Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          KD8lwDZdpWK0mQMtyo/X/pmrjbs6zodUm3RuCoRcvcs=
Subject key identifier:   56:26:FB:89:B7:3C:77:0A:0A:A1:E3:DA:65:3E:61:08:FA:FA:C2:59
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019874BD90956E11BA240AB28821379AA60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 11:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:36 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: CStdvdpc9+Y8rStEaKOrm+/wlsFO84qdQ1RD1UxIV14=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=)
                          5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:90:95:6e:11:ba:24:0a:b2:88:21:37:9a:a6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Aug  4 11:00:36 2025 GMT
            Not After : Aug  5 11:00:36 2025 GMT
        Subject: CN=5626fb89b73c770a0aa1e3da653e6108fafac259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:4e:8d:2e:f6:95:6f:28:21:42:33:32:00:
                    7f:1c:c9:5a:29:22:47:4b:a9:be:ca:6e:e9:b8:ea:
                    58:38:fb:06:87:e8:78:fb:e8:52:49:af:30:ea:34:
                    35:3b:89:62:e2:5b:8c:17:df:f1:13:9f:fe:44:0c:
                    f7:f8:79:20:14:48:3b:3d:83:94:0f:79:bc:ee:0e:
                    0b:36:51:db:83:7f:5b:45:17:61:53:1f:94:f3:80:
                    64:ff:57:01:7e:35:24:45:e3:d4:06:57:6a:02:f2:
                    4c:17:55:70:fd:f8:63:d8:85:56:94:52:e2:a3:d6:
                    22:0c:18:58:b5:1f:d2:e9:d4:42:6d:9e:b7:7e:1b:
                    00:28:94:22:bb:f6:d9:a5:be:05:e6:e0:39:93:9f:
                    33:26:ce:62:83:e7:a2:28:4b:21:0f:9a:fc:63:7e:
                    2c:5f:27:73:b2:8a:a8:1b:66:3e:74:48:16:74:b3:
                    2e:85:44:18:65:30:3e:0d:b1:64:93:97:90:03:98:
                    73:da:cf:9f:d4:be:fa:a2:92:1d:9b:40:90:a4:0c:
                    4c:9d:51:0d:21:cc:29:fd:c9:15:8f:2a:fe:a0:07:
                    63:91:80:c7:e5:7a:50:12:69:e2:a7:4b:44:18:07:
                    fc:ed:9c:ae:5c:77:2a:6a:04:b2:c4:1d:c3:f9:76:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:FB:89:B7:3C:77:0A:0A:A1:E3:DA:65:3E:61:08:FA:FA:C2:59
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:a8:2f:86:db:0a:3a:e5:c0:39:93:03:ba:e6:9a:4b:63:
         82:3e:9e:13:0f:72:95:61:6d:ba:22:ac:42:b0:63:9b:93:25:
         5c:0a:d6:42:e6:a1:ac:2c:45:5b:dc:55:8f:f3:ad:e6:3a:b7:
         1e:33:e2:8c:49:01:4b:39:46:e3:4f:07:22:47:f5:59:e0:a8:
         76:59:61:6c:6d:dd:a1:09:5d:00:74:a1:81:38:13:80:50:05:
         cb:c6:b0:03:37:89:dd:b5:28:ce:15:96:b1:bc:9f:23:04:3d:
         5c:53:ac:c6:74:2e:8b:1d:39:1a:75:6b:56:eb:8f:25:ed:35:
         11:7b:02:8c:bb:15:f6:c6:3c:84:e3:d6:f2:f6:67:cf:6b:0b:
         e9:3d:3d:b2:39:31:d6:b2:f9:53:17:7f:2a:71:e4:78:fd:bd:
         b6:2b:6a:d4:e4:a8:b1:78:e1:c0:6b:c5:ec:50:d6:7b:79:5a:
         15:4e:07:e5:1f:18:4b:69:d4:c1:8b:34:ae:3f:73:bb:6b:ad:
         b2:1c:9f:dc:03:42:a9:65:35:39:20:fa:4d:2f:b5:ec:1b:86:
         76:b2:32:c5:b3:79:9b:41:70:bc:40:2c:72:2e:6d:63:86:77:
         4b:11:6f:b7:0c:23:fb:db:44:c4:d3:02:26:4a:1e:8c:e8:07:
         1d:d3:c2:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vZCVbhG6JAqyiCE3mqYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx
MjcwYmEwHhcNMjUwODA0MTEwMDM2WhcNMjUwODA1MTEwMDM2WjAzMTEwLwYDVQQD
Eyg1NjI2ZmI4OWI3M2M3NzBhMGFhMWUzZGE2NTNlNjEwOGZhZmFjMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3NOjS72lW8oIUIzMgB/HMlaKSJH
S6m+ym7puOpYOPsGh+h4++hSSa8w6jQ1O4li4luMF9/xE5/+RAz3+HkgFEg7PYOU
D3m87g4LNlHbg39bRRdhUx+U84Bk/1cBfjUkRePUBldqAvJMF1Vw/fhj2IVWlFLi
o9YiDBhYtR/S6dRCbZ63fhsAKJQiu/bZpb4F5uA5k58zJs5ig+eiKEshD5r8Y34s
XydzsoqoG2Y+dEgWdLMuhUQYZTA+DbFkk5eQA5hz2s+f1L76opIdm0CQpAxMnVEN
Icwp/ckVjyr+oAdjkYDH5XpQEmnip0tEGAf87ZyuXHcqagSyxB3D+XYJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYm+4m3PHcKCqHj2mU+YQj6+sJZMB8GA1UdIwQY
MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt
ZGE4NTFhNzE1ZmE0LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0
LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTuoL4bb
CjrlwDmTA7rmmktjgj6eEw9ylWFtuiKsQrBjm5MlXArWQuahrCxFW9xVj/Ot5jq3
HjPijEkBSzlG408HIkf1WeCodllhbG3doQldAHShgTgTgFAFy8awAzeJ3bUozhWW
sbyfIwQ9XFOsxnQuix05GnVrVuuPJe01EXsCjLsV9sY8hOPW8vZnz2sL6T09sjkx
1rL5Uxd/KnHkeP29titq1OSosXjhwGvF7FDWe3laFU4H5R8YS2nUwYs0rj9zu2ut
shyf3ANCqWU1OSD6TS+17BuGdrIyxbN5m0FwvEAsci5tY4Z3SxFvtwwj+9tExNMC
JkoejOgHHdPCOA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:27 2025 by rpki-client