Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          q9PkDZ+zUPyLJNGknXaGnU+xsLU24MXOqqOu554Dquc=
Subject key identifier:   F9:67:99:35:7A:D0:C9:41:5A:42:EE:90:B4:BE:00:36:A5:19:D6:5D
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       019889C57AD15BB5D1F16924CCF05ECD5C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          09FE
Signing time:             Fri 08 Aug 2025 13:01:17 +0000
Manifest this update:     Fri 08 Aug 2025 13:01:17 +0000
Manifest next update:     Sat 09 Aug 2025 13:01:17 +0000
Files and hashes:         1: PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa (hash: 5l/O42PBuCxXNh+SRi17b1mrEEDB7Yq2rN5qBu2/Ncg=)
                          2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
                          3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: /nQiQcQ7sODGZA8RLKf7nzw9leBR5RCFB2Fn0Msw+C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c5:7a:d1:5b:b5:d1:f1:69:24:cc:f0:5e:cd:5c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Aug  8 13:01:17 2025 GMT
            Not After : Aug  9 13:01:17 2025 GMT
        Subject: CN=f96799357ad0c9415a42ee90b4be0036a519d65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:30:e8:73:b5:32:4d:9b:c9:76:f3:b7:f5:
                    50:e2:cd:ae:ab:99:a1:b5:84:69:bb:3d:1a:3d:d8:
                    52:5f:73:5e:33:85:58:9e:26:4c:ab:25:bb:43:92:
                    9f:87:47:03:1e:de:af:0b:b9:41:91:3d:9f:ab:e5:
                    f1:19:31:a6:c2:9e:16:6f:de:45:78:3e:fa:1d:30:
                    4c:4c:96:37:63:5c:e0:d6:86:ca:c0:da:ea:31:7b:
                    42:c4:52:f3:35:84:5f:fb:15:71:7f:e1:bd:b9:de:
                    fe:5c:39:a9:63:8d:b2:d8:5f:36:1c:95:8e:99:92:
                    04:58:03:92:e7:47:a5:aa:92:bd:95:dd:eb:81:44:
                    fb:11:7f:e7:e6:9a:f3:c4:bf:9d:a1:1c:4e:07:10:
                    a4:bb:45:ae:fc:79:e1:0f:fd:e8:f5:ff:93:64:4f:
                    b3:78:69:88:13:ae:f2:86:93:9d:67:78:83:53:13:
                    89:3c:52:26:3d:95:51:a3:e4:80:61:b7:ae:99:e9:
                    a4:1f:54:8b:5c:08:40:96:57:be:f6:7e:fb:18:60:
                    6b:57:5d:2f:cc:29:d1:f9:18:2a:17:f0:35:5b:16:
                    ec:02:62:86:e5:a4:9d:60:f3:1e:23:a7:d3:08:dc:
                    ab:b3:43:a0:cf:86:7f:9f:2c:ba:40:52:04:a7:73:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:99:35:7A:D0:C9:41:5A:42:EE:90:B4:BE:00:36:A5:19:D6:5D
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:6f:e5:34:bb:96:e4:6e:bf:bc:dc:c6:f3:40:4a:84:65:
         32:65:01:f8:14:2a:8d:48:47:38:3e:a4:7f:3b:f6:9e:bf:2f:
         a6:a1:73:31:0c:71:01:9e:9a:3b:91:07:e2:bd:72:a2:85:fe:
         de:49:47:64:da:d1:bb:f5:76:27:10:b7:2f:09:78:49:20:08:
         73:ca:40:e6:a7:1a:44:d0:5a:44:de:e5:f7:0e:3d:e7:3a:94:
         f1:d2:14:61:00:67:48:2e:53:d6:31:2f:e8:f7:79:ad:61:cd:
         e3:c5:97:d7:cc:ac:c7:ec:b8:7a:40:d1:ca:93:69:7f:b2:51:
         5a:73:7c:22:74:1c:4b:4b:c0:67:a4:d1:31:06:8f:36:0e:ef:
         68:84:13:85:ee:e2:16:c0:0d:5e:df:9a:69:b3:4b:d4:14:01:
         a3:d5:92:0d:6e:b7:a8:d7:54:7e:72:40:9a:f4:bf:14:65:4c:
         86:d5:28:f1:89:a4:d7:91:14:98:69:02:8e:7e:51:6f:43:a4:
         91:90:5f:e3:7c:d9:3d:85:32:66:12:c0:a0:50:e0:f2:6c:2f:
         67:58:ad:0b:5e:8b:b1:b8:35:d8:35:38:26:37:7a:64:f1:2f:
         96:16:e1:dd:a3:f6:6d:28:22:f7:e9:2e:32:90:2a:10:88:72:
         6e:3a:60:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJxXrRW7XR8WkkzPBezVwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjUwODA4MTMwMTE3WhcNMjUwODA5MTMwMTE3WjAzMTEwLwYDVQQD
EyhmOTY3OTkzNTdhZDBjOTQxNWE0MmVlOTBiNGJlMDAzNmE1MTlkNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y8w6HO1Mk2byXbzt/VQ4s2uq5mh
tYRpuz0aPdhSX3NeM4VYniZMqyW7Q5Kfh0cDHt6vC7lBkT2fq+XxGTGmwp4Wb95F
eD76HTBMTJY3Y1zg1obKwNrqMXtCxFLzNYRf+xVxf+G9ud7+XDmpY42y2F82HJWO
mZIEWAOS50elqpK9ld3rgUT7EX/n5przxL+doRxOBxCku0Wu/HnhD/3o9f+TZE+z
eGmIE67yhpOdZ3iDUxOJPFImPZVRo+SAYbeumemkH1SLXAhAlle+9n77GGBrV10v
zCnR+RgqF/A1WxbsAmKG5aSdYPMeI6fTCNyrs0Ogz4Z/nyy6QFIEp3NAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlnmTV60MlBWkLukLS+ADalGdZdMB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn5v5TS7
luRuv7zcxvNASoRlMmUB+BQqjUhHOD6kfzv2nr8vpqFzMQxxAZ6aO5EH4r1yooX+
3klHZNrRu/V2JxC3Lwl4SSAIc8pA5qcaRNBaRN7l9w495zqU8dIUYQBnSC5T1jEv
6Pd5rWHN48WX18ysx+y4ekDRypNpf7JRWnN8InQcS0vAZ6TRMQaPNg7vaIQThe7i
FsANXt+aabNL1BQBo9WSDW63qNdUfnJAmvS/FGVMhtUo8Ymk15EUmGkCjn5Rb0Ok
kZBf43zZPYUyZhLAoFDg8mwvZ1itC16Lsbg12DU4Jjd6ZPEvlhbh3aP2bSgi9+ku
MpAqEIhybjpgfw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:32 2025 by rpki-client