Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          8wMziB2r+OrYVRftPNdSdUjRNokM/mpkXGN8lw3SNy0=
Subject key identifier:   2F:08:66:7C:6B:B8:14:94:E7:7A:2C:38:05:D6:EE:88:CE:D1:CE:F6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       0198D62991266FE55F60570FD94D3EDCD2B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          0620
Signing time:             Sat 23 Aug 2025 09:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:44 +0000
Files and hashes:         1: 1-HZF_Uc44gjh1TQR1U1OYZDHjCk.roa (hash: NuB8apKKsTUzor9NX4p/x2mqEfbsbGqLyBZkaxZdT4k=)
                          2: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          3: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          4: 5og4i6PWufr9z5Wjmy447BF0MnI.roa (hash: YCaN/g4v5C1rq4Auj9dFq70XUsiEkdYIlRGIBpOgVaM=)
                          5: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          6: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          7: E-OX--wIl4yh4DDHkGfJd7VLY7Q.roa (hash: OBGG4gWiM0bmPMa+RM+Y59OjANgGb0piowN5p5cOR14=)
                          8: GVP6YRET1GMrlKgZYAjt13RVqgw.roa (hash: LUthf2xa7fthu+iWne8EMO8YrNzfF2//h9ZZZBNsubE=)
                          9: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (hash: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=)
                          10: JdKnKUQgNB1Yy4H43wgibSXzdRM.roa (hash: 0S9u0egNlHyLf2o6FRzE/P+MVQvfJ9RMnLrJgBIcmds=)
                          11: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          12: RlN2uWoEv14xO_LzTk-v1HnMkwg.roa (hash: HXztpEDkMFeAncbH7mSYQ++noWePPH+qDgK3dcnLFvo=)
                          13: UUvNJu6FFXSLqc4fRNFmfzX6do4.roa (hash: ogf1Pk59UDa6YNqV7rBOlEspQEs/ksi9KO4GlYT9vmA=)
                          14: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: tq9jODJk6u+ofyNjo4Sou7yhh/XFbEUSKXiy1/KtuB8=)
                          15: YzFIZL3PJSZ02-Hz_ZVvmZ2o0mo.roa (hash: wpx/NpGphtE/UaDXkTvNHF5WvQJn9pkZZ79bW08hOCw=)
                          16: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          17: ZQYBfLxV8vPDfnvw8XXmAFRstc0.roa (hash: Ww+rZxISDrXkhwfR16jdTt8hCgrLuXUN2/XBy8eSt1s=)
                          18: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          19: arBL0brC96EPXIKY7ELOxOE6FFI.roa (hash: GkM6RZl9Pvt+iBP05ozFdhE0Bb4/KoZmxF+tQ8IzT8U=)
                          20: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          21: h8RVLRIjE4nUfJG7xmDMoxSWYdw.roa (hash: uOV3Dck8wLOYY+g9AGWYofIBGQ03hiRB3+yD9l5hJLQ=)
                          22: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          23: pSiHzZ6NNZSWDrxpjGd3n4aNM88.roa (hash: de9D5UdKP4SSxcQu2P7Wa7gGHaS0oc0Mu69Uzk4RR9Y=)
                          24: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (hash: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=)
                          25: tXkbQt37ep9cFP4X0yP6Jr01nt8.roa (hash: uFrSH0AZn8p8NoixHghgYI6yNRcf7/W9G2Rgl77UhAk=)
                          26: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          27: uEa4VCZILMCQRsys6WvXG83b7YM.roa (hash: O5aMlB/YmCcBFoGT+J12Tptzaa4UmyfnNDq0vC5SG6c=)
                          28: uKNypHxjMB6nHEN8iqFXpYLz3-k.roa (hash: fqnd1aIpIjXMZqaAstVfq0D+OvG0H0UfouvMq+wAEN8=)
                          29: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          30: wpn2zuIYSbrrxUu9itX663rnTUY.roa (hash: 2EXZnIBOHj+xi2HeAFRXs8lZBsjWZKGbNXjYDR6LDbk=)
                          31: y6XbwTdraju7epdQsvZSGSFiGc8.roa (hash: 3bnMpjdHVAigcUzJ74ejz+TADuNILoqgQcIoOR7ifkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:91:26:6f:e5:5f:60:57:0f:d9:4d:3e:dc:d2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Aug 23 09:01:44 2025 GMT
            Not After : Aug 24 09:01:44 2025 GMT
        Subject: CN=2f08667c6bb81494e77a2c3805d6ee88ced1cef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:e5:00:88:07:37:45:a0:ba:85:a8:3c:79:
                    9e:26:b9:22:f4:c0:93:d9:7a:9a:87:d1:22:fd:14:
                    df:ec:3b:52:7e:e3:f7:e1:d5:8e:cf:44:2b:ef:77:
                    98:d4:03:90:da:ff:9a:88:09:bd:30:20:b9:86:05:
                    c3:61:75:f9:ff:e3:a7:de:34:b5:00:ba:f1:f5:26:
                    fd:6b:3c:98:88:f7:dc:ab:30:59:ee:b3:76:a3:68:
                    54:e6:85:71:ad:23:a2:a6:9a:5d:7f:51:36:a5:b7:
                    fc:8f:40:8e:02:5c:fd:00:d6:ed:90:8a:6c:53:e7:
                    e4:e9:04:eb:7c:bd:ae:c7:0f:f3:9a:a4:7a:29:96:
                    5a:13:e1:62:5b:91:b5:37:f4:8f:b3:79:22:ce:02:
                    00:91:a3:ae:e1:6a:b9:d4:8a:06:39:8c:40:72:53:
                    52:fd:c7:31:0e:52:c0:8a:86:70:0b:34:dd:69:73:
                    36:18:14:c3:e9:a2:48:1b:46:b1:45:21:82:16:4c:
                    2a:7a:34:20:25:d8:80:db:ed:e3:1b:65:c7:3b:70:
                    74:6f:ae:17:2d:57:17:1f:79:da:72:76:74:7a:4d:
                    1f:c0:92:5d:4c:a7:d9:93:4d:41:17:7b:57:c3:e5:
                    9b:5c:60:85:e1:7c:b7:e1:47:cf:16:ce:49:d7:78:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:66:7C:6B:B8:14:94:E7:7A:2C:38:05:D6:EE:88:CE:D1:CE:F6
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:67:f0:50:53:9e:49:38:fc:78:84:30:75:86:75:18:76:de:
         2a:5c:fa:17:1d:7b:98:22:4a:65:ea:5c:f5:51:59:fc:e3:08:
         ea:b3:35:08:45:fe:d3:64:ab:0c:82:bc:37:c9:de:9e:c8:73:
         b0:a3:39:b8:57:8c:f7:64:b7:9d:89:6d:f6:d1:76:bc:47:64:
         a4:5b:52:bb:ae:05:e0:f1:55:7c:a3:42:ba:59:1f:91:79:cb:
         4d:de:63:14:98:20:d1:71:83:df:63:8b:0d:67:2d:47:61:07:
         35:cf:e3:96:79:b9:09:71:09:68:c8:6a:b8:22:21:01:d5:f7:
         db:f1:53:42:44:7e:64:79:79:28:4d:d6:8e:6c:9d:94:88:ae:
         1f:cb:38:b5:e9:50:1f:d1:75:ce:34:ed:0f:50:64:13:b0:a4:
         76:90:1c:5e:32:c2:3c:2f:55:86:91:5c:f5:13:2e:1e:32:f1:
         df:51:52:39:36:15:64:dc:1a:2d:37:fe:2c:89:64:db:e0:95:
         e3:c8:0b:28:22:8f:d0:43:dd:75:dc:57:c7:09:42:ec:68:d9:
         df:c2:ca:cf:88:68:7f:e6:bb:06:aa:c6:04:d0:61:6f:1e:cd:
         9f:74:6c:93:df:83:91:2e:93:bb:b1:f1:98:5f:d7:ae:d7:6b:
         91:31:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:20 2025 by rpki-client