Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File:                     T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier:          0RTlA3QC5Efi68XxPJyiYX+t6AUvCbwSHPJZtjPUZgg=
Subject key identifier:   2B:D5:40:44:9E:2E:1E:AE:5B:88:10:35:0F:0B:F4:A7:41:9D:2C:8E
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer:       /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial:       019880C1C81149474A8AEDEFF808F9C11469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 19:00:39 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:39 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:39 +0000
Files and hashes:         1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: RYSyzPnQi58SMQxLtESPvjxH55r8EoILsJxZHf9yKio=)
                          2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:c8:11:49:47:4a:8a:ed:ef:f8:08:f9:c1:14:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
        Validity
            Not Before: Aug  6 19:00:39 2025 GMT
            Not After : Aug  7 19:00:39 2025 GMT
        Subject: CN=2bd540449e2e1eae5b8810350f0bf4a7419d2c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:ab:11:f3:bc:05:29:c6:7a:6f:d9:0f:9f:
                    28:6a:06:63:56:e8:90:42:fb:9e:35:d4:63:49:5c:
                    c7:74:ce:7b:4d:0d:36:76:4e:00:8d:2d:c2:39:8a:
                    92:98:21:a4:c8:d4:3b:ed:fa:41:20:8f:65:cc:e9:
                    ae:09:99:f4:38:d3:89:58:8c:a6:65:bd:4d:d8:f6:
                    2f:90:3d:00:68:3b:83:52:02:0d:4e:ba:47:52:31:
                    3d:0c:80:b7:5b:e9:a8:2b:32:2a:b9:c1:27:5d:18:
                    d3:be:60:a0:82:54:56:ba:4b:7a:bc:94:e6:49:39:
                    2d:70:f3:1f:65:8b:f5:19:49:77:b6:0c:7d:72:7d:
                    98:0b:a9:2c:1c:55:f9:b6:2e:14:4b:4b:0c:ca:42:
                    b4:6a:ce:e6:0d:05:f3:8a:96:40:e3:d7:e5:24:1e:
                    04:db:92:3e:88:45:56:4e:72:41:71:7f:0e:22:ce:
                    38:40:6f:bd:c1:b6:30:b6:02:4a:af:56:69:23:a8:
                    86:f9:2b:24:21:3c:c7:80:65:5b:97:a6:b7:3c:54:
                    3b:da:c4:53:10:69:79:f2:38:28:c3:99:b3:75:27:
                    1e:32:be:16:2a:45:cc:6a:3d:84:73:ca:38:4d:ce:
                    4d:21:21:b3:07:42:85:59:a9:d9:62:17:a6:bd:17:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:40:44:9E:2E:1E:AE:5B:88:10:35:0F:0B:F4:A7:41:9D:2C:8E
            X509v3 Authority Key Identifier:
                keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:4e:a4:34:d5:f4:e0:2d:fa:2b:7d:b8:e6:33:13:cf:6a:
         b5:52:be:c0:d5:9f:26:73:aa:78:59:d5:a7:0d:57:0b:55:63:
         89:26:88:12:e4:ed:29:c9:22:95:ee:8f:36:74:c5:20:ae:14:
         cb:3d:f3:80:1c:76:60:73:6b:3c:00:2d:ea:19:90:cf:ce:67:
         04:4c:12:03:3b:2e:02:c0:f5:0c:40:ef:88:a8:a7:80:33:c7:
         30:3b:97:73:6e:9b:97:e9:91:24:4f:1e:de:68:fd:0b:cf:3e:
         eb:32:d0:5e:36:5e:de:77:f1:62:49:5c:f2:e5:ba:7d:16:cc:
         54:17:8b:9a:18:e2:cf:ec:68:fb:c6:39:7c:36:78:50:32:d5:
         77:9f:c5:fe:58:f4:7d:b7:5f:23:1d:f9:61:f0:4b:d0:69:1d:
         26:13:d0:32:f6:0e:49:cd:23:1d:74:fb:f7:d7:01:6a:cc:15:
         6a:7d:46:a2:49:85:45:75:fe:c3:5f:ea:2f:36:26:6c:26:e1:
         83:ad:54:61:5e:21:48:15:c6:07:2f:72:27:43:d5:7b:e9:97:
         8d:0d:48:34:87:2c:4c:b3:e1:18:99:0b:b6:19:9b:81:e0:19:
         26:72:b8:fe:4c:51:a8:73:e9:d2:44:4e:9e:e8:b8:11:1e:a6:
         85:3c:36:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwcgRSUdKiu3v+Aj5wRRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUwODA2MTkwMDM5WhcNMjUwODA3MTkwMDM5WjAzMTEwLwYDVQQD
EygyYmQ1NDA0NDllMmUxZWFlNWI4ODEwMzUwZjBiZjRhNzQxOWQyYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkSrEfO8BSnGem/ZD58oagZjVuiQ
QvueNdRjSVzHdM57TQ02dk4AjS3COYqSmCGkyNQ77fpBII9lzOmuCZn0ONOJWIym
Zb1N2PYvkD0AaDuDUgINTrpHUjE9DIC3W+moKzIqucEnXRjTvmCgglRWukt6vJTm
STktcPMfZYv1GUl3tgx9cn2YC6ksHFX5ti4US0sMykK0as7mDQXzipZA49flJB4E
25I+iEVWTnJBcX8OIs44QG+9wbYwtgJKr1ZpI6iG+SskITzHgGVbl6a3PFQ72sRT
EGl58jgow5mzdSceMr4WKkXMaj2Ec8o4Tc5NISGzB0KFWanZYhemvRfHuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvVQESeLh6uW4gQNQ8L9KdBnSyOMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvBOpDTV
9OAt+it9uOYzE89qtVK+wNWfJnOqeFnVpw1XC1VjiSaIEuTtKckile6PNnTFIK4U
yz3zgBx2YHNrPAAt6hmQz85nBEwSAzsuAsD1DEDviKingDPHMDuXc26bl+mRJE8e
3mj9C88+6zLQXjZe3nfxYklc8uW6fRbMVBeLmhjiz+xo+8Y5fDZ4UDLVd5/F/lj0
fbdfIx35YfBL0GkdJhPQMvYOSc0jHXT799cBaswVan1GokmFRXX+w1/qLzYmbCbh
g61UYV4hSBXGBy9yJ0PVe+mXjQ1INIcsTLPhGJkLthmbgeAZJnK4/kxRqHPp0kRO
nui4ER6mhTw23w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:43 2025 by rpki-client