Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
File:                     rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json)
Hash identifier:          1wvFJtqrY5ttSOOrqe5rcA33mi+CSXLt+fR2kyZasNE=
Subject key identifier:   3D:2D:C8:8C:1B:A1:2B:DF:4E:B2:3D:BC:0D:02:49:60:84:2E:A1:A7
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       01987E9C777DDDE8E3B912C13C174029E4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
Manifest number:          1649
Signing time:             Wed 06 Aug 2025 09:00:39 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:39 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:39 +0000
Files and hashes:         1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=)
                          2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=)
                          3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=)
                          4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=)
                          5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=)
                          6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=)
                          7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=)
                          8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=)
                          9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=)
                          10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=)
                          11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=)
                          12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=)
                          13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=)
                          14: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (hash: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=)
                          15: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=)
                          16: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=)
                          17: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: 4r5fsUm3q6tmsLw8n0UQZ0KfHbGnWITMx6q/655QkOQ=)
                          18: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=)
                          19: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=)
                          20: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:77:7d:dd:e8:e3:b9:12:c1:3c:17:40:29:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Aug  6 09:00:39 2025 GMT
            Not After : Aug  7 09:00:39 2025 GMT
        Subject: CN=3d2dc88c1ba12bdf4eb23dbc0d024960842ea1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:8e:9f:b5:1e:46:73:42:c2:5d:1c:0e:2c:
                    cb:a5:54:d6:47:60:ec:87:a2:91:76:b1:4c:f2:83:
                    3e:fb:8d:8e:94:06:b1:ad:f7:b5:aa:5d:8d:6b:4f:
                    8d:54:d1:e9:59:c5:6e:49:a3:9e:05:40:4d:c8:8d:
                    89:29:23:4a:04:4f:3e:30:34:66:0f:08:38:8c:ba:
                    df:f0:6f:cf:0e:cd:09:1d:34:94:0c:d1:d7:87:7a:
                    7b:f7:2d:54:4e:6c:d7:c3:9d:f6:a4:8c:96:3f:f5:
                    5e:35:8b:e3:fc:fa:c2:8e:34:80:d4:ef:63:4c:b5:
                    c8:af:ce:80:63:0b:d0:80:e4:ac:68:27:fa:72:1e:
                    70:45:de:e1:ea:8c:f2:66:95:b5:3f:67:cd:01:6d:
                    2d:89:a1:10:e2:ea:2e:ff:b1:dc:45:07:35:31:11:
                    d3:1f:b3:79:a2:ee:e3:07:ed:93:78:02:7b:1d:40:
                    64:7c:31:b0:ee:45:b3:b6:25:b3:40:b0:0a:2a:db:
                    24:69:b0:08:44:19:a6:c8:8d:44:bc:e1:d5:88:78:
                    78:f1:c1:bf:9d:b4:54:64:72:ed:7f:8e:a4:ec:5d:
                    d6:46:a3:f8:33:e0:a9:3e:73:64:85:f5:58:52:ba:
                    e4:f5:c0:55:71:47:7a:2c:c2:f0:d0:e2:aa:e2:a6:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2D:C8:8C:1B:A1:2B:DF:4E:B2:3D:BC:0D:02:49:60:84:2E:A1:A7
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:5a:8e:e3:a2:64:14:84:04:e8:72:26:0d:1d:20:75:2d:
         d7:c6:18:30:68:d0:93:ec:81:26:57:2f:20:2a:e6:30:c2:ae:
         08:54:fc:7a:4b:4f:af:0a:27:d6:ea:f3:a6:13:20:73:af:4b:
         6e:42:ac:c1:9c:67:4c:93:83:9f:c7:ba:0e:ba:1c:36:cd:16:
         2b:7e:5d:d8:12:d8:e6:aa:6d:18:2e:c0:7c:b1:4c:cc:d2:77:
         c6:0b:2d:52:57:ca:92:53:d6:5e:55:57:c9:33:8b:66:ac:f5:
         c0:82:2b:41:f1:c8:8f:ef:de:67:c8:72:e3:92:d5:d2:78:6a:
         5f:40:84:fc:26:7b:d5:60:ad:7e:76:62:42:39:f9:47:88:a7:
         9b:2e:0f:f3:0e:72:cf:c7:84:11:62:08:b8:3f:c8:cb:89:64:
         d6:f7:82:1b:64:68:03:cc:09:e5:ad:17:a5:25:67:a2:33:b1:
         06:14:00:60:5a:cc:ca:e2:c3:35:dc:96:f5:86:9a:a7:21:b0:
         29:a3:9b:39:42:f8:77:b0:6a:5a:1c:8f:dc:cc:4f:c3:75:6f:
         a5:03:8c:26:d9:76:75:61:ed:f8:fa:9f:3f:0f:2c:55:f4:17:
         2b:a3:ce:0c:04:7a:57:46:ff:ee:72:4e:22:fa:c3:ae:f3:c8:
         2e:13:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:36:31 2025 by rpki-client