Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          7gBzsZNlVMyAB69wPaAmY7aj1xdCiiR5Zma8bDEWjaw=
Subject key identifier:   34:44:AE:E2:C5:3D:5D:08:1F:74:65:AA:15:82:B8:CB:3B:2E:18:6F
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       0198D5F1B637A257687FB2EB073CF16FBDF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1665
Signing time:             Sat 23 Aug 2025 08:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:44 +0000
Files and hashes:         1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: OqsAb55NzrxCnhylDwtMPun1ukFf1wC3VH4jFahu65k=)
                          3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=)
                          4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
                          5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=)
                          6: gcGX0RK_gzGDW3EhLuEc_DmOeRw.roa (hash: eZFbzavcThmBCXfK06842GFdBQ3cFnn53xBoz77IdHs=)
                          7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:b6:37:a2:57:68:7f:b2:eb:07:3c:f1:6f:bd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Aug 23 08:00:44 2025 GMT
            Not After : Aug 24 08:00:44 2025 GMT
        Subject: CN=3444aee2c53d5d081f7465aa1582b8cb3b2e186f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:c6:b6:9f:12:7d:4c:93:93:b2:28:1d:b0:
                    27:76:1c:cd:7c:af:4a:5b:f7:c2:ce:21:23:f7:3a:
                    64:c1:6f:06:ff:e3:11:91:83:2b:da:09:f8:e8:5b:
                    cd:74:2c:90:ca:94:92:c1:48:3a:3f:f3:8a:1f:93:
                    b8:34:9f:75:5c:62:e6:af:00:9d:ec:5a:ab:40:8d:
                    c6:2a:9a:86:52:da:cb:f4:a4:e8:8e:3e:dd:fd:67:
                    47:2a:80:dc:26:33:e4:e7:8a:35:35:34:f2:a8:d3:
                    25:16:0d:67:78:af:54:43:22:1f:54:c5:b0:b7:27:
                    77:74:70:c5:39:97:8d:d6:68:9c:88:1b:42:66:98:
                    6d:41:48:67:57:54:10:d8:b4:9e:cd:82:47:67:68:
                    2a:05:94:4f:18:6a:a2:29:45:54:af:75:f6:a1:33:
                    67:0e:85:c8:5d:6f:7e:69:d3:30:39:fa:fe:20:50:
                    cd:e0:93:16:35:4c:e5:17:89:49:11:f7:ba:21:a9:
                    6e:a8:56:e2:ec:71:05:53:1b:61:22:8b:56:df:85:
                    ba:30:d1:cf:92:ac:84:e7:05:27:ec:7c:91:c8:13:
                    66:f4:bd:42:6c:18:c8:76:5f:a4:69:3e:a6:bf:78:
                    04:95:a4:c8:d3:12:0a:8a:f3:ec:72:c4:7f:9d:8a:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:AE:E2:C5:3D:5D:08:1F:74:65:AA:15:82:B8:CB:3B:2E:18:6F
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:0e:b8:7a:f6:0f:0e:ab:c9:f3:70:a3:64:91:06:f1:34:
         11:78:66:64:bf:19:74:2c:51:0b:57:ce:83:53:f5:f1:24:4b:
         90:c1:01:37:cd:a9:54:17:57:42:5a:53:bd:7d:87:73:1c:4f:
         a1:29:4f:e7:f5:2c:fd:af:a3:e1:d8:5c:ff:87:e5:63:55:b9:
         13:47:8a:61:64:cd:85:d5:83:45:2a:a8:dd:8f:4f:79:69:43:
         73:83:3d:dd:ac:1e:45:1e:1b:98:e2:ac:1f:a5:b1:7e:3b:96:
         66:48:44:45:c3:35:dc:ae:ac:6e:e4:50:cc:ac:66:45:72:86:
         4d:56:4f:30:e3:8a:f0:5e:bc:de:8f:78:f5:fe:46:32:b9:44:
         8f:f1:39:ec:b9:40:09:3f:6c:d9:27:7f:76:6a:53:f2:5c:98:
         9e:e9:8f:1d:51:15:91:2a:3f:e2:d8:5a:ed:be:d1:fb:d6:8e:
         a9:78:00:4a:79:9f:e8:68:34:06:6b:94:51:a5:f7:02:8b:3f:
         ec:6b:d8:89:1b:b7:75:c8:aa:d4:ad:58:62:2d:96:d9:d0:3e:
         aa:9e:99:28:a2:b7:25:d8:85:28:b4:e4:14:f5:e2:50:24:41:
         cc:38:9f:15:dc:58:c7:50:cc:a9:9f:30:4c:3f:83:ae:5e:0a:
         25:df:4c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8bY3oldof7LrBzzxb73wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUwODIzMDgwMDQ0WhcNMjUwODI0MDgwMDQ0WjAzMTEwLwYDVQQD
EygzNDQ0YWVlMmM1M2Q1ZDA4MWY3NDY1YWExNTgyYjhjYjNiMmUxODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLbGtp8SfUyTk7IoHbAndhzNfK9K
W/fCziEj9zpkwW8G/+MRkYMr2gn46FvNdCyQypSSwUg6P/OKH5O4NJ91XGLmrwCd
7FqrQI3GKpqGUtrL9KTojj7d/WdHKoDcJjPk54o1NTTyqNMlFg1neK9UQyIfVMWw
tyd3dHDFOZeN1miciBtCZphtQUhnV1QQ2LSezYJHZ2gqBZRPGGqiKUVUr3X2oTNn
DoXIXW9+adMwOfr+IFDN4JMWNUzlF4lJEfe6IaluqFbi7HEFUxthIotW34W6MNHP
kqyE5wUn7HyRyBNm9L1CbBjIdl+kaT6mv3gElaTI0xIKivPscsR/nYpVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDREruLFPV0IH3RlqhWCuMs7LhhvMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOMOuHr2
Dw6ryfNwo2SRBvE0EXhmZL8ZdCxRC1fOg1P18SRLkMEBN82pVBdXQlpTvX2HcxxP
oSlP5/Us/a+j4dhc/4flY1W5E0eKYWTNhdWDRSqo3Y9PeWlDc4M93aweRR4bmOKs
H6WxfjuWZkhERcM13K6sbuRQzKxmRXKGTVZPMOOK8F683o949f5GMrlEj/E57LlA
CT9s2Sd/dmpT8lyYnumPHVEVkSo/4tha7b7R+9aOqXgASnmf6Gg0BmuUUaX3Aos/
7GvYiRu3dciq1K1YYi2W2dA+qp6ZKKK3JdiFKLTkFPXiUCRBzDifFdxYx1DMqZ8w
TD+Drl4KJd9M3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:05 2025 by rpki-client