Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File:                     VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier:          9IJ6XWyKK3SH2K8MWnyIyZHJ/h8sSFK+nP8gjeeywN4=
Subject key identifier:   76:79:61:A5:D4:CE:D1:CC:5A:E8:61:16:E5:B9:BB:10:E6:8E:66:69
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer:       /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial:       01987D8A74196C03F54320307E295FB523D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 04:01:22 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:22 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:22 +0000
Files and hashes:         1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
                          2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
                          3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: F33bx6qY8K7GeRUaKXiGEwzeEmHL+lb7fD4UIWqp2rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:74:19:6c:03:f5:43:20:30:7e:29:5f:b5:23:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
        Validity
            Not Before: Aug  6 04:01:22 2025 GMT
            Not After : Aug  7 04:01:22 2025 GMT
        Subject: CN=767961a5d4ced1cc5ae86116e5b9bb10e68e6669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:24:f4:0b:6c:67:04:58:20:d5:60:5e:3d:
                    b3:77:de:36:9c:26:7c:8e:1e:3a:28:3e:27:42:4c:
                    31:c8:90:ef:bf:87:45:43:31:1d:c9:f3:dd:3e:5d:
                    0e:85:0b:79:eb:cf:7f:5b:51:e7:fe:2d:48:f8:9c:
                    05:02:fa:81:81:ed:66:1e:a5:1c:83:da:31:fb:96:
                    c0:bd:e9:22:59:72:c5:8d:10:77:7b:9d:dc:83:e8:
                    99:4d:fa:b2:d4:39:3f:1d:47:34:21:02:ad:44:0c:
                    90:0c:35:d1:79:22:e5:c5:d2:3e:ad:08:9a:d7:1a:
                    c9:25:fb:4d:e3:cc:49:7c:f8:1f:31:a4:fe:01:4a:
                    cd:eb:de:fb:5e:75:d5:63:1a:bf:2a:2a:c2:f7:7b:
                    66:e4:d8:c6:c2:07:57:c5:9e:73:7c:59:fb:bf:33:
                    2c:fd:33:d2:74:1a:cf:3d:1a:6c:a1:53:72:04:bf:
                    eb:85:39:96:e9:e7:0d:b5:9f:c2:9b:54:3c:b4:1c:
                    5d:f2:76:31:73:ee:38:e9:3e:6c:ab:cd:e7:36:c9:
                    c1:7b:2b:53:4a:f0:0a:98:dd:a7:b9:7a:d0:1c:98:
                    f4:0b:25:09:76:1a:6d:ca:5c:7e:19:04:fd:6c:0f:
                    1d:fb:53:3f:49:77:04:73:be:af:00:91:df:f0:48:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:61:A5:D4:CE:D1:CC:5A:E8:61:16:E5:B9:BB:10:E6:8E:66:69
            X509v3 Authority Key Identifier:
                keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:ec:4a:e2:40:26:63:d2:fd:5b:ae:71:81:d2:de:b4:0a:
         36:69:52:1b:14:aa:1e:cb:1f:f9:ef:55:21:a5:10:01:a3:4b:
         02:17:13:1b:59:c7:7c:ad:b5:26:40:7e:74:c3:29:2f:4f:40:
         c7:6d:83:14:e4:7c:ba:e8:a2:33:5b:7b:3e:6d:c7:55:6d:09:
         06:b6:f0:c7:72:57:21:15:17:17:99:fe:98:1d:91:cb:53:40:
         ca:db:21:ea:6a:df:e0:7d:9c:1d:33:84:8c:18:c1:5f:c7:9c:
         01:8a:a3:f9:7e:92:f7:f5:c6:78:ba:31:e7:bf:de:db:ad:fd:
         b9:f5:68:5a:2f:6f:92:76:56:3d:1f:7b:f3:12:01:d2:43:13:
         4b:a3:cc:e3:b4:79:20:c7:2b:0f:45:36:fc:02:1c:3b:6e:ce:
         2d:ae:6e:49:02:1a:ff:f9:13:ac:50:d5:16:33:04:d9:52:81:
         c7:45:cc:7c:66:ec:99:10:46:76:19:24:5b:30:85:46:57:98:
         b0:48:9e:d9:c8:47:ed:b7:90:3a:e1:6e:fc:92:c6:b5:0f:dc:
         94:ca:7a:5b:fa:78:8a:4d:b0:41:93:3d:73:18:af:20:4a:e7:
         42:c6:85:d8:a6:bf:93:ba:b4:38:43:4a:09:70:80:8a:e3:93:
         be:ef:a3:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9inQZbAP1QyAwfilftSPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGI3YzBjOGJhZTYxMGY3ZTUxOWMwNDg1YTQ3NzNiY2Vi
NDhkYWIwHhcNMjUwODA2MDQwMTIyWhcNMjUwODA3MDQwMTIyWjAzMTEwLwYDVQQD
Eyg3Njc5NjFhNWQ0Y2VkMWNjNWFlODYxMTZlNWI5YmIxMGU2OGU2NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcEk9AtsZwRYINVgXj2zd942nCZ8
jh46KD4nQkwxyJDvv4dFQzEdyfPdPl0OhQt5689/W1Hn/i1I+JwFAvqBge1mHqUc
g9ox+5bAvekiWXLFjRB3e53cg+iZTfqy1Dk/HUc0IQKtRAyQDDXReSLlxdI+rQia
1xrJJftN48xJfPgfMaT+AUrN6977XnXVYxq/KirC93tm5NjGwgdXxZ5zfFn7vzMs
/TPSdBrPPRpsoVNyBL/rhTmW6ecNtZ/Cm1Q8tBxd8nYxc+446T5sq83nNsnBeytT
SvAKmN2nuXrQHJj0CyUJdhptylx+GQT9bA8d+1M/SXcEc76vAJHf8Eg2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ5YaXUztHMWuhhFuW5uxDmjmZpMB8GA1UdIwQY
MBaAFFULfAyLrmEPflGcBIWkdzvOtI2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2It
ZmYyNWJhNTk5MDMxLzEvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2ItZmYyNWJhNTk5MDMx
LzEvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvfsSuJA
JmPS/VuucYHS3rQKNmlSGxSqHssf+e9VIaUQAaNLAhcTG1nHfK21JkB+dMMpL09A
x22DFOR8uuiiM1t7Pm3HVW0JBrbwx3JXIRUXF5n+mB2Ry1NAytsh6mrf4H2cHTOE
jBjBX8ecAYqj+X6S9/XGeLox57/e2639ufVoWi9vknZWPR978xIB0kMTS6PM47R5
IMcrD0U2/AIcO27OLa5uSQIa//kTrFDVFjME2VKBx0XMfGbsmRBGdhkkWzCFRleY
sEie2chH7beQOuFu/JLGtQ/clMp6W/p4ik2wQZM9cxivIErnQsaF2Ka/k7q0OENK
CXCAiuOTvu+jlg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:57 2025 by rpki-client