Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          UgG+VXpzEO3XssBRHNht8zD8JPptdx+q3MVO2z7sGxw=
Subject key identifier:   9E:A3:A6:92:6C:22:E6:A3:C9:9F:60:F6:44:41:AC:A5:9A:D9:A9:7F
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       01988E0F991FD3076294DB5C838322D5EB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          101E
Signing time:             Sat 09 Aug 2025 09:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 09:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 09:00:43 +0000
Files and hashes:         1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: vBGEP2V2nwgLeLlQprlj0/dvTgkhxCfki4X6c3L1s5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:0f:99:1f:d3:07:62:94:db:5c:83:83:22:d5:eb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: Aug  9 09:00:43 2025 GMT
            Not After : Aug 10 09:00:43 2025 GMT
        Subject: CN=9ea3a6926c22e6a3c99f60f64441aca59ad9a97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:3e:1b:26:2e:be:fd:bd:bd:dc:cf:ca:fd:
                    a6:b8:c9:92:83:ae:6b:be:24:3c:50:76:e9:89:17:
                    33:3f:1b:50:6d:d0:6c:e2:15:00:9c:d2:69:5a:27:
                    10:63:04:b4:fb:57:ee:01:04:85:b1:64:a7:2f:53:
                    f2:51:b0:10:78:d1:6a:a5:bb:43:ca:ea:75:d3:fe:
                    99:df:87:e0:13:d9:8d:41:a2:da:c3:d3:38:6f:45:
                    31:82:f1:a9:4f:73:07:e5:8d:a5:75:e0:1d:66:dd:
                    0e:d1:00:02:8f:4c:25:59:ed:39:01:f1:e9:04:ca:
                    f3:9d:5c:ac:1b:83:2f:12:1e:1d:71:84:b5:c1:04:
                    17:ed:b5:c2:39:30:04:f6:b5:05:cf:11:e6:0d:95:
                    4e:b0:3c:12:ef:8d:db:6b:45:31:ab:bd:96:c2:7a:
                    54:d6:6d:d7:ad:4e:56:33:86:0b:8d:90:79:77:41:
                    84:c8:80:fa:2b:fd:f8:ba:dd:e2:2d:15:93:b0:06:
                    fc:80:35:3b:db:81:af:38:2f:85:0c:b3:8a:be:b6:
                    5f:4f:51:c1:61:b9:84:83:d6:ab:63:29:e6:4e:1c:
                    12:3b:70:98:c9:b9:2c:a8:e5:96:3b:13:6f:22:a4:
                    98:9f:2d:00:d0:22:fd:da:0d:26:ad:1e:fc:99:e5:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A3:A6:92:6C:22:E6:A3:C9:9F:60:F6:44:41:AC:A5:9A:D9:A9:7F
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:36:08:b8:18:5f:1c:62:eb:b9:e6:8d:df:85:97:4b:ff:1e:
         93:6b:1d:e4:3f:6d:c9:d2:eb:f2:cc:c9:d2:64:a0:d6:44:5c:
         43:01:14:9a:f5:d2:64:32:c6:2a:65:9b:7e:8a:b9:2a:27:fe:
         f8:32:db:82:4a:73:6e:83:7d:58:97:a3:db:a2:bb:f7:f0:1e:
         06:2a:57:6d:38:62:ba:75:c9:8a:b5:bd:76:5f:5c:6b:3f:99:
         9f:43:03:f9:d3:08:bc:5b:66:2a:84:e3:4a:a7:66:2a:c7:8b:
         2c:8b:94:f7:9f:69:d6:9b:56:79:b1:ba:24:ea:ea:6f:0e:fd:
         b7:d7:31:d5:5c:48:28:d8:09:27:7e:7a:49:1f:d9:9d:57:b9:
         6d:36:b6:2c:f9:10:c8:d5:74:f3:e1:1f:2a:40:4a:d6:1c:a2:
         99:d9:3d:22:05:ce:d3:af:3e:3a:97:f0:7e:b5:c5:82:86:26:
         46:5e:22:c9:17:7e:03:e4:e4:d9:ac:74:ca:24:b0:6b:64:1f:
         d7:98:cf:04:59:7a:b8:40:0c:ff:dd:dc:0c:c5:c1:73:e7:f5:
         60:6a:35:dc:1d:8f:5e:ec:0e:ce:c9:9c:d3:b0:76:15:f1:98:
         58:b0:fa:83:d5:94:dd:c9:cd:5e:31:0c:ee:55:2b:11:df:ba:
         d6:da:4e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOD5kf0wdilNtcg4Mi1et6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjUwODA5MDkwMDQzWhcNMjUwODEwMDkwMDQzWjAzMTEwLwYDVQQD
Eyg5ZWEzYTY5MjZjMjJlNmEzYzk5ZjYwZjY0NDQxYWNhNTlhZDlhOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaA+GyYuvv29vdzPyv2muMmSg65r
viQ8UHbpiRczPxtQbdBs4hUAnNJpWicQYwS0+1fuAQSFsWSnL1PyUbAQeNFqpbtD
yup10/6Z34fgE9mNQaLaw9M4b0UxgvGpT3MH5Y2ldeAdZt0O0QACj0wlWe05AfHp
BMrznVysG4MvEh4dcYS1wQQX7bXCOTAE9rUFzxHmDZVOsDwS743ba0Uxq72WwnpU
1m3XrU5WM4YLjZB5d0GEyID6K/34ut3iLRWTsAb8gDU724GvOC+FDLOKvrZfT1HB
YbmEg9arYynmThwSO3CYybksqOWWOxNvIqSYny0A0CL92g0mrR78meXzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6jppJsIuajyZ9g9kRBrKWa2al/MB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTYIuBhf
HGLrueaN34WXS/8ek2sd5D9tydLr8szJ0mSg1kRcQwEUmvXSZDLGKmWbfoq5Kif+
+DLbgkpzboN9WJej26K79/AeBipXbThiunXJirW9dl9caz+Zn0MD+dMIvFtmKoTj
SqdmKseLLIuU959p1ptWebG6JOrqbw79t9cx1VxIKNgJJ356SR/ZnVe5bTa2LPkQ
yNV08+EfKkBK1hyimdk9IgXO068+OpfwfrXFgoYmRl4iyRd+A+Tk2ax0yiSwa2Qf
15jPBFl6uEAM/93cDMXBc+f1YGo13B2PXuwOzsmc07B2FfGYWLD6g9WU3cnNXjEM
7lUrEd+61tpOkA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:52 2025 by rpki-client