CANGqx82UMHzOMDKOcqLRwMLfG50uWaDPr3DIq/Y0YpBk
jrLzPlCZ1lo7XQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:27 2025 by rpki-client