Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File:                     sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier:          +G+oObjd1BbOGo9aW9TGfRBKmHrONw7h9TxnxK/Avfo=
Subject key identifier:   2B:3E:B2:7C:4D:79:E0:DF:FD:7D:5A:E5:67:DB:4E:A7:F6:BD:9F:D3
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer:       /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial:       01989FA83C53725D5CC26C801C22160D1685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number:          15AE
Signing time:             Tue 12 Aug 2025 19:00:59 +0000
Manifest this update:     Tue 12 Aug 2025 19:00:59 +0000
Manifest next update:     Wed 13 Aug 2025 19:00:59 +0000
Files and hashes:         1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
                          2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: Ym9guNPv5P9NtkuiYkbYUup24kOlRwKhO5a8H4M4QbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:a8:3c:53:72:5d:5c:c2:6c:80:1c:22:16:0d:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
        Validity
            Not Before: Aug 12 19:00:59 2025 GMT
            Not After : Aug 13 19:00:59 2025 GMT
        Subject: CN=2b3eb27c4d79e0dffd7d5ae567db4ea7f6bd9fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:bf:19:b1:1a:37:ac:fb:7a:7a:14:5c:2d:
                    3f:e3:56:e1:63:e7:2f:81:e8:f1:00:b6:85:31:a8:
                    7b:cf:65:01:8d:d6:73:55:d3:b4:69:d1:53:bd:33:
                    46:04:58:74:d2:c2:d3:dc:0e:c6:78:5f:7d:00:f3:
                    5c:3f:12:06:78:4b:0d:0e:a9:80:63:da:2d:26:77:
                    64:f5:5b:5a:17:70:30:90:26:6c:7f:f6:71:49:5f:
                    4a:d5:ed:46:1b:22:57:e0:42:07:44:57:22:14:2a:
                    c9:51:9f:14:2e:bf:60:ae:cd:95:07:63:92:c8:f4:
                    a1:27:9c:3e:11:89:41:4d:f3:1b:56:21:2a:bd:79:
                    a9:fa:1d:20:a0:d8:83:c1:bb:d0:55:f9:92:86:4b:
                    fb:e4:34:2f:75:61:be:47:e8:4d:87:0c:a9:e2:88:
                    d0:1f:2e:af:cf:e7:7b:73:08:cc:3a:89:e6:8d:d0:
                    ed:58:13:2a:c3:57:08:8d:39:4d:ce:16:87:27:ee:
                    f5:94:63:ce:fc:71:68:e3:9e:46:e0:35:60:56:81:
                    3a:32:11:2e:15:e5:e7:aa:d5:3e:c2:99:83:72:58:
                    b4:42:37:08:17:70:25:70:6c:ff:43:80:df:cb:7b:
                    13:01:b6:46:0f:2f:5e:a8:67:44:e4:c1:8c:ba:bb:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:B2:7C:4D:79:E0:DF:FD:7D:5A:E5:67:DB:4E:A7:F6:BD:9F:D3
            X509v3 Authority Key Identifier:
                keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e0:d8:5f:07:ef:5a:a5:a6:6e:df:43:38:88:3c:13:2c:2b:
         0b:a4:16:a6:3a:cb:a6:f9:57:d7:6e:07:4b:46:3e:5f:4b:16:
         9b:a5:aa:f2:d5:5f:f7:ed:ab:3a:d6:27:89:63:c8:1e:0e:17:
         63:60:f1:15:f5:df:f6:07:c7:cf:27:17:0a:57:e5:17:b9:61:
         33:be:68:c5:e8:1e:21:ff:6f:70:2e:d5:62:0e:14:fd:7f:06:
         9a:c3:70:04:f5:e6:77:ff:62:a8:77:6d:cf:03:f7:cf:ef:69:
         d5:70:ff:75:d1:56:b2:73:c8:e4:49:80:48:b1:e4:82:f0:79:
         2b:00:f1:d2:47:6d:27:5d:73:e2:30:d9:9f:24:0e:9b:3a:42:
         5b:14:32:ee:8f:e8:fe:98:6b:ff:67:f7:4f:c0:0d:09:71:72:
         9c:3c:4f:54:a5:24:b9:a4:d7:f2:c2:eb:a3:cb:18:0c:82:0b:
         1c:b7:72:b0:e5:71:5c:63:a1:16:a6:e8:fe:fe:eb:85:db:29:
         a2:1b:ea:ba:f2:56:66:04:94:82:5a:50:d1:4f:56:03:51:d9:
         00:92:a1:99:db:8f:24:3f:9a:da:53:30:e3:1f:df:0e:a8:a3:
         fd:15:a6:48:5e:89:ee:67:3d:df:b4:09:9b:12:ef:ea:9a:39:
         db:64:5f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqDxTcl1cwmyAHCIWDRaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm
NmQ3MDUwHhcNMjUwODEyMTkwMDU5WhcNMjUwODEzMTkwMDU5WjAzMTEwLwYDVQQD
EygyYjNlYjI3YzRkNzllMGRmZmQ3ZDVhZTU2N2RiNGVhN2Y2YmQ5ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoq/GbEaN6z7enoUXC0/41bhY+cv
gejxALaFMah7z2UBjdZzVdO0adFTvTNGBFh00sLT3A7GeF99APNcPxIGeEsNDqmA
Y9otJndk9VtaF3AwkCZsf/ZxSV9K1e1GGyJX4EIHRFciFCrJUZ8ULr9grs2VB2OS
yPShJ5w+EYlBTfMbViEqvXmp+h0goNiDwbvQVfmShkv75DQvdWG+R+hNhwyp4ojQ
Hy6vz+d7cwjMOonmjdDtWBMqw1cIjTlNzhaHJ+71lGPO/HFo455G4DVgVoE6MhEu
FeXnqtU+wpmDcli0QjcIF3AlcGz/Q4Dfy3sTAbZGDy9eqGdE5MGMurvmBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs+snxNeeDf/X1a5WfbTqf2vZ/TMB8GA1UdIwQY
MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt
YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz
LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+DYXwfv
WqWmbt9DOIg8EywrC6QWpjrLpvlX124HS0Y+X0sWm6Wq8tVf9+2rOtYniWPIHg4X
Y2DxFfXf9gfHzycXClflF7lhM75oxegeIf9vcC7VYg4U/X8GmsNwBPXmd/9iqHdt
zwP3z+9p1XD/ddFWsnPI5EmASLHkgvB5KwDx0kdtJ11z4jDZnyQOmzpCWxQy7o/o
/phr/2f3T8ANCXFynDxPVKUkuaTX8sLro8sYDIILHLdysOVxXGOhFqbo/v7rhdsp
ohvquvJWZgSUglpQ0U9WA1HZAJKhmduPJD+a2lMw4x/fDqij/RWmSF6J7mc937QJ
mxLv6po522Rf9w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:40 2025 by rpki-client