Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          mf0TplTsVnL6yJt0JfIWFlQ9bO2cZWP9oinR2aHrMi0=
Subject key identifier:   8C:B8:F1:B1:08:84:68:4D:38:9C:83:FD:AA:FF:08:C9:00:8E:43:83
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       01988A69C788D132EF58DD36755433FD1DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          03BA
Signing time:             Fri 08 Aug 2025 16:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:44 +0000
Files and hashes:         1: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (hash: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=)
                          2: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=)
                          3: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=)
                          4: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=)
                          5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=)
                          6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=)
                          7: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (hash: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=)
                          8: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=)
                          9: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=)
                          10: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=)
                          11: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=)
                          12: SZniDvbA3xGyko4uBw0wSK1iTzI.roa (hash: kzzWmCXEeVZh12Lzyl4Un0cqdmZrru/ISSndxfTEtCc=)
                          13: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=)
                          14: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: 8tPXOwHRW66oJC8uWow7L17pFhiUIANfEIdUElGUY+k=)
                          15: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=)
                          16: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=)
                          17: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=)
                          18: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=)
                          19: qtSFhSVXD3loe4iYCp27H6WqPO8.roa (hash: dM5n2vL+0Slh2GrDt9ahN7jhYGcuB7d0O5MXI/IkDvE=)
                          20: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=)
                          21: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:c7:88:d1:32:ef:58:dd:36:75:54:33:fd:1d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Aug  8 16:00:44 2025 GMT
            Not After : Aug  9 16:00:44 2025 GMT
        Subject: CN=8cb8f1b10884684d389c83fdaaff08c9008e4383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:ba:aa:36:cb:08:d9:dd:fe:4d:3b:16:cb:
                    ec:c4:d3:f4:30:44:cd:f1:f1:c3:6f:4d:dc:98:ae:
                    9f:56:3e:9f:78:f3:1a:81:56:ab:7d:65:b8:aa:97:
                    c8:bf:52:63:95:9a:f3:a3:f4:72:7a:a5:54:cd:ce:
                    98:dd:ba:ce:4b:39:c4:4b:2f:06:ca:32:4f:ad:91:
                    78:0a:0e:6c:d0:e4:73:58:db:70:b9:5c:e9:7c:22:
                    1e:ca:12:ca:ba:fb:68:59:b4:04:c2:fc:75:c6:f6:
                    a7:45:07:74:04:51:e5:48:90:ae:a8:a8:35:76:15:
                    a3:dd:12:1d:8e:99:df:a6:31:db:a9:19:8c:c6:5f:
                    26:ef:53:4f:a4:fa:a4:ca:c2:cb:b7:12:b1:36:d2:
                    47:06:52:a3:98:5e:ff:85:35:da:d1:2b:81:e7:3e:
                    ea:cf:b3:67:f2:77:0c:89:f8:d9:04:5a:49:04:27:
                    c4:2b:3e:8d:5f:13:ba:d8:b2:ff:ff:ff:c1:43:1d:
                    d6:84:b3:bb:a7:38:98:fe:3b:e4:5e:16:f4:2f:4f:
                    0a:bd:77:ab:ef:95:d7:ad:4a:60:60:7d:9a:ef:f6:
                    08:f6:45:05:b3:6e:f4:73:58:7a:2b:c5:8d:45:21:
                    7c:19:bf:80:cf:54:85:f3:fc:35:5a:42:4c:f3:5f:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B8:F1:B1:08:84:68:4D:38:9C:83:FD:AA:FF:08:C9:00:8E:43:83
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:97:ee:e2:aa:42:b6:ac:84:c2:57:f9:03:a5:8d:83:8a:
         69:bd:a2:1c:7a:41:f3:00:b6:4a:99:53:56:07:3f:94:6a:d6:
         7d:15:38:d9:12:2a:c8:0e:ec:3c:a6:6d:d6:9e:09:6e:6d:86:
         fb:13:a0:a4:75:b2:28:5d:3b:a3:d5:1e:c6:45:51:5d:16:46:
         0c:37:20:21:47:3a:67:df:7e:90:16:bd:9c:1c:3f:98:81:e9:
         ef:a6:c0:3c:36:0a:8a:c6:b1:93:97:8b:10:84:da:7c:cf:93:
         57:e1:30:9a:69:6f:6d:f8:bb:d2:2d:ef:eb:92:42:2d:42:d4:
         05:af:b4:30:a6:a2:c9:1b:2f:63:bb:85:58:32:9e:c3:86:be:
         d9:4c:32:0a:0d:27:4f:95:3b:c7:cd:4d:40:27:fb:14:e3:67:
         c3:7f:14:7b:f3:db:02:13:51:98:61:5a:b8:4d:44:c6:ec:8a:
         27:49:45:86:d3:f7:8d:1c:0e:a2:c5:7f:c4:28:53:d2:1d:88:
         68:48:21:70:27:9b:d5:65:d5:be:7c:6a:f0:72:5d:71:09:18:
         a0:4b:69:19:5a:ca:0c:47:4e:fb:45:ea:d3:52:bb:1f:3e:5f:
         ab:d0:49:e4:82:0f:95:49:6a:28:a8:99:bc:5c:26:86:06:8f:
         40:d1:41:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKaceI0TLvWN02dVQz/R29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwODA4MTYwMDQ0WhcNMjUwODA5MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg4Y2I4ZjFiMTA4ODQ2ODRkMzg5YzgzZmRhYWZmMDhjOTAwOGU0MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsS6qjbLCNnd/k07FsvsxNP0METN
8fHDb03cmK6fVj6fePMagVarfWW4qpfIv1JjlZrzo/RyeqVUzc6Y3brOSznESy8G
yjJPrZF4Cg5s0ORzWNtwuVzpfCIeyhLKuvtoWbQEwvx1xvanRQd0BFHlSJCuqKg1
dhWj3RIdjpnfpjHbqRmMxl8m71NPpPqkysLLtxKxNtJHBlKjmF7/hTXa0SuB5z7q
z7Nn8ncMifjZBFpJBCfEKz6NXxO62LL////BQx3WhLO7pziY/jvkXhb0L08KvXer
75XXrUpgYH2a7/YI9kUFs270c1h6K8WNRSF8Gb+Az1SF8/w1WkJM81+nKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy48bEIhGhNOJyD/ar/CMkAjkODMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM2X7uKq
QrashMJX+QOljYOKab2iHHpB8wC2SplTVgc/lGrWfRU42RIqyA7sPKZt1p4Jbm2G
+xOgpHWyKF07o9UexkVRXRZGDDcgIUc6Z99+kBa9nBw/mIHp76bAPDYKisaxk5eL
EITafM+TV+Ewmmlvbfi70i3v65JCLULUBa+0MKaiyRsvY7uFWDKew4a+2UwyCg0n
T5U7x81NQCf7FONnw38Ue/PbAhNRmGFauE1ExuyKJ0lFhtP3jRwOosV/xChT0h2I
aEghcCeb1WXVvnxq8HJdcQkYoEtpGVrKDEdO+0Xq01K7Hz5fq9BJ5IIPlUlqKKiZ
vFwmhgaPQNFBdw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:35 2025 by rpki-client