Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File:                     X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier:          g4L+SIj7+4bMDFd17x+xoy8Vw87ntJkq4f7c7KT7w2U=
Subject key identifier:   83:2F:AF:7A:BB:A4:E2:F4:B7:D8:65:55:C4:72:83:3E:43:DD:14:04
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer:       /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial:       01988FFE5F68CF1C0D335DB0425658F0C1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number:          0B9D
Signing time:             Sat 09 Aug 2025 18:01:09 +0000
Manifest this update:     Sat 09 Aug 2025 18:01:09 +0000
Manifest next update:     Sun 10 Aug 2025 18:01:09 +0000
Files and hashes:         1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=)
                          2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=)
                          3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=)
                          4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: uNzNhGXMeRbaFdkKnPL69Wz+YS0SABxAipPyroJvJQY=)
                          5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=)
                          6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=)
                          7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=)
                          8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=)
                          9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=)
                          10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:5f:68:cf:1c:0d:33:5d:b0:42:56:58:f0:c1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
        Validity
            Not Before: Aug  9 18:01:09 2025 GMT
            Not After : Aug 10 18:01:09 2025 GMT
        Subject: CN=832faf7abba4e2f4b7d86555c472833e43dd1404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:47:59:98:5b:ff:96:92:e0:78:d1:6a:2b:
                    55:a2:8c:2c:01:72:b3:a3:4c:6e:1d:1e:ec:20:fe:
                    9c:ce:d5:4f:a9:dd:22:74:5a:cc:a1:e8:82:d3:ae:
                    52:e8:38:32:d4:12:00:e1:64:c1:04:02:2f:a6:15:
                    30:b5:af:3a:9b:62:51:57:e8:e5:72:db:ba:aa:c9:
                    c6:71:cb:31:28:1f:d2:91:28:83:5d:27:77:75:4c:
                    c4:63:74:d1:54:c8:b7:1e:4e:a3:25:c2:3b:59:72:
                    2c:03:ca:3d:70:20:06:9d:6c:80:01:10:0c:ca:b2:
                    e6:df:4d:4e:4b:ad:b2:1f:14:fa:72:50:fe:39:6c:
                    09:15:7a:0f:b5:85:59:10:3c:19:07:a0:2e:42:98:
                    57:73:44:2d:dd:a9:62:4e:1f:59:43:c5:c8:e0:52:
                    94:0a:fd:0d:2b:20:f7:f4:20:63:a7:95:ac:77:9f:
                    38:09:29:4f:b9:58:2f:be:60:33:00:32:74:d5:16:
                    21:f6:38:a7:b8:3d:3a:78:68:d1:31:94:8b:1a:34:
                    3e:e0:c4:44:52:eb:a4:b2:08:2c:3e:f1:17:92:6c:
                    56:ad:1a:46:af:44:66:3a:cb:6b:75:6f:57:52:0d:
                    67:12:dc:6c:22:42:24:93:8f:ea:48:3a:96:58:ff:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:AF:7A:BB:A4:E2:F4:B7:D8:65:55:C4:72:83:3E:43:DD:14:04
            X509v3 Authority Key Identifier:
                keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:8d:e7:7c:d5:f5:80:1c:10:38:3d:91:1b:24:0e:42:66:
         0d:b1:51:95:73:13:c7:65:8d:6a:ac:de:2f:fb:01:71:df:1e:
         39:1c:4a:cd:28:ef:f3:de:dc:c8:7a:fb:9c:f9:5b:71:a8:f3:
         06:38:4d:a0:3c:5c:63:02:c3:8d:77:e2:f8:4c:10:e6:96:2a:
         ba:3d:4c:2d:e9:4f:b0:46:c9:bd:37:6c:fb:ee:57:c3:73:b9:
         84:ef:dc:ef:ed:0f:ea:ab:18:8a:65:48:de:80:4c:8b:06:30:
         00:99:a9:a9:25:c1:fb:77:29:05:c2:07:18:51:8d:6d:be:56:
         76:2d:7d:d5:c9:aa:b1:cc:e5:c8:40:bf:5b:86:4f:a3:8f:c8:
         4b:72:96:05:d7:78:b6:bb:57:87:25:dc:b8:53:3f:8b:70:3b:
         9f:ed:dc:44:3f:ea:d3:01:af:79:d6:9b:70:cf:82:ca:b3:ee:
         b2:1e:54:f3:75:f3:98:06:31:70:b1:7d:88:4a:1c:e4:65:b5:
         c6:15:6f:f3:b9:3c:d2:90:c1:fd:3d:2c:b7:3a:4b:e1:5b:03:
         33:67:95:44:4f:e7:aa:fb:bd:6a:d8:37:84:d5:e3:bd:c8:36:
         c4:29:9b:41:b0:04:a4:e0:80:cd:73:22:db:d4:ec:2a:42:96:
         df:08:d3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/l9ozxwNM12wQlZY8MGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjUwODA5MTgwMTA5WhcNMjUwODEwMTgwMTA5WjAzMTEwLwYDVQQD
Eyg4MzJmYWY3YWJiYTRlMmY0YjdkODY1NTVjNDcyODMzZTQzZGQxNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvVHWZhb/5aS4HjRaitVoowsAXKz
o0xuHR7sIP6cztVPqd0idFrMoeiC065S6Dgy1BIA4WTBBAIvphUwta86m2JRV+jl
ctu6qsnGccsxKB/SkSiDXSd3dUzEY3TRVMi3Hk6jJcI7WXIsA8o9cCAGnWyAARAM
yrLm301OS62yHxT6clD+OWwJFXoPtYVZEDwZB6AuQphXc0Qt3aliTh9ZQ8XI4FKU
Cv0NKyD39CBjp5Wsd584CSlPuVgvvmAzADJ01RYh9jinuD06eGjRMZSLGjQ+4MRE
UuuksggsPvEXkmxWrRpGr0RmOstrdW9XUg1nEtxsIkIkk4/qSDqWWP86MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMvr3q7pOL0t9hlVcRygz5D3RQEMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/+N53zV
9YAcEDg9kRskDkJmDbFRlXMTx2WNaqzeL/sBcd8eORxKzSjv897cyHr7nPlbcajz
BjhNoDxcYwLDjXfi+EwQ5pYquj1MLelPsEbJvTds++5Xw3O5hO/c7+0P6qsYimVI
3oBMiwYwAJmpqSXB+3cpBcIHGFGNbb5Wdi191cmqsczlyEC/W4ZPo4/IS3KWBdd4
trtXhyXcuFM/i3A7n+3cRD/q0wGvedabcM+CyrPush5U83XzmAYxcLF9iEoc5GW1
xhVv87k80pDB/T0stzpL4VsDM2eVRE/nqvu9atg3hNXjvcg2xCmbQbAEpOCAzXMi
29TsKkKW3wjTuA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:49 2025 by rpki-client