Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          ZbaBzYXOvvEN7FsW+2eyNii4EbbWHLzVtnMvc7yKR4o=
Subject key identifier:   28:78:53:CA:D2:29:C1:BF:42:C3:BC:11:14:A4:71:6A:35:F5:C0:D4
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       0198D4E004A515031FE7BC85D12832C60F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:47 +0000
Files and hashes:         1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: hFUAcsyKInrMzDbjUM5HX2WUUwjDftqIW3qak2uVTqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:04:a5:15:03:1f:e7:bc:85:d1:28:32:c6:0f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Aug 23 03:01:47 2025 GMT
            Not After : Aug 24 03:01:47 2025 GMT
        Subject: CN=287853cad229c1bf42c3bc1114a4716a35f5c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:2c:67:f7:46:e3:3e:52:54:43:27:29:b5:
                    c3:da:41:d3:fb:aa:b5:c3:f7:0f:50:10:c9:ab:1b:
                    b5:68:ca:22:d6:37:2a:95:07:84:1a:23:b1:f3:75:
                    aa:53:5e:28:16:e7:b1:da:bb:67:c2:2f:73:a8:e9:
                    60:0b:fc:98:b5:0a:84:cf:63:58:e3:96:e4:6c:40:
                    ab:d3:53:7f:12:58:c2:33:0a:f2:d8:14:08:ed:02:
                    eb:8f:31:a1:a8:54:5a:42:34:2a:71:8e:7f:61:62:
                    de:b4:1e:f0:72:ec:b1:f6:8c:8f:ae:1f:2e:6e:ba:
                    a2:00:aa:7d:7c:81:1e:ca:78:95:a4:7a:24:82:a1:
                    dc:73:26:eb:40:7e:ba:d6:98:85:f7:37:31:9e:fc:
                    73:27:df:da:64:6c:91:cb:f0:06:c3:71:84:a9:03:
                    44:93:dd:8a:5c:91:7b:34:4b:fd:4e:06:9b:89:f0:
                    d2:54:f0:e8:70:8c:7a:58:18:0b:79:5a:3a:0d:28:
                    37:1b:08:5a:46:f9:1f:48:f5:d1:e9:8b:43:75:71:
                    96:e7:ad:17:d6:b9:9d:68:79:e7:8f:3d:92:cd:44:
                    4d:3f:52:b2:06:c9:a6:93:0e:41:2b:cf:50:1d:4e:
                    4b:8a:22:9e:e9:f0:fc:ca:ee:a2:b3:24:2d:af:67:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:53:CA:D2:29:C1:BF:42:C3:BC:11:14:A4:71:6A:35:F5:C0:D4
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:c7:bf:ac:c4:69:72:0a:ab:ef:fd:59:bb:ed:1c:ef:f3:
         46:2f:cf:27:fe:9b:5e:7e:09:ce:4e:40:7f:51:42:5f:09:26:
         5b:24:72:6f:31:bd:13:3e:dc:bb:8e:4a:1a:65:35:92:04:7e:
         c5:8b:2b:19:cf:ae:45:ee:72:5d:42:25:66:47:9e:bd:9e:4d:
         b1:20:0a:a9:82:8f:c3:e1:96:fa:34:3f:ed:6f:c5:2a:01:10:
         b0:41:f2:a7:ad:f3:a5:f2:6e:e4:62:93:9e:de:7b:d3:0b:c3:
         4a:19:33:9b:23:98:86:a8:45:90:1b:1f:69:d4:db:35:6c:65:
         14:18:92:9b:8a:ab:56:f7:da:da:dc:bd:87:93:e3:43:98:c3:
         71:c4:39:74:09:0b:7b:2f:fb:dd:5c:77:4e:1a:75:4e:e2:5c:
         f9:c7:12:65:11:fa:f5:fc:3d:5d:fd:31:83:89:03:81:2e:ab:
         df:cd:ff:ea:f1:17:51:b6:21:87:46:95:44:67:6f:92:64:fc:
         24:bc:a2:a0:86:56:f0:0d:c8:12:d7:46:41:51:91:d5:48:0c:
         aa:f0:67:87:a5:42:7e:70:91:00:03:77:12:e2:17:79:9c:6f:
         44:9b:69:2e:6a:ea:85:0e:9f:c4:57:bc:77:55:54:3e:3f:f8:
         0c:67:9d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ASlFQMf57yF0Sgyxg8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk
ODhjMjQwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
EygyODc4NTNjYWQyMjljMWJmNDJjM2JjMTExNGE0NzE2YTM1ZjVjMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wYsZ/dG4z5SVEMnKbXD2kHT+6q1
w/cPUBDJqxu1aMoi1jcqlQeEGiOx83WqU14oFuex2rtnwi9zqOlgC/yYtQqEz2NY
45bkbECr01N/EljCMwry2BQI7QLrjzGhqFRaQjQqcY5/YWLetB7wcuyx9oyPrh8u
brqiAKp9fIEeyniVpHokgqHccybrQH661piF9zcxnvxzJ9/aZGyRy/AGw3GEqQNE
k92KXJF7NEv9TgabifDSVPDocIx6WBgLeVo6DSg3GwhaRvkfSPXR6YtDdXGW560X
1rmdaHnnjz2SzURNP1KyBsmmkw5BK89QHU5LiiKe6fD8yu6isyQtr2f7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh4U8rSKcG/QsO8ERSkcWo19cDUMB8GA1UdIwQY
MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt
NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz
LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDvHv6zE
aXIKq+/9WbvtHO/zRi/PJ/6bXn4Jzk5Af1FCXwkmWyRybzG9Ez7cu45KGmU1kgR+
xYsrGc+uRe5yXUIlZkeevZ5NsSAKqYKPw+GW+jQ/7W/FKgEQsEHyp63zpfJu5GKT
nt570wvDShkzmyOYhqhFkBsfadTbNWxlFBiSm4qrVvfa2ty9h5PjQ5jDccQ5dAkL
ey/73Vx3Thp1TuJc+ccSZRH69fw9Xf0xg4kDgS6r383/6vEXUbYhh0aVRGdvkmT8
JLyioIZW8A3IEtdGQVGR1UgMqvBnh6VCfnCRAAN3EuIXeZxvRJtpLmrqhQ6fxFe8
d1VUPj/4DGedwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:38 2025 by rpki-client