Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File:                     _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier:          scydGrFVAns8SBRHnkf0SOs7q9WXL6h3FzN+gTxUUyY=
Subject key identifier:   94:FD:33:A9:ED:0A:CA:7E:B6:CE:74:60:15:72:CF:16:18:85:B5:5B
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer:       /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial:       01988FC7CF1FF3B245486E4102A21DC5F377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number:          0A5E
Signing time:             Sat 09 Aug 2025 17:01:33 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:33 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:33 +0000
Files and hashes:         1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: lTBS0QFcSOVnDCqM50e6flyCp8e/5MRdNmp7ypTlo5s=)
                          2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 17:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:cf:1f:f3:b2:45:48:6e:41:02:a2:1d:c5:f3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
        Validity
            Not Before: Aug  9 17:01:33 2025 GMT
            Not After : Aug 10 17:01:33 2025 GMT
        Subject: CN=94fd33a9ed0aca7eb6ce74601572cf161885b55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:29:0a:ab:6a:89:e0:95:76:2b:90:54:4a:
                    d8:05:3f:5a:d7:b7:85:55:26:03:cd:ef:40:28:51:
                    cf:10:69:a4:a6:ac:40:df:82:f2:0b:c4:7a:e6:d2:
                    63:c4:37:70:69:c8:16:0c:f4:ff:fc:4d:b7:11:48:
                    9b:b7:21:f2:ac:2b:86:d5:4f:79:2d:50:61:73:07:
                    bb:c7:4f:a5:dd:b8:b5:5c:b8:c2:19:ca:26:14:f8:
                    e4:4c:04:28:08:e6:9e:83:02:d6:9a:06:c9:da:05:
                    be:31:20:e3:e7:3e:e0:fa:72:49:26:52:44:f1:a4:
                    2f:97:8e:98:46:2c:a7:97:23:b4:78:a0:fb:7e:c7:
                    2b:13:d7:12:7b:d3:2e:b0:37:53:18:64:34:00:4d:
                    6d:68:68:af:06:58:19:e7:82:e6:af:c6:b2:ab:fb:
                    b9:0d:35:bc:08:d1:d6:0e:b0:ed:db:cf:7a:e3:a0:
                    bb:31:63:a1:8b:e6:30:39:38:4c:55:bf:62:78:cb:
                    95:28:4a:15:89:92:18:52:f4:c3:9c:cf:bf:48:17:
                    3f:d3:18:53:16:af:cd:e9:7a:0d:3a:85:37:61:c1:
                    72:40:41:dd:12:7c:0a:73:cd:0c:e6:64:13:27:4f:
                    5a:c0:04:a0:5b:8e:89:29:da:e2:f3:4f:29:3c:ba:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:33:A9:ED:0A:CA:7E:B6:CE:74:60:15:72:CF:16:18:85:B5:5B
            X509v3 Authority Key Identifier:
                keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:60:1a:56:3f:ef:48:b1:7c:c2:46:06:81:88:ba:91:c6:6a:
         08:90:b8:5d:dc:10:96:90:30:f4:13:5a:a9:72:15:71:3f:42:
         f8:1b:ab:89:07:e9:f8:d0:3a:85:87:c9:6a:d8:d0:e9:41:8a:
         67:92:9b:48:b9:6e:46:0b:37:dd:f2:e0:04:b4:5e:24:a1:b5:
         be:25:59:55:a8:a2:b3:5d:c8:e0:ff:9b:eb:ea:f9:19:ae:ee:
         18:af:d4:fc:00:27:dc:5b:54:03:cf:9a:20:6e:77:61:f2:b5:
         78:3d:af:57:50:52:58:40:c2:d1:fc:a3:db:41:85:92:13:3e:
         c3:a3:fb:f7:0f:1b:1b:ab:aa:03:db:df:75:ff:c8:a5:f3:57:
         63:50:f2:f5:66:47:bf:4b:05:4a:f5:d2:90:01:a2:40:4c:b6:
         95:c9:71:39:89:94:63:64:45:8c:a4:a8:a3:4b:36:80:e6:3b:
         21:b9:99:45:44:57:6e:57:d6:27:04:92:2c:3a:9f:45:10:65:
         b8:65:c6:f3:6a:40:cd:ef:4c:17:33:62:45:d2:9d:92:29:ad:
         5c:8f:36:65:de:d5:15:1f:9c:e6:fe:a0:9f:21:e6:f6:55:5c:
         cf:bf:a2:3f:29:78:a4:8e:05:ea:be:bb:20:ea:38:57:ca:79:
         ef:94:ce:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPx88f87JFSG5BAqIdxfN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjMyOTM2MGMxYjZmY2FmYmY1MjUzYTY1N2UzZTlkN2Yy
MjRmN2UwHhcNMjUwODA5MTcwMTMzWhcNMjUwODEwMTcwMTMzWjAzMTEwLwYDVQQD
Eyg5NGZkMzNhOWVkMGFjYTdlYjZjZTc0NjAxNTcyY2YxNjE4ODViNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiApCqtqieCVdiuQVErYBT9a17eF
VSYDze9AKFHPEGmkpqxA34LyC8R65tJjxDdwacgWDPT//E23EUibtyHyrCuG1U95
LVBhcwe7x0+l3bi1XLjCGcomFPjkTAQoCOaegwLWmgbJ2gW+MSDj5z7g+nJJJlJE
8aQvl46YRiynlyO0eKD7fscrE9cSe9MusDdTGGQ0AE1taGivBlgZ54Lmr8ayq/u5
DTW8CNHWDrDt289646C7MWOhi+YwOThMVb9ieMuVKEoViZIYUvTDnM+/SBc/0xhT
Fq/N6XoNOoU3YcFyQEHdEnwKc80M5mQTJ09awASgW46JKdri808pPLp1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT9M6ntCsp+ts50YBVyzxYYhbVbMB8GA1UdIwQY
MBaAFP7zKTYMG2/K+/UlOmV+Pp1/Ik9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgt
NTAwYjg4MzQyODllLzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgtNTAwYjg4MzQyODll
LzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2AaVj/v
SLF8wkYGgYi6kcZqCJC4XdwQlpAw9BNaqXIVcT9C+BuriQfp+NA6hYfJatjQ6UGK
Z5KbSLluRgs33fLgBLReJKG1viVZVaiis13I4P+b6+r5Ga7uGK/U/AAn3FtUA8+a
IG53YfK1eD2vV1BSWEDC0fyj20GFkhM+w6P79w8bG6uqA9vfdf/IpfNXY1Dy9WZH
v0sFSvXSkAGiQEy2lclxOYmUY2RFjKSoo0s2gOY7IbmZRURXblfWJwSSLDqfRRBl
uGXG82pAze9MFzNiRdKdkimtXI82Zd7VFR+c5v6gnyHm9lVcz7+iPyl4pI4F6r67
IOo4V8p575TOWA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:49:40 2025 by rpki-client