Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          o1OsjT7idsnAlnCPGb+ICEFwNVJYkqYk+GvBHU6C5ek=
Subject key identifier:   33:27:86:45:F7:CA:AE:D9:24:A9:F8:48:0C:4F:7A:49:32:5E:5B:5A
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       01988F906F89100FD7174CCAD3DD7020237C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          162A
Signing time:             Sat 09 Aug 2025 16:01:04 +0000
Manifest this update:     Sat 09 Aug 2025 16:01:04 +0000
Manifest next update:     Sun 10 Aug 2025 16:01:04 +0000
Files and hashes:         1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: Yp/AfHTkr9h1uyamrUCh9Fu/XYtZ/3UGddRj8/RI6h8=)
                          2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:6f:89:10:0f:d7:17:4c:ca:d3:dd:70:20:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Aug  9 16:01:04 2025 GMT
            Not After : Aug 10 16:01:04 2025 GMT
        Subject: CN=33278645f7caaed924a9f8480c4f7a49325e5b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:43:14:8b:c3:61:d4:40:b8:d5:47:9a:67:
                    90:54:3a:59:2d:b2:34:03:c4:da:3c:f2:a1:7a:f5:
                    1f:69:c9:ad:d5:4f:d5:78:45:1f:90:8b:05:29:66:
                    f9:05:94:13:bc:54:d1:0e:43:df:c5:6a:bd:e3:8d:
                    06:b6:24:de:00:8b:e7:e2:19:a8:a5:f6:1c:24:ee:
                    69:62:0c:c6:8b:a8:f2:10:ab:60:ed:76:41:f6:2f:
                    a3:22:2d:0a:ba:20:ff:25:f6:2e:61:8c:27:6b:0f:
                    08:5b:93:d3:23:2a:29:21:64:40:5b:71:57:95:af:
                    cd:21:fa:18:47:90:e0:0d:19:e9:be:4c:2a:cb:ff:
                    89:85:c7:4c:72:df:22:81:7b:02:9c:6d:18:4d:fe:
                    51:a3:3e:3e:41:96:e3:82:9a:17:44:b4:57:51:27:
                    88:6f:40:3d:3a:b8:04:83:25:59:33:07:d8:24:67:
                    c2:0c:f3:96:24:eb:b7:83:5c:21:1f:f9:86:5b:58:
                    d8:00:df:3a:50:1c:be:0a:86:60:26:09:8f:ce:a1:
                    6c:e8:0e:22:c7:d0:84:bd:d8:7d:6b:c3:27:99:c7:
                    75:f7:34:da:f0:3e:de:8a:9b:5c:1a:a8:5c:a9:4c:
                    85:75:46:31:1d:ca:63:25:80:6a:2c:39:c2:d1:3c:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:86:45:F7:CA:AE:D9:24:A9:F8:48:0C:4F:7A:49:32:5E:5B:5A
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:e0:f0:e0:a8:d9:9c:aa:a7:c4:cf:08:d0:b2:5b:10:60:
         c4:2f:0e:71:30:17:aa:56:be:6f:f9:e6:28:22:b1:32:d4:04:
         28:1a:0d:d4:5d:58:05:ff:b5:66:4e:d1:ac:eb:0b:a7:93:ad:
         1b:1a:de:ba:0b:23:6e:48:5e:aa:f4:cc:08:92:75:be:c9:b3:
         1a:0c:62:c1:81:1d:51:f3:01:93:a5:f9:11:80:2b:79:60:39:
         11:80:71:8f:6d:cd:9c:50:bd:31:53:84:35:98:8f:64:18:1d:
         11:8f:2d:5a:f9:be:41:bb:d2:86:53:cc:ed:da:c8:73:0b:8a:
         be:53:97:1c:cd:da:3f:cf:bd:c2:fa:1d:ea:c6:3e:3e:23:4f:
         77:53:2e:73:a7:58:42:84:5f:65:22:08:54:0f:25:9f:c9:68:
         93:c8:f3:50:12:0b:87:c4:2c:3f:1a:3a:ce:e8:6d:d2:c9:9f:
         9e:35:93:51:fd:3e:67:da:56:a9:f1:81:61:fd:e1:48:18:64:
         e8:4d:32:6c:60:e9:50:f3:fc:c7:c2:a0:c4:3e:1c:09:9c:c1:
         87:d3:33:17:94:20:0e:98:0d:96:9e:76:51:44:ac:e9:86:07:
         66:f7:25:ac:91:37:83:53:69:5b:99:84:ca:74:76:bd:2f:cd:
         3b:92:7a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkG+JEA/XF0zK091wICN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3
Y2VkMzIwHhcNMjUwODA5MTYwMTA0WhcNMjUwODEwMTYwMTA0WjAzMTEwLwYDVQQD
EygzMzI3ODY0NWY3Y2FhZWQ5MjRhOWY4NDgwYzRmN2E0OTMyNWU1YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZDFIvDYdRAuNVHmmeQVDpZLbI0
A8TaPPKhevUfacmt1U/VeEUfkIsFKWb5BZQTvFTRDkPfxWq9440GtiTeAIvn4hmo
pfYcJO5pYgzGi6jyEKtg7XZB9i+jIi0KuiD/JfYuYYwnaw8IW5PTIyopIWRAW3FX
la/NIfoYR5DgDRnpvkwqy/+JhcdMct8igXsCnG0YTf5Roz4+QZbjgpoXRLRXUSeI
b0A9OrgEgyVZMwfYJGfCDPOWJOu3g1whH/mGW1jYAN86UBy+CoZgJgmPzqFs6A4i
x9CEvdh9a8Mnmcd19zTa8D7eiptcGqhcqUyFdUYxHcpjJYBqLDnC0Tw7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMnhkX3yq7ZJKn4SAxPekkyXltaMB8GA1UdIwQY
MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt
ZmQ5ZjM2YThiYTZlLzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl
LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxHg8OCo
2Zyqp8TPCNCyWxBgxC8OcTAXqla+b/nmKCKxMtQEKBoN1F1YBf+1Zk7RrOsLp5Ot
GxreugsjbkheqvTMCJJ1vsmzGgxiwYEdUfMBk6X5EYAreWA5EYBxj23NnFC9MVOE
NZiPZBgdEY8tWvm+QbvShlPM7drIcwuKvlOXHM3aP8+9wvod6sY+PiNPd1Muc6dY
QoRfZSIIVA8ln8lok8jzUBILh8QsPxo6zuht0smfnjWTUf0+Z9pWqfGBYf3hSBhk
6E0ybGDpUPP8x8KgxD4cCZzBh9MzF5QgDpgNlp52UUSs6YYHZvclrJE3g1NpW5mE
ynR2vS/NO5J6CQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:48 2025 by rpki-client