Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File:                     eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier:          xDzwIHX5MtmE4aPf8rUpKA0/0/n78ooWgIGTNiKfEhI=
Subject key identifier:   59:BD:B9:96:9D:76:43:D3:4C:92:D8:61:34:0A:5C:4E:D3:B6:F6:B7
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer:       /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial:       01988B4568A9B23178F5E2BCFB56D79ED8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 20:00:38 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:38 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:38 +0000
Files and hashes:         1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
                          2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: vLzuLKICUiHxR62Av0QyD1kGtwhaAxvjHXHCkhwx8Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:68:a9:b2:31:78:f5:e2:bc:fb:56:d7:9e:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
        Validity
            Not Before: Aug  8 20:00:38 2025 GMT
            Not After : Aug  9 20:00:38 2025 GMT
        Subject: CN=59bdb9969d7643d34c92d861340a5c4ed3b6f6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:ae:4a:67:8c:d0:8b:7f:eb:20:41:d7:9e:
                    a4:fd:fd:4f:16:7e:29:1d:69:fb:5d:97:4f:64:6e:
                    38:ed:8b:78:84:7b:4b:be:77:f9:de:a6:4e:c5:7c:
                    8d:9e:67:74:f0:a7:1d:e8:85:43:b6:11:9e:dd:e0:
                    a5:cf:52:a5:bd:da:b2:99:58:74:eb:17:93:45:e7:
                    e3:e5:4f:88:0b:62:cf:9a:ca:3d:11:0a:8e:0a:cc:
                    d4:fa:29:2a:99:31:a6:31:92:d8:db:6d:1a:c4:e2:
                    c5:58:54:a3:0e:9f:e0:98:2e:b6:70:ff:f1:5d:7f:
                    00:2c:b3:6a:8d:e5:6b:ec:c5:89:10:c3:97:2c:69:
                    e3:98:1e:2c:c6:be:cd:68:bb:3d:8f:20:50:00:fa:
                    f1:fa:78:93:4d:5e:e9:71:95:82:26:77:4a:02:0e:
                    d3:cb:33:f9:8a:2c:d2:02:86:2d:fa:fe:ff:f1:e1:
                    f8:57:fd:05:40:6e:c7:46:e6:45:40:dd:d9:ae:cd:
                    02:5d:3a:7f:e0:a0:85:ed:02:fd:f9:71:57:51:a3:
                    f4:e0:06:10:4c:66:e7:01:40:4d:6d:25:57:ae:25:
                    df:48:44:05:d0:33:a7:c6:cc:1d:58:b7:0b:e7:97:
                    a3:fd:69:89:89:57:62:8f:25:70:a1:22:1a:19:75:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:B9:96:9D:76:43:D3:4C:92:D8:61:34:0A:5C:4E:D3:B6:F6:B7
            X509v3 Authority Key Identifier:
                keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0f:d8:fc:c0:e4:26:26:f9:57:42:83:b2:85:cf:ee:1d:47:
         bb:df:88:e4:f0:9b:3d:c7:63:da:be:26:4c:90:b1:3b:c6:ea:
         b6:f6:76:f1:b8:04:9d:5d:fc:22:72:8b:89:67:b4:2a:6a:ed:
         87:97:57:0e:ba:48:a9:59:15:84:95:19:90:6c:85:17:7b:b1:
         13:b7:98:fe:63:ea:cd:d6:2d:d6:5c:32:e5:a4:c3:7a:3f:35:
         5d:88:09:86:86:07:41:2f:0e:f2:94:2a:09:99:92:d9:f2:8f:
         63:14:d7:af:f5:42:f1:08:74:ac:e7:9b:3e:15:c1:27:3d:21:
         ea:cf:09:e0:0f:bc:9e:60:cb:c1:4e:fe:ad:19:4c:65:f6:49:
         07:17:52:44:6c:75:50:ab:83:81:a5:fb:d5:56:4e:b6:b9:9f:
         cc:c3:90:95:12:1c:b3:90:89:a6:81:66:93:44:b5:ac:3b:10:
         59:08:fb:f7:f6:a4:00:46:5e:82:64:30:bb:32:bd:1d:95:1c:
         ee:19:2e:cb:86:17:75:3f:9a:ab:dc:7c:8c:d8:1b:c2:2b:0c:
         3b:49:16:c4:0a:cc:ae:94:81:0c:98:a7:a3:ed:b0:b7:e4:f8:
         82:7f:ff:19:15:2d:98:67:b9:1d:04:9f:d7:99:5e:20:6b:62:
         6b:f4:1e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRWipsjF49eK8+1bXntjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi
ZjY1YjEwHhcNMjUwODA4MjAwMDM4WhcNMjUwODA5MjAwMDM4WjAzMTEwLwYDVQQD
Eyg1OWJkYjk5NjlkNzY0M2QzNGM5MmQ4NjEzNDBhNWM0ZWQzYjZmNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWOuSmeM0It/6yBB156k/f1PFn4p
HWn7XZdPZG447Yt4hHtLvnf53qZOxXyNnmd08Kcd6IVDthGe3eClz1KlvdqymVh0
6xeTRefj5U+IC2LPmso9EQqOCszU+ikqmTGmMZLY220axOLFWFSjDp/gmC62cP/x
XX8ALLNqjeVr7MWJEMOXLGnjmB4sxr7NaLs9jyBQAPrx+niTTV7pcZWCJndKAg7T
yzP5iizSAoYt+v7/8eH4V/0FQG7HRuZFQN3Zrs0CXTp/4KCF7QL9+XFXUaP04AYQ
TGbnAUBNbSVXriXfSEQF0DOnxswdWLcL55ej/WmJiVdijyVwoSIaGXVI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm9uZaddkPTTJLYYTQKXE7Ttva3MB8GA1UdIwQY
MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt
MGQ3YzUyMTU0MTgzLzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz
LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA/Y/MDk
Jib5V0KDsoXP7h1Hu9+I5PCbPcdj2r4mTJCxO8bqtvZ28bgEnV38InKLiWe0Kmrt
h5dXDrpIqVkVhJUZkGyFF3uxE7eY/mPqzdYt1lwy5aTDej81XYgJhoYHQS8O8pQq
CZmS2fKPYxTXr/VC8Qh0rOebPhXBJz0h6s8J4A+8nmDLwU7+rRlMZfZJBxdSRGx1
UKuDgaX71VZOtrmfzMOQlRIcs5CJpoFmk0S1rDsQWQj79/akAEZegmQwuzK9HZUc
7hkuy4YXdT+aq9x8jNgbwisMO0kWxArMrpSBDJino+2wt+T4gn//GRUtmGe5HQSf
15leIGtia/Qezw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:55 2025 by rpki-client