Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File:                     cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier:          mbx9Ph6keFdL4SnuCqNUCaa1ftLmxRB5dF6XXTSjux4=
Subject key identifier:   BD:56:03:DB:70:51:FD:08:BB:EC:0D:39:70:9A:1B:9C:DD:9D:85:3B
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer:       /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial:       0198D8512AE28E4736DA44CD79030EA0A45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:04:14 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:14 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:14 +0000
Files and hashes:         1: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (hash: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=)
                          2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 8EXieCF08E/1iGk8hPoXXwwaMWkzgxv2/ptElOlfdos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:2a:e2:8e:47:36:da:44:cd:79:03:0e:a0:a4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
        Validity
            Not Before: Aug 23 19:04:14 2025 GMT
            Not After : Aug 24 19:04:14 2025 GMT
        Subject: CN=bd5603db7051fd08bbec0d39709a1b9cdd9d853b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:43:8c:ed:4f:04:3a:82:47:b4:c0:58:c1:
                    6a:95:61:06:b4:7e:7b:d6:0a:15:61:f4:a1:20:ff:
                    14:8f:a0:bb:30:bc:f1:af:a0:28:97:34:ab:bf:c9:
                    1f:36:ee:ea:cf:19:3a:f9:1c:16:91:99:e6:55:fa:
                    64:5d:b1:77:1e:63:2d:c5:e7:13:e2:fa:de:4f:9e:
                    e1:46:5d:40:29:f0:22:65:f2:07:49:ca:e3:87:d1:
                    ff:6d:3c:be:69:0c:da:79:c9:0b:e9:f3:fd:3a:7a:
                    c8:44:e8:11:ee:13:c7:14:d8:95:cf:81:f5:77:13:
                    2e:ef:f8:71:10:46:d8:ad:bd:9b:55:63:18:41:3a:
                    8c:cb:2e:53:73:a8:71:83:f2:2b:81:2e:a5:e3:6d:
                    81:e4:e0:e0:d1:4e:d8:c6:ea:42:bb:3d:d4:04:f1:
                    f8:20:c6:66:39:17:c1:2d:f1:99:cc:1b:ea:32:05:
                    ac:ea:92:c4:f8:88:0d:58:ee:58:ef:9f:58:0f:72:
                    55:5a:95:26:3f:f4:cc:46:a5:9b:a8:99:72:f1:a1:
                    f8:27:a8:17:ef:ca:5e:0a:9f:af:c2:d0:d7:36:28:
                    42:b4:ee:32:61:bb:04:1f:42:92:c7:d3:57:ce:eb:
                    71:b7:d8:ff:b6:03:a5:fc:f6:9a:11:49:6e:02:1f:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:03:DB:70:51:FD:08:BB:EC:0D:39:70:9A:1B:9C:DD:9D:85:3B
            X509v3 Authority Key Identifier:
                keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:65:e7:28:55:00:5b:ee:34:e0:c7:2c:98:4d:56:14:58:
         c3:af:a7:dc:c6:26:79:63:d8:9a:e2:7f:8b:40:fb:1d:1d:fa:
         59:f2:9b:44:16:17:d2:78:54:27:71:b1:05:7e:88:3e:ab:c1:
         fa:b5:aa:af:42:21:79:49:3f:6a:98:60:42:ca:51:71:f8:b0:
         0a:ff:29:58:6c:3a:88:af:3a:a6:08:f7:e8:91:e5:90:7c:08:
         40:8e:99:7c:f6:5d:1e:6b:39:f9:c1:f4:16:17:3c:60:5f:ab:
         55:e6:73:4d:cb:9d:43:61:23:15:f9:1c:8b:db:91:81:7d:7f:
         e2:ff:e0:25:b7:6f:20:15:97:33:3c:e5:94:84:3c:26:cb:bc:
         ad:17:5e:6b:c3:4e:a9:df:8c:47:9c:d3:39:84:bd:da:92:bd:
         52:b0:3b:d0:4f:4e:76:4f:72:07:65:15:4d:98:e9:4b:34:09:
         1d:ff:aa:e8:a1:f6:f3:a1:25:72:a2:01:b6:32:37:da:0f:b0:
         0a:e2:2a:41:0f:8e:cb:05:ec:b1:39:d0:97:9a:6e:27:a7:a5:
         fe:d6:95:2b:fe:60:61:c9:1a:f4:bd:c5:aa:2d:99:62:46:9d:
         1c:61:a4:5a:11:62:1e:66:3a:33:67:cb:d9:86:b6:be:59:45:
         23:2e:aa:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUSrijkc22kTNeQMOoKRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjUwODIzMTkwNDE0WhcNMjUwODI0MTkwNDE0WjAzMTEwLwYDVQQD
EyhiZDU2MDNkYjcwNTFmZDA4YmJlYzBkMzk3MDlhMWI5Y2RkOWQ4NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZDjO1PBDqCR7TAWMFqlWEGtH57
1goVYfShIP8Uj6C7MLzxr6AolzSrv8kfNu7qzxk6+RwWkZnmVfpkXbF3HmMtxecT
4vreT57hRl1AKfAiZfIHScrjh9H/bTy+aQzaeckL6fP9OnrIROgR7hPHFNiVz4H1
dxMu7/hxEEbYrb2bVWMYQTqMyy5Tc6hxg/IrgS6l422B5ODg0U7YxupCuz3UBPH4
IMZmORfBLfGZzBvqMgWs6pLE+IgNWO5Y759YD3JVWpUmP/TMRqWbqJly8aH4J6gX
78peCp+vwtDXNihCtO4yYbsEH0KSx9NXzutxt9j/tgOl/PaaEUluAh/QwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1WA9twUf0Iu+wNOXCaG5zdnYU7MB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuNl5yhV
AFvuNODHLJhNVhRYw6+n3MYmeWPYmuJ/i0D7HR36WfKbRBYX0nhUJ3GxBX6IPqvB
+rWqr0IheUk/aphgQspRcfiwCv8pWGw6iK86pgj36JHlkHwIQI6ZfPZdHms5+cH0
Fhc8YF+rVeZzTcudQ2EjFfkci9uRgX1/4v/gJbdvIBWXMzzllIQ8Jsu8rRdea8NO
qd+MR5zTOYS92pK9UrA70E9Odk9yB2UVTZjpSzQJHf+q6KH286ElcqIBtjI32g+w
CuIqQQ+OywXssTnQl5puJ6el/taVK/5gYcka9L3Fqi2ZYkadHGGkWhFiHmY6M2fL
2Ya2vllFIy6qVA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:02:37 2025 by rpki-client