Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File:                     vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier:          wqdB1aNu+/sqRc2Lc5Tv8NFaRWEs9cEERXoa7TI5zSk=
Subject key identifier:   82:D0:09:C5:13:A4:5B:59:B1:DF:8C:F5:3B:09:C2:10:BE:B1:DD:52
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer:       /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial:       0198D62992412FE6640383D9F25ADFB98CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number:          1661
Signing time:             Sat 23 Aug 2025 09:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:45 +0000
Files and hashes:         1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
                          2: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: ddqkJRdJiQpH5/oz8fWkGrNKfFrQ0UHnmqc3dMYjc2Y=)
                          3: zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa (hash: p+xEHDv2mI7HSN0Md1NF4A8uiIrqEQrPGZAyc5GO4iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:92:41:2f:e6:64:03:83:d9:f2:5a:df:b9:8c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
        Validity
            Not Before: Aug 23 09:01:45 2025 GMT
            Not After : Aug 24 09:01:45 2025 GMT
        Subject: CN=82d009c513a45b59b1df8cf53b09c210beb1dd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:ae:8c:33:e9:00:70:90:f7:be:ce:24:a9:
                    df:b4:dd:9c:f5:9b:17:5f:24:6b:d7:fe:ca:ec:bb:
                    6a:b2:c5:f9:49:ca:04:26:de:8b:af:c7:d7:c2:01:
                    ca:61:7e:36:d7:26:d1:0a:1d:de:73:83:e7:79:5c:
                    13:76:11:07:99:02:1d:e6:89:3d:1c:ba:8f:12:1f:
                    dc:78:e8:d6:89:64:79:ee:2f:dd:78:5e:ec:a0:6a:
                    c7:74:f2:57:fa:e2:cb:08:97:94:f4:27:63:a2:34:
                    7f:08:a9:58:0a:97:a7:01:c7:58:6d:f3:57:5c:9c:
                    90:2c:6a:94:57:24:93:8e:2f:9e:ba:3a:70:a5:1e:
                    b9:11:d5:ed:c1:67:f2:6c:f5:8c:7f:94:2a:b6:ab:
                    6b:0e:08:da:3f:c8:bf:aa:c5:26:0d:18:54:13:c8:
                    05:b1:9b:f9:0e:e9:70:03:fc:09:f9:ff:be:ca:92:
                    83:09:b8:0e:ad:98:4c:84:ab:e5:0c:95:ac:9c:d9:
                    18:da:f0:ba:94:5f:4a:e3:41:5d:4b:52:7b:e8:03:
                    55:7c:0c:47:71:84:56:cd:6d:b8:dd:41:de:e6:bc:
                    e7:3a:10:5f:e3:8e:2b:32:25:df:9f:30:c5:c0:6e:
                    86:ff:cd:85:de:97:2e:b2:ac:8d:08:65:99:b9:1e:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:09:C5:13:A4:5B:59:B1:DF:8C:F5:3B:09:C2:10:BE:B1:DD:52
            X509v3 Authority Key Identifier:
                keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:0c:76:fa:0c:24:30:87:c4:6d:24:f6:20:02:b3:30:bc:
         23:20:a9:cb:ce:68:68:2d:c7:4c:db:e8:55:7d:fe:df:46:a7:
         aa:70:76:e6:85:5a:be:37:4b:b2:9b:25:11:d7:e1:20:a2:44:
         bc:bf:5d:6b:04:0e:8c:4b:71:03:94:2a:a6:95:4f:88:9d:1b:
         86:00:74:0b:d0:40:2f:60:e6:08:ce:2a:0f:56:c5:3d:73:a7:
         f0:97:7e:9d:c2:e7:64:7c:89:fe:60:6d:22:0a:d5:c5:08:08:
         cd:73:b8:27:83:9b:6f:00:be:2d:24:02:68:5e:0f:21:10:d7:
         08:d5:b2:dd:d1:5b:6f:46:19:b3:a9:63:68:36:33:dc:dc:dd:
         b6:a0:15:9b:ee:8c:d7:82:43:56:54:87:f5:21:5a:a0:31:98:
         de:2f:98:e8:e1:7a:0b:92:61:51:18:54:a6:7d:61:7d:61:f1:
         ea:6a:4d:e3:5d:ca:75:f6:38:af:f1:e1:05:f4:8d:c2:08:7f:
         75:4d:e0:84:d5:cd:d9:f3:fe:dd:d0:10:f6:9d:2c:c5:41:21:
         63:b7:21:ab:f3:fb:bf:de:71:09:65:47:3f:4c:e4:c8:f6:36:
         9b:b0:b2:b1:21:36:53:af:bf:e0:b2:00:ec:9c:45:3b:e4:3e:
         57:62:39:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKZJBL+ZkA4PZ8lrfuYzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjUwODIzMDkwMTQ1WhcNMjUwODI0MDkwMTQ1WjAzMTEwLwYDVQQD
Eyg4MmQwMDljNTEzYTQ1YjU5YjFkZjhjZjUzYjA5YzIxMGJlYjFkZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO+ujDPpAHCQ977OJKnftN2c9ZsX
XyRr1/7K7LtqssX5ScoEJt6Lr8fXwgHKYX421ybRCh3ec4PneVwTdhEHmQId5ok9
HLqPEh/ceOjWiWR57i/deF7soGrHdPJX+uLLCJeU9CdjojR/CKlYCpenAcdYbfNX
XJyQLGqUVySTji+eujpwpR65EdXtwWfybPWMf5QqtqtrDgjaP8i/qsUmDRhUE8gF
sZv5DulwA/wJ+f++ypKDCbgOrZhMhKvlDJWsnNkY2vC6lF9K40FdS1J76ANVfAxH
cYRWzW243UHe5rznOhBf444rMiXfnzDFwG6G/82F3pcusqyNCGWZuR4K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILQCcUTpFtZsd+M9TsJwhC+sd1SMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI8MdvoM
JDCHxG0k9iACszC8IyCpy85oaC3HTNvoVX3+30anqnB25oVavjdLspslEdfhIKJE
vL9dawQOjEtxA5QqppVPiJ0bhgB0C9BAL2DmCM4qD1bFPXOn8Jd+ncLnZHyJ/mBt
IgrVxQgIzXO4J4ObbwC+LSQCaF4PIRDXCNWy3dFbb0YZs6ljaDYz3NzdtqAVm+6M
14JDVlSH9SFaoDGY3i+Y6OF6C5JhURhUpn1hfWHx6mpN413KdfY4r/HhBfSNwgh/
dU3ghNXN2fP+3dAQ9p0sxUEhY7chq/P7v95xCWVHP0zkyPY2m7CysSE2U6+/4LIA
7JxFO+Q+V2I5qA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:03 2025 by rpki-client