Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          Aa9nkHpfKh5lOv/EmWzNkyfVnNpyyEN4rHbSxg5CuRM=
Subject key identifier:   FB:39:E3:61:B0:C4:FE:88:1B:B8:42:21:6A:2A:93:A3:B8:BE:53:2D
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       0198D4A7DD57414B7B2995B2333BCE3C68EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          1655
Signing time:             Sat 23 Aug 2025 02:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:27 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: 6q+Kfd0pFygTL0PcdwY4JRDUCJtCSztY9wNDR7VpPlM=)
                          9: rxtrSvmD_RFnWzieVlVkl0VvNHg.roa (hash: /miHkpCVQbdxK2uWlYSN1Ko3dggZV4gzjlL/pMNtIqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:dd:57:41:4b:7b:29:95:b2:33:3b:ce:3c:68:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Aug 23 02:00:27 2025 GMT
            Not After : Aug 24 02:00:27 2025 GMT
        Subject: CN=fb39e361b0c4fe881bb842216a2a93a3b8be532d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:98:8e:b2:f6:fb:5c:66:94:d3:22:6c:2f:
                    e5:2a:ac:20:09:25:25:8b:79:ab:72:da:de:f7:f7:
                    61:a2:cf:39:6b:54:cf:d5:14:dd:59:94:e5:90:94:
                    e8:8a:7a:2c:b4:ab:25:60:d5:81:8f:a9:ff:d7:38:
                    1b:bc:57:44:ba:c2:e7:14:ef:1f:a0:2c:eb:a2:b8:
                    2c:4a:c5:14:87:da:f0:78:5c:47:1c:99:0a:52:86:
                    a6:8b:09:c1:7d:b1:0c:14:ec:d8:b1:04:82:3f:5d:
                    1d:c2:f9:94:af:ee:68:c8:17:5b:c6:93:a2:d3:d6:
                    a5:06:0b:97:40:60:86:ee:53:83:0d:4e:d6:32:81:
                    01:b4:b6:0b:6d:6f:dc:fa:0f:18:87:af:93:52:66:
                    6b:00:de:57:a9:e6:e0:d4:39:5e:9f:df:40:8f:d3:
                    86:a4:84:7c:f1:8e:dc:eb:cf:7a:dd:5e:67:35:36:
                    19:c9:42:a0:bc:1b:04:75:46:ff:e5:ef:6d:1d:0d:
                    7b:f7:00:c5:6a:1f:08:ff:05:02:7b:28:af:74:76:
                    66:23:15:35:1d:bb:4b:86:15:62:b8:f1:6c:e6:bc:
                    c3:63:e0:9a:4d:d9:25:82:1d:b5:af:21:c0:76:fb:
                    4b:89:47:6a:1e:64:8b:27:44:69:bd:43:b6:5c:b9:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:E3:61:B0:C4:FE:88:1B:B8:42:21:6A:2A:93:A3:B8:BE:53:2D
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:37:e1:48:cf:02:84:6d:ed:fc:34:ee:b9:2f:42:0f:4c:e4:
         1e:1e:15:41:cd:bc:ba:b7:ef:d5:a4:2c:d9:c8:ad:9e:36:a5:
         1d:2e:4d:13:04:e8:d8:8f:74:a0:b7:56:1a:86:d4:a0:34:85:
         1b:e2:a1:ce:d8:81:33:21:4f:9e:4c:aa:94:b3:7c:e6:50:b0:
         6a:99:de:2d:e1:67:38:63:61:2c:36:36:8f:98:4a:df:83:59:
         80:32:e9:62:c6:a5:d5:23:5c:f9:1a:63:cf:bc:c8:d2:5c:c5:
         22:1d:37:d6:c1:e2:87:dd:23:43:33:69:8e:2b:80:fd:9b:c0:
         98:c8:cd:dc:b2:b5:3a:9d:14:c5:5c:30:b8:e4:f2:97:4b:5b:
         50:d4:60:4a:b2:58:c2:43:ba:c4:bf:5e:62:4c:3c:71:e3:c2:
         47:b1:49:09:a6:92:24:a6:96:ae:fe:ff:a4:20:b5:ec:cc:a8:
         95:b7:3a:74:b5:fd:68:5d:b7:85:e6:12:f7:95:53:14:41:2e:
         99:01:54:ef:b4:35:cf:a7:fc:95:77:ed:07:50:fd:c5:9e:35:
         d8:ad:2e:65:07:35:89:bc:14:a5:27:c5:4f:6b:c2:45:12:57:
         9e:6c:6f:ab:37:ec:e1:08:1f:97:f2:01:32:2b:63:17:05:85:
         eb:d7:9e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp91XQUt7KZWyMzvOPGjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhmYjM5ZTM2MWIwYzRmZTg4MWJiODQyMjE2YTJhOTNhM2I4YmU1MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq+YjrL2+1xmlNMibC/lKqwgCSUl
i3mrctre9/dhos85a1TP1RTdWZTlkJToinostKslYNWBj6n/1zgbvFdEusLnFO8f
oCzrorgsSsUUh9rweFxHHJkKUoamiwnBfbEMFOzYsQSCP10dwvmUr+5oyBdbxpOi
09alBguXQGCG7lODDU7WMoEBtLYLbW/c+g8Yh6+TUmZrAN5Xqebg1Dlen99Aj9OG
pIR88Y7c68963V5nNTYZyUKgvBsEdUb/5e9tHQ179wDFah8I/wUCeyivdHZmIxU1
HbtLhhViuPFs5rzDY+CaTdklgh21ryHAdvtLiUdqHmSLJ0RpvUO2XLnE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs542GwxP6IG7hCIWoqk6O4vlMtMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTfhSM8C
hG3t/DTuuS9CD0zkHh4VQc28urfv1aQs2citnjalHS5NEwTo2I90oLdWGobUoDSF
G+KhztiBMyFPnkyqlLN85lCwapneLeFnOGNhLDY2j5hK34NZgDLpYsal1SNc+Rpj
z7zI0lzFIh031sHih90jQzNpjiuA/ZvAmMjN3LK1Op0UxVwwuOTyl0tbUNRgSrJY
wkO6xL9eYkw8cePCR7FJCaaSJKaWrv7/pCC17Myolbc6dLX9aF23heYS95VTFEEu
mQFU77Q1z6f8lXftB1D9xZ412K0uZQc1ibwUpSfFT2vCRRJXnmxvqzfs4Qgfl/IB
MitjFwWF69eeUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:49 2025 by rpki-client