Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File:                     9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier:          3q4rUHz5hhPmGbEVzZ67XV7TlbafxRfOBqyylliE1H8=
Subject key identifier:   47:69:58:E8:D6:71:53:1C:66:ED:7B:8A:1A:EE:00:09:4B:45:1D:61
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer:       /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial:       0198D5159B12255D109636D5AB238AB47951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number:          1655
Signing time:             Sat 23 Aug 2025 04:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:19 +0000
Files and hashes:         1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: Jr7LfLiXQMIGBRgJUjSp2U5+FtSdxyOz7VeDLJ1kFAw=)
                          2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:9b:12:25:5d:10:96:36:d5:ab:23:8a:b4:79:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
        Validity
            Not Before: Aug 23 04:00:19 2025 GMT
            Not After : Aug 24 04:00:19 2025 GMT
        Subject: CN=476958e8d671531c66ed7b8a1aee00094b451d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:6c:f2:3a:38:34:38:04:6f:f2:57:ac:cc:
                    81:ca:9c:db:7f:61:e3:86:01:ab:4c:b2:bb:38:11:
                    1a:85:65:6f:29:2b:2a:45:73:31:36:be:37:ab:0f:
                    e9:fb:35:9c:80:aa:d1:62:d8:3c:e2:d4:74:e3:1f:
                    d6:ad:b3:3c:ea:3f:07:77:3d:ad:84:48:a0:99:f5:
                    ac:0b:92:2e:13:12:ab:dd:e2:8f:93:99:a3:36:67:
                    7a:81:51:de:31:04:43:db:1f:db:9c:30:21:c7:ca:
                    cc:7b:42:21:22:2a:b0:c1:d9:dd:60:8d:9a:b2:f8:
                    e5:be:16:98:ed:0f:2c:7b:52:e0:65:c8:af:de:4a:
                    9b:72:1d:ef:b2:5a:a1:e5:5c:3e:f3:46:3a:c9:07:
                    67:29:a7:88:d9:68:92:5c:55:7d:e3:aa:7e:8d:41:
                    05:fb:90:52:a6:3b:4a:66:8d:05:51:bd:6c:5a:08:
                    44:1e:73:54:e8:2a:4a:cc:ca:8c:5d:2d:79:23:bc:
                    b2:7c:5e:18:7b:95:04:33:60:1f:10:f5:49:f5:ad:
                    40:86:61:9c:1f:7e:b7:76:1a:b8:d2:48:92:8a:7c:
                    23:0b:d1:10:8d:a3:50:24:ca:a3:2b:77:12:eb:3b:
                    b5:37:f8:1b:17:57:aa:38:a2:9f:39:70:e3:46:f4:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:58:E8:D6:71:53:1C:66:ED:7B:8A:1A:EE:00:09:4B:45:1D:61
            X509v3 Authority Key Identifier:
                keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:91:9b:bf:81:99:4f:6f:f6:e5:11:84:93:97:72:3e:6a:
         5c:d2:67:f7:82:89:04:53:b2:a1:70:eb:34:84:d5:a5:1c:0a:
         df:c1:79:fc:12:6c:85:b6:40:99:73:ae:0a:30:42:20:f1:12:
         10:d5:6b:d2:90:7d:15:73:8b:77:ed:21:b8:ad:34:7f:0c:52:
         b5:f6:4e:fd:0c:99:36:3f:48:e0:c7:51:9c:73:40:b8:9b:b7:
         fe:4b:9a:2c:78:d0:ad:23:18:05:46:d8:21:99:39:13:9a:cc:
         49:06:50:84:33:9a:87:0e:4f:84:a0:fe:53:9f:e5:be:d3:23:
         96:a7:4e:23:0b:e0:bd:1f:83:fb:41:34:84:73:be:3e:11:67:
         1d:7d:34:29:d7:f1:f8:06:65:dc:8d:6c:31:52:7f:f0:21:5d:
         f3:48:8b:40:e1:0c:fe:7f:3f:36:87:10:60:48:4b:6c:6a:25:
         35:6e:61:ba:72:a1:7f:79:c7:11:38:cf:02:4f:e5:01:f6:53:
         61:93:51:87:a2:93:7b:08:c0:9f:61:fc:46:6e:9d:9d:44:14:
         f9:08:e7:c3:9f:32:d2:63:cf:cc:c9:76:7a:fe:c7:96:02:85:
         fb:c9:30:8c:4d:f1:4a:da:a6:ac:5f:ae:63:db:67:81:91:06:
         0b:5d:b9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZsSJV0QljbVqyOKtHlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz
YzJhOWYwHhcNMjUwODIzMDQwMDE5WhcNMjUwODI0MDQwMDE5WjAzMTEwLwYDVQQD
Eyg0NzY5NThlOGQ2NzE1MzFjNjZlZDdiOGExYWVlMDAwOTRiNDUxZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZFs8jo4NDgEb/JXrMyBypzbf2Hj
hgGrTLK7OBEahWVvKSsqRXMxNr43qw/p+zWcgKrRYtg84tR04x/WrbM86j8Hdz2t
hEigmfWsC5IuExKr3eKPk5mjNmd6gVHeMQRD2x/bnDAhx8rMe0IhIiqwwdndYI2a
svjlvhaY7Q8se1LgZciv3kqbch3vslqh5Vw+80Y6yQdnKaeI2WiSXFV946p+jUEF
+5BSpjtKZo0FUb1sWghEHnNU6CpKzMqMXS15I7yyfF4Ye5UEM2AfEPVJ9a1AhmGc
H363dhq40kiSinwjC9EQjaNQJMqjK3cS6zu1N/gbF1eqOKKfOXDjRvROlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdpWOjWcVMcZu17ihruAAlLRR1hMB8GA1UdIwQY
MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt
Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2
LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQeRm7+B
mU9v9uURhJOXcj5qXNJn94KJBFOyoXDrNITVpRwK38F5/BJshbZAmXOuCjBCIPES
ENVr0pB9FXOLd+0huK00fwxStfZO/QyZNj9I4MdRnHNAuJu3/kuaLHjQrSMYBUbY
IZk5E5rMSQZQhDOahw5PhKD+U5/lvtMjlqdOIwvgvR+D+0E0hHO+PhFnHX00Kdfx
+AZl3I1sMVJ/8CFd80iLQOEM/n8/NocQYEhLbGolNW5hunKhf3nHETjPAk/lAfZT
YZNRh6KTewjAn2H8Rm6dnUQU+Qjnw58y0mPPzMl2ev7HlgKF+8kwjE3xStqmrF+u
Y9tngZEGC125jQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:38 2025 by rpki-client