Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File:                     T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier:          PKpka68F+k/frONU9Ijh5ckGxP/QQciL8jXY/fzX2bg=
Subject key identifier:   D2:EE:2A:44:A3:52:A1:F5:11:54:3A:AE:88:D3:02:6F:0A:F8:59:AC
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer:       /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial:       0198D5BBBB6CB99D0A66A4F8067174B297C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:46 +0000
Files and hashes:         1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
                          2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: w2qcp28toOiU79nFjG4dKeYnx+VJ7ygoFN6pUIG6kqE=)
                          3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:bb:6c:b9:9d:0a:66:a4:f8:06:71:74:b2:97:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
        Validity
            Not Before: Aug 23 07:01:46 2025 GMT
            Not After : Aug 24 07:01:46 2025 GMT
        Subject: CN=d2ee2a44a352a1f511543aae88d3026f0af859ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9c:19:b6:53:e9:25:4e:c6:99:88:0b:ec:8f:
                    1a:05:42:e1:42:85:80:15:49:7f:05:2c:80:59:89:
                    a1:d9:62:69:8f:12:46:b0:06:6d:0f:f3:3e:2a:59:
                    da:86:e1:99:23:8e:30:12:42:81:24:4b:ee:cf:0e:
                    75:b6:df:d7:68:3b:bb:57:13:08:13:83:65:4d:e8:
                    96:0e:d8:ca:25:df:f1:57:4f:10:a6:ff:80:15:d5:
                    a7:d3:43:49:dc:7f:51:b4:ef:7c:e5:67:29:4b:29:
                    b4:f8:f4:7e:44:d1:fa:46:c7:dc:b4:6b:2b:e1:63:
                    5a:a5:7c:cb:eb:d6:1e:05:7f:ed:ff:0f:ca:89:8e:
                    ed:22:c7:bc:a8:ae:d0:0e:dc:59:e3:8f:57:7f:ab:
                    c2:9d:04:37:b7:47:a3:ae:94:9e:0a:92:10:b6:23:
                    88:dc:0a:50:16:6a:af:96:0b:e0:c9:a0:56:12:cb:
                    05:5b:c9:87:04:b6:5a:d2:9a:50:1c:ba:25:7d:e9:
                    49:cc:b9:fc:8d:7f:dc:a0:49:1c:36:55:0d:60:fa:
                    e7:e0:c2:42:dc:7f:d9:4f:c6:30:ff:39:50:80:bb:
                    df:a8:c9:27:d6:de:0b:05:69:8a:37:b9:35:c7:c4:
                    97:a9:b8:68:04:8a:b1:db:90:52:1b:e7:b4:bb:63:
                    af:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:2A:44:A3:52:A1:F5:11:54:3A:AE:88:D3:02:6F:0A:F8:59:AC
            X509v3 Authority Key Identifier:
                keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:ce:53:97:50:24:ae:63:89:62:83:f0:ec:a7:ac:83:a5:
         e3:93:5c:ee:e0:ed:ef:84:4b:81:de:1d:fa:d3:0a:55:46:00:
         82:4a:79:97:50:06:84:e0:20:c9:21:57:56:4b:ec:cf:1e:17:
         0e:60:f3:59:fb:cd:47:35:2d:76:d8:49:0f:94:b6:f6:62:d7:
         ab:1c:1f:7d:88:f8:f0:ab:cc:53:8f:5f:08:69:cd:98:65:49:
         9e:d8:91:cd:78:b3:4a:8f:9f:cf:f5:4b:5e:44:37:e7:21:38:
         2e:69:9e:67:33:ff:29:63:43:30:47:9b:0c:55:c8:f7:f8:b9:
         cb:30:f1:a2:8e:87:8e:9e:c0:d1:09:7b:f2:37:a0:d5:35:98:
         ba:7d:f8:8c:b6:d0:02:ae:26:51:c2:0b:b7:02:3e:eb:cb:d1:
         37:a6:fa:d2:16:7e:36:e5:be:40:a2:ca:41:a2:23:3c:1f:ef:
         70:9d:7c:e2:74:22:8d:dc:0d:25:44:80:01:85:d4:f6:2b:bc:
         85:19:18:42:f8:6d:4e:39:5c:8b:67:2f:ab:d9:eb:21:57:de:
         3e:0b:28:17:be:73:72:e3:9a:22:2c:dd:ec:7f:0f:55:68:d4:
         ef:4b:a9:2c:6a:b4:a2:70:e3:d4:2f:90:69:4f:8a:35:1f:06:
         fa:26:e8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7tsuZ0KZqT4BnF0spfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY2NDZjOTNjMjk3NDc4OWVjZWY3YjQ0NDY1NmVlNjQx
NjE3MjkwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
EyhkMmVlMmE0NGEzNTJhMWY1MTE1NDNhYWU4OGQzMDI2ZjBhZjg1OWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pwZtlPpJU7GmYgL7I8aBULhQoWA
FUl/BSyAWYmh2WJpjxJGsAZtD/M+KlnahuGZI44wEkKBJEvuzw51tt/XaDu7VxMI
E4NlTeiWDtjKJd/xV08Qpv+AFdWn00NJ3H9RtO985WcpSym0+PR+RNH6RsfctGsr
4WNapXzL69YeBX/t/w/KiY7tIse8qK7QDtxZ449Xf6vCnQQ3t0ejrpSeCpIQtiOI
3ApQFmqvlgvgyaBWEssFW8mHBLZa0ppQHLolfelJzLn8jX/coEkcNlUNYPrn4MJC
3H/ZT8Yw/zlQgLvfqMkn1t4LBWmKN7k1x8SXqbhoBIqx25BSG+e0u2OvgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLuKkSjUqH1EVQ6rojTAm8K+FmsMB8GA1UdIwQY
MBaAFE/WZGyTwpdHiezve0RGVu5kFhcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEt
NzZhNTM4NWM1MTVhLzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEtNzZhNTM4NWM1MTVh
LzEvVDlaa2JKUENsMGVKN085N1JFWlc3bVFXRnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjjOU5dQ
JK5jiWKD8OynrIOl45Nc7uDt74RLgd4d+tMKVUYAgkp5l1AGhOAgySFXVkvszx4X
DmDzWfvNRzUtdthJD5S29mLXqxwffYj48KvMU49fCGnNmGVJntiRzXizSo+fz/VL
XkQ35yE4LmmeZzP/KWNDMEebDFXI9/i5yzDxoo6Hjp7A0Ql78jeg1TWYun34jLbQ
Aq4mUcILtwI+68vRN6b60hZ+NuW+QKLKQaIjPB/vcJ184nQijdwNJUSAAYXU9iu8
hRkYQvhtTjlci2cvq9nrIVfePgsoF75zcuOaIizd7H8PVWjU70upLGq0onDj1C+Q
aU+KNR8G+iboZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:07 2025 by rpki-client