Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          1QKuov7Xqv/WeL+MFp/NYkjg/kLTItXUkODcJ0jIjmY=
Subject key identifier:   F2:C4:E4:BF:BE:36:03:56:C3:60:C2:20:38:0F:BC:97:DA:FF:5A:7D
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       01987BD2EC2548768E039B9308B606F08BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          162A
Signing time:             Tue 05 Aug 2025 20:01:17 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:17 +0000
Manifest next update:     Wed 06 Aug 2025 20:01:17 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: r1fR9OP0nKq4cqCIRkSD0jaai/IujV15rH318xbMKPg=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:ec:25:48:76:8e:03:9b:93:08:b6:06:f0:8b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Aug  5 20:01:17 2025 GMT
            Not After : Aug  6 20:01:17 2025 GMT
        Subject: CN=f2c4e4bfbe360356c360c220380fbc97daff5a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:98:a2:59:02:e9:c7:13:0f:70:64:ae:f9:93:
                    75:d0:7f:b9:30:67:6e:11:7c:12:6d:c6:3b:6a:ea:
                    0e:0d:a0:0a:3e:e2:7f:92:d8:79:f4:50:78:a6:f1:
                    93:c1:a0:dd:5c:ed:ee:a9:b1:e3:e2:7f:c5:74:0a:
                    f0:d9:96:11:92:2e:34:4e:a7:a7:45:51:e4:3e:75:
                    2f:72:c6:26:5c:4b:93:3d:ad:28:b6:21:93:91:f6:
                    9c:96:22:14:99:ce:a6:9d:68:2f:10:1b:e2:21:1e:
                    ce:72:70:cc:2f:26:6e:b4:37:78:d3:98:62:fe:67:
                    e6:9c:10:71:c3:a6:bb:fc:78:13:e7:46:d1:09:e0:
                    f5:7e:8a:9c:be:88:95:8c:52:f1:6e:82:54:fb:e8:
                    47:9b:e5:65:7d:27:52:95:c7:76:ab:5a:fa:4b:72:
                    9f:a1:c8:9d:43:67:3b:73:e7:14:8f:56:fd:55:85:
                    8a:af:80:13:e0:77:51:c1:43:5d:f0:36:1e:06:94:
                    d0:a9:b0:c2:c5:b5:4e:e9:a7:6c:ea:18:3c:4a:3f:
                    21:d6:48:12:ce:54:3e:b5:c8:37:54:db:6e:01:31:
                    d3:ad:ca:56:6d:f6:91:eb:72:6e:01:20:3d:2a:a3:
                    d3:66:d5:59:3c:53:1c:1f:4f:a4:d5:6e:66:92:2a:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:E4:BF:BE:36:03:56:C3:60:C2:20:38:0F:BC:97:DA:FF:5A:7D
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:8b:0b:95:cd:5b:bf:17:b6:8b:bd:0a:84:73:40:a8:7d:
         79:18:e9:84:19:dd:27:a7:f7:f5:0f:6a:44:8d:16:07:f9:1b:
         d0:4f:04:d8:2c:c0:4c:bc:b8:63:c1:1e:d6:0b:63:b0:ba:b0:
         b0:55:4f:b5:b3:29:22:28:ec:7b:d8:fa:69:f7:7e:7f:19:d0:
         7d:a4:05:42:c0:3f:e6:e7:45:97:08:da:69:85:06:6a:ba:c9:
         e2:06:8f:cf:4c:53:29:90:00:d9:4a:6d:de:e1:20:d1:fa:73:
         d7:41:4c:97:95:09:23:0b:96:12:65:f0:ce:fc:7d:1d:bb:a1:
         d6:52:b0:0a:6f:b9:a6:c1:50:10:f2:53:cb:22:be:d9:86:2f:
         7f:ee:e4:a2:a0:87:c4:60:a9:5b:c3:b0:a2:ae:68:14:2a:1a:
         f1:76:e0:1b:6a:37:34:f7:b0:6c:25:c5:1e:9a:9d:eb:54:e2:
         89:e9:77:c4:93:5b:65:36:03:08:70:31:42:eb:33:79:ab:4f:
         9a:0c:31:c6:c2:72:1a:4d:52:5b:07:43:99:f0:48:64:34:61:
         aa:17:ae:8c:85:02:15:dc:56:67:c0:fb:bb:97:bd:bd:16:61:
         d1:c4:bc:5f:58:85:b8:71:95:3a:ab:ff:7e:af:79:87:bb:96:
         d5:00:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:16 2025 by rpki-client