Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          9BM4/QqmKLD771AKEjyGg82+pARMBqMopHtTBNt3zYI=
Subject key identifier:   A1:90:AA:96:12:A9:CA:BB:2E:DE:D2:DA:D6:7C:2B:DB:35:56:50:59
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       0198D472B73FEC8B5CD675964419004C394D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          129A
Signing time:             Sat 23 Aug 2025 01:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:24 +0000
Files and hashes:         1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=)
                          2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=)
                          3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=)
                          4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=)
                          5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=)
                          6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 83SPMOFVW8eWacy30Y6DOKaVnjHyxY90U30CBtHxsrI=)
                          7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=)
                          8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=)
                          9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=)
                          10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:b7:3f:ec:8b:5c:d6:75:96:44:19:00:4c:39:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Aug 23 01:02:24 2025 GMT
            Not After : Aug 24 01:02:24 2025 GMT
        Subject: CN=a190aa9612a9cabb2eded2dad67c2bdb35565059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:22:e4:94:f3:52:52:bf:93:c2:f4:90:1c:
                    9c:c7:2f:f9:eb:74:00:c1:48:62:34:73:3a:92:77:
                    c1:9b:ab:ea:5b:f8:62:d5:cb:e8:e3:a6:57:fe:f8:
                    6c:9c:ab:6c:c8:16:b0:37:47:e4:d0:6a:18:bc:cc:
                    82:2d:0a:99:ed:52:2a:27:47:58:cb:59:e1:ef:ef:
                    17:e4:56:31:5f:76:2e:68:d1:bb:56:6e:6f:39:69:
                    c6:73:73:4f:57:d5:b6:6f:2e:02:f7:1e:7f:c6:51:
                    0b:6d:63:90:6c:b4:94:e9:a5:b3:71:bf:a6:55:26:
                    3c:45:bd:e7:e4:7f:e1:b6:cd:cb:12:17:a9:ca:d9:
                    6a:b9:4f:a5:91:33:99:97:e9:99:2e:10:4d:e4:6e:
                    dc:76:5e:04:e4:05:46:a6:24:2e:1a:de:5e:62:88:
                    e6:22:b2:c9:04:1d:98:52:76:f8:7d:7e:fa:21:45:
                    f4:25:83:30:40:41:81:13:4f:7f:8d:ba:b6:e2:8e:
                    1c:30:ec:ea:9d:a0:16:3e:5f:46:dc:3a:9a:b3:54:
                    a3:93:b7:16:e5:c2:2f:fa:18:8b:1c:ef:47:65:b0:
                    22:83:06:59:1d:6f:03:9e:64:7a:71:d8:bf:59:05:
                    76:f8:7c:4d:69:f5:cf:94:f6:40:ae:ba:37:a9:9f:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:AA:96:12:A9:CA:BB:2E:DE:D2:DA:D6:7C:2B:DB:35:56:50:59
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:95:d4:f5:d1:c1:d6:28:dd:e1:8b:80:7a:22:cb:02:a3:
         fc:1d:38:5d:75:05:57:c1:cc:f3:13:41:59:21:58:2e:0a:a6:
         3d:93:d6:0b:b8:bf:75:60:94:01:4c:18:01:80:0d:7a:d6:d8:
         30:84:65:b3:b9:1e:ee:65:27:40:fe:b2:8d:77:07:34:7f:0a:
         0e:bd:12:e5:51:af:67:60:6c:bb:9b:be:35:4c:47:e9:09:04:
         ab:e4:c8:52:a3:24:3e:36:49:62:87:a7:6e:45:48:3f:b6:ae:
         e9:b8:14:a5:81:cc:af:85:a2:ce:4a:6e:0d:19:7a:d7:4a:c4:
         45:4c:0d:51:6b:b4:4e:39:d6:9c:cc:88:55:fe:9f:fa:58:fa:
         69:7c:3c:6b:8b:10:4d:85:bb:34:b8:86:66:5b:7a:a6:68:d1:
         3f:4b:7e:75:e8:09:e3:b8:2e:17:11:b7:54:57:be:e6:c8:92:
         f4:fd:50:2a:18:6e:a6:07:f4:57:1d:e0:0e:7d:75:e7:d7:4a:
         39:4e:c9:fd:45:2b:6b:8d:3c:d7:07:5e:17:cb:c2:f8:d0:e4:
         dd:72:cf:c1:9d:ce:97:01:2c:12:45:5a:e4:8c:14:71:d1:9c:
         77:ff:75:e8:00:fa:48:14:f4:fa:ad:2c:04:6d:7d:68:9e:35:
         b7:c0:2f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcrc/7Itc1nWWRBkATDlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi
ZTU3Y2UwHhcNMjUwODIzMDEwMjI0WhcNMjUwODI0MDEwMjI0WjAzMTEwLwYDVQQD
EyhhMTkwYWE5NjEyYTljYWJiMmVkZWQyZGFkNjdjMmJkYjM1NTY1MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPoi5JTzUlK/k8L0kBycxy/563QA
wUhiNHM6knfBm6vqW/hi1cvo46ZX/vhsnKtsyBawN0fk0GoYvMyCLQqZ7VIqJ0dY
y1nh7+8X5FYxX3YuaNG7Vm5vOWnGc3NPV9W2by4C9x5/xlELbWOQbLSU6aWzcb+m
VSY8Rb3n5H/hts3LEhepytlquU+lkTOZl+mZLhBN5G7cdl4E5AVGpiQuGt5eYojm
IrLJBB2YUnb4fX76IUX0JYMwQEGBE09/jbq24o4cMOzqnaAWPl9G3Dqas1Sjk7cW
5cIv+hiLHO9HZbAigwZZHW8DnmR6cdi/WQV2+HxNafXPlPZArro3qZ+gawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGQqpYSqcq7Lt7S2tZ8K9s1VlBZMB8GA1UdIwQY
MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt
MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl
LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrKV1PXR
wdYo3eGLgHoiywKj/B04XXUFV8HM8xNBWSFYLgqmPZPWC7i/dWCUAUwYAYANetbY
MIRls7ke7mUnQP6yjXcHNH8KDr0S5VGvZ2Bsu5u+NUxH6QkEq+TIUqMkPjZJYoen
bkVIP7au6bgUpYHMr4WizkpuDRl610rERUwNUWu0TjnWnMyIVf6f+lj6aXw8a4sQ
TYW7NLiGZlt6pmjRP0t+degJ47guFxG3VFe+5siS9P1QKhhupgf0Vx3gDn1159dK
OU7J/UUra4081wdeF8vC+NDk3XLPwZ3OlwEsEkVa5IwUcdGcd/916AD6SBT0+q0s
BG19aJ41t8Avrw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:10 2025 by rpki-client