Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File:                     iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier:          qGAbdy1xENqWDbdi+makdBHMykzMccL/j0BYBbbfRYY=
Subject key identifier:   9B:72:47:F1:7E:D0:CB:67:F7:97:19:C8:FE:20:A5:01:AC:03:59:06
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer:       /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial:       0198978155C1108B3488DBE4F965DD7BF49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number:          162B
Signing time:             Mon 11 Aug 2025 05:01:32 +0000
Manifest this update:     Mon 11 Aug 2025 05:01:32 +0000
Manifest next update:     Tue 12 Aug 2025 05:01:32 +0000
Files and hashes:         1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
                          2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
                          3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: 44lA+f/PgWJxrY1Y0YtgtNKZO7uKI9lhK2bpUXuSABE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:81:55:c1:10:8b:34:88:db:e4:f9:65:dd:7b:f4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
        Validity
            Not Before: Aug 11 05:01:32 2025 GMT
            Not After : Aug 12 05:01:32 2025 GMT
        Subject: CN=9b7247f17ed0cb67f79719c8fe20a501ac035906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:43:f2:63:af:1d:e1:aa:66:59:39:d7:cd:
                    16:08:e8:79:40:a2:98:e7:b5:80:6a:c3:53:d9:0a:
                    30:10:06:de:db:75:6d:e3:fc:94:dd:90:3b:0c:0c:
                    82:c4:87:2a:c6:58:ea:b2:7a:ee:56:bf:8d:a1:e0:
                    2e:eb:05:5a:f1:ca:b5:05:72:e6:ae:9b:d8:c6:83:
                    ef:47:63:1d:94:f0:e8:c5:4d:77:23:3c:2e:c2:1d:
                    fc:af:df:a2:11:16:8b:21:eb:dd:6d:5b:3f:58:bb:
                    31:16:38:3c:e9:b1:f8:e5:8b:b9:0b:2c:c8:0f:14:
                    4b:9b:73:8c:bd:c6:1c:36:f7:1d:ec:a9:61:a0:ba:
                    5c:9b:a1:bb:86:5c:79:8a:83:59:18:83:4f:57:4b:
                    4d:07:15:9b:7a:06:b3:43:cf:94:e8:73:3e:2b:1a:
                    2c:1d:f4:a6:e9:62:b4:8f:99:15:4f:07:6b:48:72:
                    b1:ff:73:18:42:38:40:71:57:7f:8a:58:0e:5b:d4:
                    52:40:0c:5d:c9:18:3b:3d:e7:01:b0:fa:81:f3:0a:
                    33:ba:40:e4:99:a0:14:06:8f:ea:78:db:e2:43:8e:
                    40:99:97:78:b8:eb:32:d3:9c:d0:70:67:d6:6e:3f:
                    f7:39:bb:3b:f9:f6:71:74:84:8a:bd:1a:80:c3:67:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:47:F1:7E:D0:CB:67:F7:97:19:C8:FE:20:A5:01:AC:03:59:06
            X509v3 Authority Key Identifier:
                keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:71:62:67:1d:af:92:1f:88:37:26:22:f0:13:97:ab:0a:
         cf:7f:3a:52:de:b2:61:5d:e8:a2:55:f4:58:18:a7:e8:2d:cb:
         43:34:ce:cf:9c:5d:be:40:88:fc:79:1d:10:55:cc:12:0c:b3:
         db:1f:d2:6f:68:d2:68:d7:c5:fe:ca:75:f1:13:8f:26:81:8a:
         4c:b0:05:35:cd:45:0e:c8:75:c3:62:50:b6:7a:22:d6:fc:43:
         e9:89:7d:7f:5b:6f:a8:dc:32:aa:c2:9d:5c:61:ad:6e:7d:c2:
         db:bd:f6:dd:d8:a2:16:30:b0:8e:1a:c7:23:46:f1:eb:1a:2e:
         41:8f:b4:39:b3:a8:bb:3e:39:0b:e1:12:80:39:40:81:c6:0c:
         b1:0f:65:a1:1e:e7:d5:20:0a:07:4e:7a:5e:b5:48:b1:a1:fe:
         9f:d7:d3:e1:90:af:38:8e:4b:12:24:cf:26:25:51:86:c0:94:
         23:b6:7b:51:e7:12:4f:f5:33:6f:03:7d:5d:13:66:bd:f7:87:
         e8:52:72:cf:f4:87:58:59:fd:49:5e:b1:9b:3b:8d:4a:ec:ed:
         3f:91:99:18:32:4d:29:ef:19:47:0b:04:84:cf:1f:eb:dc:83:
         93:a0:f4:8f:22:48:86:73:06:3b:96:87:86:28:6a:fc:c3:5d:
         72:49:9b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgVXBEIs0iNvk+WXde/SfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy
MWY3NzMwHhcNMjUwODExMDUwMTMyWhcNMjUwODEyMDUwMTMyWjAzMTEwLwYDVQQD
Eyg5YjcyNDdmMTdlZDBjYjY3Zjc5NzE5YzhmZTIwYTUwMWFjMDM1OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyhD8mOvHeGqZlk5180WCOh5QKKY
57WAasNT2QowEAbe23Vt4/yU3ZA7DAyCxIcqxljqsnruVr+NoeAu6wVa8cq1BXLm
rpvYxoPvR2MdlPDoxU13Izwuwh38r9+iERaLIevdbVs/WLsxFjg86bH45Yu5CyzI
DxRLm3OMvcYcNvcd7KlhoLpcm6G7hlx5ioNZGINPV0tNBxWbegazQ8+U6HM+Kxos
HfSm6WK0j5kVTwdrSHKx/3MYQjhAcVd/ilgOW9RSQAxdyRg7PecBsPqB8wozukDk
maAUBo/qeNviQ45AmZd4uOsy05zQcGfWbj/3Obs7+fZxdISKvRqAw2ddFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtyR/F+0Mtn95cZyP4gpQGsA1kGMB8GA1UdIwQY
MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt
NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2
LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka5xYmcd
r5IfiDcmIvATl6sKz386Ut6yYV3oolX0WBin6C3LQzTOz5xdvkCI/HkdEFXMEgyz
2x/Sb2jSaNfF/sp18ROPJoGKTLAFNc1FDsh1w2JQtnoi1vxD6Yl9f1tvqNwyqsKd
XGGtbn3C27323diiFjCwjhrHI0bx6xouQY+0ObOouz45C+ESgDlAgcYMsQ9loR7n
1SAKB056XrVIsaH+n9fT4ZCvOI5LEiTPJiVRhsCUI7Z7UecST/UzbwN9XRNmvfeH
6FJyz/SHWFn9SV6xmzuNSuztP5GZGDJNKe8ZRwsEhM8f69yDk6D0jyJIhnMGO5aH
hihq/MNdckmb6w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:49 2025 by rpki-client