Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          EJeYEczB42DSm4QEafVHR5+ZghK4X8zs6EkYBN0vEzA=
Subject key identifier:   A1:E2:6E:C6:E4:7C:CB:9F:D5:E3:0E:FB:93:4A:8A:C5:70:3B:CC:3D
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       0198808B390AC604F63AED4FEFEC6D2C3411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          070B
Signing time:             Wed 06 Aug 2025 18:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:04 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: XJC710gWHcGkOJIkrxUHBjvQwRJ4g2Z1Dcqw1GXJXIA=)
                          2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=)
                          3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=)
                          4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=)
                          5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=)
                          6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:39:0a:c6:04:f6:3a:ed:4f:ef:ec:6d:2c:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Aug  6 18:01:04 2025 GMT
            Not After : Aug  7 18:01:04 2025 GMT
        Subject: CN=a1e26ec6e47ccb9fd5e30efb934a8ac5703bcc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:f7:71:62:5e:89:b8:d4:2c:4c:e8:0f:d3:
                    2c:05:69:57:44:64:b2:24:4f:99:ac:bd:7e:ff:6e:
                    d8:11:d2:df:a2:eb:43:ab:cb:bf:70:ce:22:3f:67:
                    5d:13:31:3e:72:6c:31:53:d4:83:9a:37:ec:50:99:
                    92:77:c6:f4:d7:b1:47:1b:80:5b:55:2f:a6:0e:d3:
                    ef:a4:9a:a3:89:45:84:f6:30:d1:ec:35:5c:57:af:
                    41:2b:eb:48:8f:d0:66:c9:8b:f8:71:b7:1d:ac:18:
                    a6:39:67:82:ad:08:a5:12:fa:45:70:ad:84:92:af:
                    b1:c5:7b:f5:ac:7d:22:35:58:9d:8e:12:11:5c:87:
                    75:8c:aa:26:e0:af:d5:30:88:85:f9:30:d7:f8:24:
                    80:06:49:1e:a2:69:dc:7f:ac:19:ec:e1:3a:4d:9b:
                    54:4d:e2:a4:e9:38:94:36:8e:3c:37:8d:cf:55:43:
                    d4:aa:69:7b:46:08:db:0a:2e:06:c3:d5:05:31:02:
                    8a:ab:99:62:7b:a7:34:da:c6:24:3b:a3:52:f2:1a:
                    99:d3:ac:ae:37:92:75:64:0e:97:e3:8e:8b:ca:48:
                    07:d5:89:96:ed:e7:93:20:69:83:99:ec:bc:a9:64:
                    a7:73:13:28:aa:de:09:60:d7:17:1b:7d:86:6f:d6:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:6E:C6:E4:7C:CB:9F:D5:E3:0E:FB:93:4A:8A:C5:70:3B:CC:3D
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:dc:d0:bb:77:9c:b6:a8:a3:5a:02:b2:ab:fe:a4:86:6a:
         03:a6:04:9c:7c:f3:bc:0c:07:02:9c:68:79:87:46:fe:b4:18:
         ad:80:e1:61:62:3c:f6:d0:19:4a:15:aa:ef:26:78:c1:0b:a3:
         e7:3e:cb:25:ce:cd:9f:d5:88:ca:44:41:b4:66:27:ee:55:3b:
         28:b4:2f:21:03:6f:c8:35:4a:61:23:f1:fc:26:30:d1:d6:fe:
         a6:16:0b:32:b2:7c:3e:82:b6:5b:8c:3c:0b:d2:53:5d:9e:96:
         f0:a7:0f:29:b7:f1:9a:e8:84:01:7e:85:59:48:29:d5:cb:e4:
         d4:df:51:d6:51:79:35:d6:cc:81:b6:0a:0e:32:c2:10:05:f0:
         f4:ba:be:59:54:70:51:45:99:fa:13:1a:f7:06:0d:bd:cb:45:
         30:2a:41:bc:48:f0:f5:74:63:de:fb:c1:d9:74:94:3a:77:21:
         e7:4d:e9:3a:c2:c6:7f:e5:a0:59:04:c2:30:58:ba:89:33:a5:
         32:a0:a5:45:eb:c5:17:3a:31:7f:5d:1d:b9:9b:6b:2e:89:56:
         32:a3:7f:93:dc:fe:fc:74:97:da:39:a6:79:e9:c0:8e:21:cf:
         5a:f9:ed:94:71:54:0f:d2:60:35:bf:0c:8a:8f:48:15:1a:e7:
         c9:c8:17:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAizkKxgT2Ou1P7+xtLDQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx
NGYwYTAwHhcNMjUwODA2MTgwMTA0WhcNMjUwODA3MTgwMTA0WjAzMTEwLwYDVQQD
EyhhMWUyNmVjNmU0N2NjYjlmZDVlMzBlZmI5MzRhOGFjNTcwM2JjYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/3cWJeibjULEzoD9MsBWlXRGSy
JE+ZrL1+/27YEdLfoutDq8u/cM4iP2ddEzE+cmwxU9SDmjfsUJmSd8b017FHG4Bb
VS+mDtPvpJqjiUWE9jDR7DVcV69BK+tIj9BmyYv4cbcdrBimOWeCrQilEvpFcK2E
kq+xxXv1rH0iNVidjhIRXId1jKom4K/VMIiF+TDX+CSABkkeomncf6wZ7OE6TZtU
TeKk6TiUNo48N43PVUPUqml7RgjbCi4Gw9UFMQKKq5lie6c02sYkO6NS8hqZ06yu
N5J1ZA6X446LykgH1YmW7eeTIGmDmey8qWSncxMoqt4JYNcXG32Gb9bzzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHibsbkfMuf1eMO+5NKisVwO8w9MB8GA1UdIwQY
MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt
MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh
LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvjc0Lt3
nLaoo1oCsqv+pIZqA6YEnHzzvAwHApxoeYdG/rQYrYDhYWI89tAZShWq7yZ4wQuj
5z7LJc7Nn9WIykRBtGYn7lU7KLQvIQNvyDVKYSPx/CYw0db+phYLMrJ8PoK2W4w8
C9JTXZ6W8KcPKbfxmuiEAX6FWUgp1cvk1N9R1lF5NdbMgbYKDjLCEAXw9Lq+WVRw
UUWZ+hMa9wYNvctFMCpBvEjw9XRj3vvB2XSUOnch503pOsLGf+WgWQTCMFi6iTOl
MqClRevFFzoxf10duZtrLolWMqN/k9z+/HSX2jmmeenAjiHPWvntlHFUD9JgNb8M
io9IFRrnycgX1g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:44 2025 by rpki-client