Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File:                     mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier:          IJdvX5XF+yjALjZOf9fkJC8rEtdBLAcSl6sXjGx4VOs=
Subject key identifier:   8E:82:E4:6A:1E:42:A1:01:BE:67:EB:89:35:8C:A8:DF:98:75:10:48
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer:       /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial:       0198D705A742AC17EE95C96BE30516750A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 13:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:08 +0000
Files and hashes:         1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=)
                          2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: hx0P8lw5crAofqldJHnYBd8Nu//Y0CCZU6/pP1S0nBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:a7:42:ac:17:ee:95:c9:6b:e3:05:16:75:0a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
        Validity
            Not Before: Aug 23 13:02:08 2025 GMT
            Not After : Aug 24 13:02:08 2025 GMT
        Subject: CN=8e82e46a1e42a101be67eb89358ca8df98751048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:99:3b:66:25:27:f3:ed:a2:0d:7c:60:c1:
                    c4:94:2c:33:66:36:13:d3:75:a6:36:94:f2:60:57:
                    b0:c7:2d:81:d0:a1:8a:8c:02:f3:6f:e4:46:1b:b3:
                    2f:b3:13:c1:4c:9d:76:08:61:4d:c5:d1:19:fb:83:
                    95:c2:36:59:a3:e1:e0:9d:13:dc:45:ce:bf:db:7b:
                    fb:b2:b9:38:10:81:e0:5b:ef:8d:81:7c:2b:1a:cc:
                    69:4b:be:d5:17:a1:d6:44:8e:59:85:b1:94:02:00:
                    ea:a8:8b:f8:e0:4c:3f:29:12:f1:b4:45:e9:01:a3:
                    e3:78:eb:43:d8:9a:08:b7:6b:77:67:e0:47:3e:bf:
                    dc:bb:31:ba:1a:58:5f:4c:38:d6:e8:45:f5:72:34:
                    63:db:e8:4a:9f:00:44:48:3d:74:1d:4b:cb:8d:48:
                    28:ab:2e:9b:5f:07:8d:e1:95:71:96:b4:43:d3:cb:
                    63:be:0d:7d:be:fa:22:47:54:7e:43:fe:16:46:b0:
                    4a:c0:30:f2:54:0f:d7:cb:0d:3d:4a:37:83:96:4d:
                    c3:fd:e5:23:57:b2:58:94:4e:e7:5b:c3:53:32:ba:
                    a4:11:cc:81:c4:92:35:a3:fd:37:00:86:96:42:c6:
                    8c:c9:b6:89:cf:2c:9d:6c:4e:78:5c:7b:e6:37:e8:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:E4:6A:1E:42:A1:01:BE:67:EB:89:35:8C:A8:DF:98:75:10:48
            X509v3 Authority Key Identifier:
                keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:2d:92:c5:20:c8:02:59:1d:5f:5b:ca:27:1c:18:73:bd:
         94:3c:c9:1c:9b:c6:82:76:24:02:c1:f8:bd:d3:4d:d6:f2:a7:
         b3:3a:1c:fe:ac:54:95:7d:c5:31:24:76:66:d5:30:5d:4a:76:
         90:26:1f:93:98:08:1b:ed:77:0a:0a:1c:cf:53:e3:19:4b:e5:
         8f:10:02:ad:da:6e:90:bc:4c:0b:b6:d9:69:fe:de:b2:33:2a:
         ba:30:68:4d:fd:25:f1:87:45:8c:46:0c:1e:55:6b:6a:84:3c:
         60:4f:80:43:b6:e5:ca:8c:e9:af:84:af:04:aa:ff:99:9a:c5:
         c7:ac:e6:10:29:19:e4:fe:c2:cd:4e:94:61:a6:73:05:56:4b:
         36:6d:c6:8b:4d:e8:0b:88:b8:4a:ea:96:e4:f6:da:1c:37:de:
         e6:0c:66:a6:53:6b:cf:86:5e:26:1c:f2:c0:d0:c2:1a:5b:82:
         10:d3:c9:d8:3a:d3:11:78:c8:3e:c0:8e:14:d3:4b:a2:60:10:
         13:40:00:ec:c3:48:1b:d5:25:8d:16:d5:4c:a8:e9:45:90:6a:
         e9:4b:98:ae:3e:e8:35:a4:58:04:96:7e:7e:b5:bf:fc:bd:51:
         0d:c2:a8:1d:26:1e:c5:44:07:8e:2e:9b:69:79:95:48:10:91:
         80:dc:fa:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBadCrBfulclr4wUWdQphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDEzM2IzMWQ5NmIyN2MxYWY4MTgxMTRiMTY5YzlhNTc0
NWUwOTQwHhcNMjUwODIzMTMwMjA4WhcNMjUwODI0MTMwMjA4WjAzMTEwLwYDVQQD
Eyg4ZTgyZTQ2YTFlNDJhMTAxYmU2N2ViODkzNThjYThkZjk4NzUxMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDuZO2YlJ/Ptog18YMHElCwzZjYT
03WmNpTyYFewxy2B0KGKjALzb+RGG7MvsxPBTJ12CGFNxdEZ+4OVwjZZo+HgnRPc
Rc6/23v7srk4EIHgW++NgXwrGsxpS77VF6HWRI5ZhbGUAgDqqIv44Ew/KRLxtEXp
AaPjeOtD2JoIt2t3Z+BHPr/cuzG6GlhfTDjW6EX1cjRj2+hKnwBESD10HUvLjUgo
qy6bXweN4ZVxlrRD08tjvg19vvoiR1R+Q/4WRrBKwDDyVA/Xyw09SjeDlk3D/eUj
V7JYlE7nW8NTMrqkEcyBxJI1o/03AIaWQsaMybaJzyydbE54XHvmN+jZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6C5GoeQqEBvmfriTWMqN+YdRBIMB8GA1UdIwQY
MBaAFJhBM7MdlrJ8GvgYEUsWnJpXReCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEt
NzUwNjlhZTc3MzI2LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEtNzUwNjlhZTc3MzI2
LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpstksUg
yAJZHV9byiccGHO9lDzJHJvGgnYkAsH4vdNN1vKnszoc/qxUlX3FMSR2ZtUwXUp2
kCYfk5gIG+13Cgocz1PjGUvljxACrdpukLxMC7bZaf7esjMqujBoTf0l8YdFjEYM
HlVraoQ8YE+AQ7blyozpr4SvBKr/mZrFx6zmECkZ5P7CzU6UYaZzBVZLNm3Gi03o
C4i4SuqW5PbaHDfe5gxmplNrz4ZeJhzywNDCGluCENPJ2DrTEXjIPsCOFNNLomAQ
E0AA7MNIG9UljRbVTKjpRZBq6UuYrj7oNaRYBJZ+frW//L1RDcKoHSYexUQHji6b
aXmVSBCRgNz66g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:05 2025 by rpki-client