Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          js6N6hLDAwa8qGkjQpUdNqPZsg9V0+W1STmZTaqtNZI=
Subject key identifier:   2D:BE:1A:9B:21:38:3E:8D:8B:5F:6B:5A:CA:96:13:68:2E:A6:E9:44
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       01988F225C8936D6E5EB62155E763927D617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 14:00:50 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:50 +0000
Manifest next update:     Sun 10 Aug 2025 14:00:50 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: vt3wOI8J4XrBK8tvaSgJOqItFKDLICPmDr+pk3z8+eQ=)
                          2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:22:5c:89:36:d6:e5:eb:62:15:5e:76:39:27:d6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Aug  9 14:00:50 2025 GMT
            Not After : Aug 10 14:00:50 2025 GMT
        Subject: CN=2dbe1a9b21383e8d8b5f6b5aca9613682ea6e944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:62:73:d9:63:82:de:d8:2a:f2:d9:51:87:
                    7f:fb:de:57:29:c8:4d:14:bc:7c:9d:e4:65:d1:4a:
                    2c:98:6d:2b:be:80:b9:5a:c2:f3:eb:f2:66:40:78:
                    a7:b5:7f:61:78:6a:39:9d:22:49:b2:14:5e:76:df:
                    1a:f6:8d:be:8b:33:65:6e:62:c5:22:5d:e5:38:cf:
                    89:8c:b2:21:c1:5c:a8:05:4b:b4:d7:78:ac:00:47:
                    c9:39:a9:aa:f9:b1:dd:cb:58:09:60:6b:3f:f9:01:
                    bd:8c:05:a2:8e:84:2a:78:7d:4f:91:0f:22:d2:bc:
                    26:0a:2f:10:93:63:3a:ee:64:9c:bb:a9:ed:33:2c:
                    1f:46:c1:95:95:60:04:84:b9:ee:08:b3:81:bf:07:
                    55:5a:d5:5b:6e:e8:06:2f:75:85:b7:2d:e8:5b:8d:
                    1a:99:e1:8f:3a:0c:99:3a:e4:77:6e:02:f8:bf:d8:
                    9e:3e:e8:a9:c4:ee:cf:e3:fc:3a:4e:33:85:0c:69:
                    8c:38:93:b3:ef:8b:e6:fa:04:a3:fe:65:59:55:ac:
                    9c:95:89:db:2b:3e:f1:83:dd:f1:1c:08:25:f9:cc:
                    14:de:11:40:67:44:14:7f:d1:c1:d4:97:ba:7a:c4:
                    20:36:fd:43:cb:9d:f0:f3:02:60:e7:7a:2d:3a:79:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:1A:9B:21:38:3E:8D:8B:5F:6B:5A:CA:96:13:68:2E:A6:E9:44
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:5c:d1:57:57:30:bf:73:b9:e4:10:1a:b2:5c:08:89:2b:
         3d:b0:bc:75:93:3e:8e:6d:42:2c:10:77:2d:36:71:0d:1e:b2:
         26:96:ac:d5:a7:d5:99:db:d0:40:b5:66:7b:26:51:00:2b:88:
         81:b6:dc:1f:25:30:3e:8c:b5:5c:06:08:ce:29:90:d3:2d:40:
         e0:2f:ab:a3:19:7d:15:5d:56:83:88:2e:43:77:ba:2c:d3:7c:
         4b:99:5c:58:e8:08:f7:f8:0a:de:69:f5:22:5f:00:b8:37:a9:
         6d:6b:19:d7:f5:51:2f:8d:69:6d:72:4b:98:0d:81:2e:b3:30:
         5f:fc:83:fa:e3:62:a3:d2:46:4d:3c:af:f9:f8:dc:ff:fa:d1:
         a1:00:6e:17:51:28:04:56:f2:44:16:d1:b1:aa:0e:d8:1b:44:
         04:05:85:13:1a:5f:2f:05:b6:4d:69:31:8c:ec:76:be:a1:28:
         58:57:1f:3b:33:85:8a:7d:ef:cd:17:ca:3d:2a:43:f9:9a:ff:
         40:57:5a:c2:26:b8:a5:2e:58:64:9c:17:0e:bd:75:f9:d4:3f:
         86:bb:1e:1c:df:6b:05:41:0b:af:33:bc:91:2e:b6:3b:9d:0d:
         0e:00:b2:12:fa:5a:30:28:cc:b4:69:53:90:25:7f:bb:c3:c4:
         d8:4c:e6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPIlyJNtbl62IVXnY5J9YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjUwODA5MTQwMDUwWhcNMjUwODEwMTQwMDUwWjAzMTEwLwYDVQQD
EygyZGJlMWE5YjIxMzgzZThkOGI1ZjZiNWFjYTk2MTM2ODJlYTZlOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oxic9ljgt7YKvLZUYd/+95XKchN
FLx8neRl0UosmG0rvoC5WsLz6/JmQHintX9heGo5nSJJshRedt8a9o2+izNlbmLF
Il3lOM+JjLIhwVyoBUu013isAEfJOamq+bHdy1gJYGs/+QG9jAWijoQqeH1PkQ8i
0rwmCi8Qk2M67mScu6ntMywfRsGVlWAEhLnuCLOBvwdVWtVbbugGL3WFty3oW40a
meGPOgyZOuR3bgL4v9iePuipxO7P4/w6TjOFDGmMOJOz74vm+gSj/mVZVayclYnb
Kz7xg93xHAgl+cwU3hFAZ0QUf9HB1Je6esQgNv1Dy53w8wJg53otOnkmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2+GpshOD6Ni19rWsqWE2gupulEMB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGBc0VdX
ML9zueQQGrJcCIkrPbC8dZM+jm1CLBB3LTZxDR6yJpas1afVmdvQQLVmeyZRACuI
gbbcHyUwPoy1XAYIzimQ0y1A4C+roxl9FV1Wg4guQ3e6LNN8S5lcWOgI9/gK3mn1
Il8AuDepbWsZ1/VRL41pbXJLmA2BLrMwX/yD+uNio9JGTTyv+fjc//rRoQBuF1Eo
BFbyRBbRsaoO2BtEBAWFExpfLwW2TWkxjOx2vqEoWFcfOzOFin3vzRfKPSpD+Zr/
QFdawia4pS5YZJwXDr11+dQ/hrseHN9rBUELrzO8kS62O50NDgCyEvpaMCjMtGlT
kCV/u8PE2EzmCg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:13 2025 by rpki-client