Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          3meqNR8oeZ6bP0X2hyI8C62cY5Fd9JlA1PzVz3q8Qbg=
Subject key identifier:   02:3E:6A:34:DA:92:BD:2E:E1:B8:30:92:91:34:0F:21:D2:02:2B:2B
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       0198D6298EA7026A590A9AFD2E527C6579C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          1371
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: C_sMvxHNdPmSHw93VkDtr4klUC8.roa (hash: yg9HL2scVzlwZ7UhGJik+kb1tOqaR5WAmKacXUpYiN0=)
                          2: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
                          3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          4: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: e7CmMuq1Dr84VnkA9ix4cPJ98Dm6uxW9ICKUi3P5o9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8e:a7:02:6a:59:0a:9a:fd:2e:52:7c:65:79:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=023e6a34da92bd2ee1b8309291340f21d2022b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:ab:0f:ca:a8:3c:f6:5f:69:60:8f:7e:59:
                    dd:14:fc:b2:c0:76:1a:d4:23:dd:59:7a:d1:28:03:
                    5d:a1:84:ad:dd:3f:7d:05:ca:3e:55:9f:f6:44:fd:
                    c3:bf:5a:d1:51:39:53:e4:e9:96:82:ee:af:71:ce:
                    4a:f5:17:64:88:2a:96:83:cd:ed:3d:41:bb:57:21:
                    bc:8f:ab:57:70:bf:4f:61:0f:7a:7e:65:ea:ef:9a:
                    ac:12:72:4b:97:48:e2:78:97:d2:43:eb:b7:e0:90:
                    3f:51:fe:c3:dd:6d:8b:3c:c7:5e:72:5e:d9:88:dd:
                    a7:97:4f:26:d2:54:2b:f9:f2:28:67:20:ea:49:62:
                    93:20:24:ef:26:cc:f8:a2:26:a6:bd:61:3a:36:23:
                    35:f8:28:31:94:db:58:9c:15:b6:b1:8b:46:d9:9d:
                    ef:31:9e:15:e9:b3:d6:ac:0f:55:97:07:8c:d5:11:
                    16:a3:e5:14:d9:bb:28:6c:2c:ac:49:2b:33:ee:b5:
                    34:f1:eb:1e:25:47:e0:de:e5:40:53:00:4f:e4:79:
                    a3:b5:86:c5:27:54:d6:37:68:d7:49:eb:b6:53:ea:
                    69:05:3a:23:87:dc:3b:b8:4c:18:67:61:9b:54:f2:
                    b3:c8:3e:aa:43:8e:16:e0:85:27:4b:bf:e2:32:2a:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3E:6A:34:DA:92:BD:2E:E1:B8:30:92:91:34:0F:21:D2:02:2B:2B
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:33:a4:47:3d:bf:62:8a:49:71:6a:d6:dd:c9:86:8b:b2:
         d8:0d:99:b9:1a:19:1d:b7:c3:9f:90:24:a0:b7:54:67:bb:51:
         e3:c4:28:fb:3c:78:3f:b1:8d:dc:db:e7:99:de:8f:29:b8:4b:
         70:7e:2e:10:74:f3:5d:fe:5f:10:7a:9e:8d:dd:84:4c:f2:10:
         9a:40:5a:e2:2c:70:78:71:50:d0:df:73:55:28:a8:23:0c:83:
         89:25:67:9b:1b:7b:7f:28:ea:11:a4:79:60:c8:de:6d:31:9d:
         c5:76:5b:44:65:e9:b5:a9:e8:25:42:51:8c:a0:c6:bd:1c:70:
         67:1f:98:3e:12:65:f3:46:8f:f6:8c:47:18:00:21:43:1f:b7:
         e2:1a:fd:0d:50:15:d1:af:42:8b:92:ff:36:57:e5:8b:eb:de:
         62:aa:df:60:33:bb:14:82:a0:c8:b9:13:14:03:30:62:5e:8e:
         b0:68:cc:2c:0a:78:d4:a7:c5:0b:e6:84:ae:05:4f:4c:12:26:
         d7:89:7c:46:f5:06:53:b6:26:9a:a1:2e:ec:60:6e:79:3b:25:
         ed:4f:3b:23:86:a9:62:cd:01:b2:0b:db:a1:72:c4:56:86:bf:
         8b:71:f7:43:e8:20:44:82:1f:26:3b:05:f1:73:de:9c:4d:d0:
         84:83:5e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKY6nAmpZCpr9LlJ8ZXnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjUwODIzMDkwMTQ0WhcNMjUwODI0MDkwMTQ0WjAzMTEwLwYDVQQD
EygwMjNlNmEzNGRhOTJiZDJlZTFiODMwOTI5MTM0MGYyMWQyMDIyYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdGrD8qoPPZfaWCPflndFPyywHYa
1CPdWXrRKANdoYSt3T99Bco+VZ/2RP3Dv1rRUTlT5OmWgu6vcc5K9RdkiCqWg83t
PUG7VyG8j6tXcL9PYQ96fmXq75qsEnJLl0jieJfSQ+u34JA/Uf7D3W2LPMdecl7Z
iN2nl08m0lQr+fIoZyDqSWKTICTvJsz4oiamvWE6NiM1+CgxlNtYnBW2sYtG2Z3v
MZ4V6bPWrA9VlweM1REWo+UU2bsobCysSSsz7rU08eseJUfg3uVAUwBP5HmjtYbF
J1TWN2jXSeu2U+ppBTojh9w7uEwYZ2GbVPKzyD6qQ44W4IUnS7/iMioCUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI+ajTakr0u4bgwkpE0DyHSAisrMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUIzpEc9
v2KKSXFq1t3Jhouy2A2ZuRoZHbfDn5AkoLdUZ7tR48Qo+zx4P7GN3Nvnmd6PKbhL
cH4uEHTzXf5fEHqejd2ETPIQmkBa4ixweHFQ0N9zVSioIwyDiSVnmxt7fyjqEaR5
YMjebTGdxXZbRGXptanoJUJRjKDGvRxwZx+YPhJl80aP9oxHGAAhQx+34hr9DVAV
0a9Ci5L/Nlfli+veYqrfYDO7FIKgyLkTFAMwYl6OsGjMLAp41KfFC+aErgVPTBIm
14l8RvUGU7YmmqEu7GBueTsl7U87I4apYs0BsgvboXLEVoa/i3H3Q+ggRIIfJjsF
8XPenE3QhINetA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:16 2025 by rpki-client