Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          b1Trn2r3LFF6u2tVQyWckk+7MaW06km+tePzxWdQO8A=
Subject key identifier:   A4:8F:C5:D2:20:48:D1:0F:D0:99:94:C2:5F:29:1E:8C:65:69:82:AA
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       019880C21730F90A709A5A6A93F7B7294F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          1203
Signing time:             Wed 06 Aug 2025 19:01:00 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:00 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:00 +0000
Files and hashes:         1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
                          2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: fVcT91lPNFNXeftebGgrUV59qFndfZhwBskbV5+0WZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:17:30:f9:0a:70:9a:5a:6a:93:f7:b7:29:4f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Aug  6 19:01:00 2025 GMT
            Not After : Aug  7 19:01:00 2025 GMT
        Subject: CN=a48fc5d22048d10fd09994c25f291e8c656982aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:fd:16:54:d6:a8:c9:e6:28:26:31:01:cf:
                    05:01:03:01:de:ab:11:a3:7d:b2:59:c5:ed:10:56:
                    d7:39:52:fc:dd:10:72:cf:24:fe:45:cd:8b:da:ff:
                    9f:1f:44:11:eb:67:c7:3b:d5:8f:5e:5f:a6:8c:a6:
                    5c:79:ea:5a:75:20:0a:65:b9:59:a8:5b:1e:34:29:
                    0c:1d:50:bb:0b:6b:79:48:64:9f:55:6b:34:a1:54:
                    aa:6b:c9:9d:ab:12:bb:ff:65:c9:23:99:95:3e:1d:
                    26:07:49:e8:d6:b3:8a:81:08:54:f7:59:47:84:20:
                    9f:e3:59:f1:9c:a1:e9:de:55:55:ee:26:49:b3:29:
                    5a:47:12:8c:12:0c:cf:b2:5b:08:87:9a:c8:f3:81:
                    a0:5f:e1:8d:d4:45:01:eb:97:14:c1:78:e5:40:56:
                    ed:ae:82:aa:8e:1c:89:dd:e9:61:81:60:87:56:c4:
                    10:07:1b:96:32:5b:29:d7:89:06:b5:39:c1:57:c5:
                    2e:70:a9:71:25:4e:ff:66:bd:88:d2:c2:95:a7:d3:
                    55:68:c0:ac:5e:d6:86:49:29:15:fa:b9:b8:7a:19:
                    8d:e8:79:dd:bf:5a:ab:9a:e1:53:22:41:8f:ac:28:
                    45:43:43:b1:5e:c7:a6:3d:9e:92:9c:59:29:4e:63:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8F:C5:D2:20:48:D1:0F:D0:99:94:C2:5F:29:1E:8C:65:69:82:AA
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:31:17:11:e6:bc:34:56:35:ef:eb:d2:e4:95:54:82:40:
         31:09:e1:0d:9a:a2:ad:42:41:0d:55:41:92:66:36:44:0c:59:
         ee:dc:15:fe:08:f5:68:97:fb:4b:2a:94:06:d4:00:86:76:ac:
         22:4f:c1:ec:8e:0d:ed:68:ad:b3:e1:e9:81:50:fd:2a:96:74:
         44:8c:07:29:55:35:6b:0b:75:71:41:07:f3:66:93:e4:a4:71:
         db:ba:60:23:a1:a7:49:d0:90:95:72:04:ca:49:ef:f6:d6:7a:
         6f:82:11:a4:2c:04:79:90:3e:c4:03:eb:39:ae:19:bc:3e:92:
         ea:7b:1c:bf:99:14:54:c6:02:32:7a:b2:30:2b:37:d8:15:08:
         9f:4e:cd:0c:98:64:a3:54:b8:b3:b2:fd:f4:3b:35:e3:ad:92:
         56:61:da:60:c7:03:e4:23:dc:e7:eb:6b:9d:7e:25:6d:eb:e1:
         f5:8b:31:95:24:63:79:61:be:e7:47:42:6f:3f:21:4a:14:b4:
         f1:cc:cd:c2:7e:fb:cc:3f:32:18:7d:c4:e9:2c:68:69:27:c8:
         46:ab:d2:f4:32:73:ff:42:23:4e:17:8a:81:a1:ac:ba:62:44:
         9a:1e:43:35:4d:3b:9f:83:d3:29:c8:31:ac:38:f9:5b:37:6d:
         e6:36:5b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwhcw+Qpwmlpqk/e3KU+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Y2Q5ZWM4ZTUzZjhmYzJhMzVlOTFiNzcwMTRmNmE3M2Q4
YjViM2QwHhcNMjUwODA2MTkwMTAwWhcNMjUwODA3MTkwMTAwWjAzMTEwLwYDVQQD
EyhhNDhmYzVkMjIwNDhkMTBmZDA5OTk0YzI1ZjI5MWU4YzY1Njk4MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp39FlTWqMnmKCYxAc8FAQMB3qsR
o32yWcXtEFbXOVL83RByzyT+Rc2L2v+fH0QR62fHO9WPXl+mjKZceepadSAKZblZ
qFseNCkMHVC7C2t5SGSfVWs0oVSqa8mdqxK7/2XJI5mVPh0mB0no1rOKgQhU91lH
hCCf41nxnKHp3lVV7iZJsylaRxKMEgzPslsIh5rI84GgX+GN1EUB65cUwXjlQFbt
roKqjhyJ3elhgWCHVsQQBxuWMlsp14kGtTnBV8UucKlxJU7/Zr2I0sKVp9NVaMCs
XtaGSSkV+rm4ehmN6Hndv1qrmuFTIkGPrChFQ0OxXsemPZ6SnFkpTmOwLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSPxdIgSNEP0JmUwl8pHoxlaYKqMB8GA1UdIwQY
MBaAFEnNnsjlP4/Co16Rt3AU9qc9i1s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMt
MmY2ZjlmODg4Mzc1LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xYjU5NjEtODRhYi00MGJlLWIwZGMtMmY2ZjlmODg4Mzc1
LzEvU2MyZXlPVV9qOEtqWHBHM2NCVDJwejJMV3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4YxFxHm
vDRWNe/r0uSVVIJAMQnhDZqirUJBDVVBkmY2RAxZ7twV/gj1aJf7SyqUBtQAhnas
Ik/B7I4N7Wits+HpgVD9KpZ0RIwHKVU1awt1cUEH82aT5KRx27pgI6GnSdCQlXIE
yknv9tZ6b4IRpCwEeZA+xAPrOa4ZvD6S6nscv5kUVMYCMnqyMCs32BUIn07NDJhk
o1S4s7L99Ds1462SVmHaYMcD5CPc5+trnX4lbevh9YsxlSRjeWG+50dCbz8hShS0
8czNwn77zD8yGH3E6SxoaSfIRqvS9DJz/0IjTheKgaGsumJEmh5DNU07n4PTKcgx
rDj5Wzdt5jZb8g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:55 2025 by rpki-client