Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          XsTD59Cg0Z761RCPb2Q/RUgY7PnSLo9Q62ZZbF9X1N0=
Subject key identifier:   B0:93:51:6D:62:2F:D6:0D:35:C2:FE:E3:3A:F3:E1:A9:FB:0F:86:9E
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01988DD91F910F044C4F241D04362AE84437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          165E
Signing time:             Sat 09 Aug 2025 08:01:13 +0000
Manifest this update:     Sat 09 Aug 2025 08:01:13 +0000
Manifest next update:     Sun 10 Aug 2025 08:01:13 +0000
Files and hashes:         1: 6TknrlKhj_raOY5i61r4APdWgi8.roa (hash: Azh2w6lu1iMwNp36BaIHM3fgEc2SSAdGdIuaWOlC4bU=)
                          2: 6kgMCA_yg3nxvdWkonLmiL8us10.roa (hash: Rw/PVOBSR56XgIYCXH0ZrGAd8VZfvOELoAhjhJknHmg=)
                          3: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=)
                          4: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: cNho36MIOO+cGfDG2mK+qi+gzft3nrV4k6JI2OacgyA=)
                          5: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=)
                          6: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=)
                          7: fRuZqnM9bu9aFuMAbNUnnejAy3E.roa (hash: 0Pw20JeeLvEf3W3rAxbHJOJ0+O4OMpDfQqbFAkyf380=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:d9:1f:91:0f:04:4c:4f:24:1d:04:36:2a:e8:44:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Aug  9 08:01:13 2025 GMT
            Not After : Aug 10 08:01:13 2025 GMT
        Subject: CN=b093516d622fd60d35c2fee33af3e1a9fb0f869e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:e2:fb:ae:65:26:09:f5:4a:41:3e:e1:2d:
                    58:68:c5:b2:f2:4e:1f:d2:6a:0d:bb:30:fa:b3:65:
                    a0:41:5c:e3:3c:9e:8b:08:7c:1e:1b:5d:3b:1a:39:
                    ee:d5:a1:4b:f0:90:e2:26:8b:8c:b0:c2:29:ad:22:
                    06:39:ad:ee:67:2c:54:a7:0a:b1:47:36:2c:f1:d5:
                    1d:a1:2c:c4:d2:99:a6:32:fc:ce:a0:47:71:0e:b9:
                    4a:81:b1:53:1a:7d:4a:fa:59:6b:f0:67:d3:20:05:
                    04:d5:9e:ee:8a:70:72:02:01:57:ac:96:d1:6a:dc:
                    b6:f1:ce:97:98:d4:ba:9a:cb:f4:6d:24:ce:8f:21:
                    d0:b2:15:a9:4e:c9:36:58:06:f5:5b:82:2f:e0:27:
                    64:a9:6d:0a:00:4a:ff:9f:93:b4:15:01:48:16:49:
                    7e:e1:9e:4f:e4:a2:16:63:05:9f:90:1c:3f:84:77:
                    d0:4b:95:0e:48:21:0e:5d:fe:44:bf:98:1a:56:3e:
                    42:3d:7b:34:78:ed:2d:ed:62:48:fe:82:09:77:7d:
                    01:fe:73:25:5e:cc:2b:f1:94:df:1b:2c:b6:16:84:
                    ad:a3:99:e1:5f:7f:a9:17:d3:dc:9c:6b:4f:8e:36:
                    42:b1:eb:8c:43:97:c9:e2:17:5b:be:20:e4:82:45:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:51:6D:62:2F:D6:0D:35:C2:FE:E3:3A:F3:E1:A9:FB:0F:86:9E
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:a4:f1:1f:42:80:eb:59:8b:a0:d9:9d:2b:e8:59:9a:a6:
         c2:3e:ec:b9:78:23:6b:50:09:b1:b5:df:56:50:46:44:26:84:
         78:f5:cd:40:fb:b4:ab:e8:c2:84:b5:11:7a:d5:64:e7:3a:18:
         22:9d:c4:80:40:d1:dc:33:4d:f1:5a:72:51:0b:f0:0b:c5:4e:
         66:a0:29:6a:fd:17:fc:4f:27:5a:76:7b:45:2c:51:bb:18:69:
         0c:c3:94:4a:8d:a5:df:c3:73:10:2c:16:82:4c:23:ff:cc:f8:
         a8:f8:dd:64:1c:d0:df:bd:5b:01:16:b5:9e:a7:e4:63:38:2a:
         33:71:ee:8a:3f:20:8a:0a:69:e1:a1:21:34:4b:35:9f:1d:c7:
         7b:ac:1f:53:83:26:ba:81:ac:a2:3d:e2:33:7a:42:2c:af:9d:
         04:c4:24:8a:3a:b6:f0:a7:27:59:c9:6b:55:10:2e:28:bb:51:
         63:70:d7:8d:79:02:e6:fc:3b:b2:b0:32:14:95:e6:e5:18:76:
         fa:ec:99:15:d6:ab:5f:b6:ec:c1:00:e6:3e:1c:6f:93:d1:11:
         85:00:fd:e0:d5:cb:49:e0:df:b0:c4:85:40:18:dd:1f:95:f7:
         15:67:f9:bb:92:75:36:d7:16:ce:31:cb:ec:10:5f:c8:7c:0a:
         45:46:24:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2R+RDwRMTyQdBDYq6EQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2
MDY2OTIwHhcNMjUwODA5MDgwMTEzWhcNMjUwODEwMDgwMTEzWjAzMTEwLwYDVQQD
EyhiMDkzNTE2ZDYyMmZkNjBkMzVjMmZlZTMzYWYzZTFhOWZiMGY4NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtffi+65lJgn1SkE+4S1YaMWy8k4f
0moNuzD6s2WgQVzjPJ6LCHweG107Gjnu1aFL8JDiJouMsMIprSIGOa3uZyxUpwqx
RzYs8dUdoSzE0pmmMvzOoEdxDrlKgbFTGn1K+llr8GfTIAUE1Z7uinByAgFXrJbR
aty28c6XmNS6msv0bSTOjyHQshWpTsk2WAb1W4Iv4CdkqW0KAEr/n5O0FQFIFkl+
4Z5P5KIWYwWfkBw/hHfQS5UOSCEOXf5Ev5gaVj5CPXs0eO0t7WJI/oIJd30B/nMl
Xswr8ZTfGyy2FoSto5nhX3+pF9PcnGtPjjZCseuMQ5fJ4hdbviDkgkVPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCTUW1iL9YNNcL+4zrz4an7D4aeMB8GA1UdIwQY
MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt
MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1
LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0ek8R9C
gOtZi6DZnSvoWZqmwj7suXgja1AJsbXfVlBGRCaEePXNQPu0q+jChLURetVk5zoY
Ip3EgEDR3DNN8VpyUQvwC8VOZqApav0X/E8nWnZ7RSxRuxhpDMOUSo2l38NzECwW
gkwj/8z4qPjdZBzQ371bARa1nqfkYzgqM3Huij8gigpp4aEhNEs1nx3He6wfU4Mm
uoGsoj3iM3pCLK+dBMQkijq28KcnWclrVRAuKLtRY3DXjXkC5vw7srAyFJXm5Rh2
+uyZFdarX7bswQDmPhxvk9ERhQD94NXLSeDfsMSFQBjdH5X3FWf5u5J1NtcWzjHL
7BBfyHwKRUYkWg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:02 2025 by rpki-client