Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File:                     KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier:          dP7fdbw94OsknkokiyhW2sPF0bqUVMzu33EudyZlJNs=
Subject key identifier:   60:5B:86:C6:2A:4F:D8:7A:07:38:64:B3:E2:98:51:DE:3D:9C:83:C4
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer:       /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial:       0198925A464802799A4A3E4E1B89319717D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number:          033D
Signing time:             Sun 10 Aug 2025 05:00:46 +0000
Manifest this update:     Sun 10 Aug 2025 05:00:46 +0000
Manifest next update:     Mon 11 Aug 2025 05:00:46 +0000
Files and hashes:         1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
                          2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: M9pz8ukofJjItYMakqJI1reOU0TP0i6pLvN5elrZcSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:5a:46:48:02:79:9a:4a:3e:4e:1b:89:31:97:17:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
        Validity
            Not Before: Aug 10 05:00:46 2025 GMT
            Not After : Aug 11 05:00:46 2025 GMT
        Subject: CN=605b86c62a4fd87a073864b3e29851de3d9c83c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:36:ac:09:53:7e:a3:6e:1e:fb:93:eb:fb:
                    93:39:f2:9b:dd:72:fd:ba:da:c2:94:e9:86:93:3f:
                    d2:19:31:c9:07:8c:5f:a3:59:cb:ea:52:4d:83:32:
                    dd:93:56:74:d8:69:c9:0c:fa:8d:aa:7e:68:51:ed:
                    86:b5:01:be:e1:8c:21:33:eb:f0:07:c3:51:89:9e:
                    0c:21:c6:86:bc:44:39:66:ba:e4:aa:8c:c7:c2:89:
                    67:52:63:84:0a:b5:e0:6e:2a:eb:1d:b7:08:83:30:
                    a8:20:75:68:b3:74:5c:63:ba:0c:2a:1c:f1:7b:7b:
                    b5:0d:9c:5a:e3:db:e8:39:51:ba:4c:6a:2e:3f:a7:
                    f7:6a:36:10:e1:bd:6f:2e:a8:4b:f2:59:11:5e:96:
                    7f:a1:b2:4e:58:2c:00:0d:d3:38:99:34:8a:31:5f:
                    77:d1:66:2f:40:37:50:08:79:81:fc:49:43:5d:42:
                    f9:bb:77:b5:a3:70:5f:93:7e:83:fb:b9:70:c7:94:
                    ab:ed:52:d9:1a:80:32:1f:6b:47:31:d7:ec:95:1a:
                    1b:5a:6b:24:ea:09:01:40:82:77:fc:d4:5d:1b:8c:
                    06:59:69:32:ea:b0:03:e3:98:d3:36:f1:de:3a:5d:
                    50:d6:ba:d4:7a:ef:21:e2:09:9a:17:9a:d0:51:56:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5B:86:C6:2A:4F:D8:7A:07:38:64:B3:E2:98:51:DE:3D:9C:83:C4
            X509v3 Authority Key Identifier:
                keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:de:01:fe:2f:f3:8e:b9:37:58:d4:75:6b:0a:03:11:b6:
         96:62:d0:97:6f:4f:00:cb:f1:d8:43:83:25:51:b2:e4:f7:8d:
         69:9e:24:4b:d4:55:15:68:95:cc:b0:1b:32:f9:4b:6a:10:c0:
         9a:ac:53:7d:39:e4:e5:94:2d:a2:76:74:78:f1:0c:fa:a2:28:
         8c:6d:59:91:69:1a:fd:2c:2d:e5:d9:90:3b:3b:95:9b:fd:70:
         c6:3a:3a:9b:af:62:c5:9f:20:76:25:ee:60:73:8d:e6:55:9a:
         45:c0:fd:5f:64:72:c6:d5:cd:35:45:c2:06:48:24:dd:9c:fd:
         f0:b4:24:e2:89:6c:16:32:89:ce:83:e3:46:30:3c:fa:20:8d:
         ff:a8:d5:f0:f1:f5:57:b2:3e:e4:92:e7:7b:1c:39:ad:1b:ba:
         da:b6:05:0f:74:eb:f0:07:6d:d1:56:a9:28:5e:92:e5:d7:77:
         aa:59:63:99:f2:f3:b6:3a:b1:f4:88:51:e3:08:5d:f8:d3:19:
         05:74:ee:ff:e4:a7:1c:fa:e1:00:a0:ab:df:bc:87:a0:89:e9:
         14:ab:38:62:8a:67:95:65:a4:bb:e5:c6:79:e8:8d:4e:a0:c8:
         10:b4:34:44:28:ab:ba:bf:4b:24:b4:c5:02:7d:b8:08:d5:d9:
         7a:5e:45:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSWkZIAnmaSj5OG4kxlxfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjUwODEwMDUwMDQ2WhcNMjUwODExMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg2MDViODZjNjJhNGZkODdhMDczODY0YjNlMjk4NTFkZTNkOWM4M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XQ2rAlTfqNuHvuT6/uTOfKb3XL9
utrClOmGkz/SGTHJB4xfo1nL6lJNgzLdk1Z02GnJDPqNqn5oUe2GtQG+4YwhM+vw
B8NRiZ4MIcaGvEQ5ZrrkqozHwolnUmOECrXgbirrHbcIgzCoIHVos3RcY7oMKhzx
e3u1DZxa49voOVG6TGouP6f3ajYQ4b1vLqhL8lkRXpZ/obJOWCwADdM4mTSKMV93
0WYvQDdQCHmB/ElDXUL5u3e1o3Bfk36D+7lwx5Sr7VLZGoAyH2tHMdfslRobWmsk
6gkBQIJ3/NRdG4wGWWky6rAD45jTNvHeOl1Q1rrUeu8h4gmaF5rQUVYoZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBbhsYqT9h6Bzhks+KYUd49nIPEMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQfeAf4v
8465N1jUdWsKAxG2lmLQl29PAMvx2EODJVGy5PeNaZ4kS9RVFWiVzLAbMvlLahDA
mqxTfTnk5ZQtonZ0ePEM+qIojG1ZkWka/Swt5dmQOzuVm/1wxjo6m69ixZ8gdiXu
YHON5lWaRcD9X2RyxtXNNUXCBkgk3Zz98LQk4olsFjKJzoPjRjA8+iCN/6jV8PH1
V7I+5JLnexw5rRu62rYFD3Tr8Adt0VapKF6S5dd3qlljmfLztjqx9IhR4whd+NMZ
BXTu/+SnHPrhAKCr37yHoInpFKs4YopnlWWku+XGeeiNTqDIELQ0RCirur9LJLTF
An24CNXZel5FUw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:41 2025 by rpki-client