Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File:                     JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier:          WmOoIzqa6Rt8bxT7Ybjx+LW5WaJsek8EwPE0jSHNjuM=
Subject key identifier:   93:BA:BF:A1:7E:77:35:43:AB:A8:13:77:D6:12:B2:02:BA:26:FC:D1
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       0198729842136D567F2DC3C7FF833A32A71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number:          167A
Signing time:             Mon 04 Aug 2025 01:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:37 +0000
Files and hashes:         1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
                          2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: PBmIl45gJLeR75tQ6PO8qOXqjKJywEfgVwxva7GcnMU=)
                          3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
                          4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:42:13:6d:56:7f:2d:c3:c7:ff:83:3a:32:a7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: Aug  4 01:00:37 2025 GMT
            Not After : Aug  5 01:00:37 2025 GMT
        Subject: CN=93babfa17e773543aba81377d612b202ba26fcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:a6:43:19:ae:c5:93:95:a4:f7:59:1d:d7:
                    d1:67:91:e9:01:41:23:83:07:13:87:73:79:7d:d9:
                    4f:4e:ab:a9:00:d6:79:36:9f:04:89:ee:6d:0c:2b:
                    fa:86:71:6a:93:df:2d:b2:a7:98:cd:39:9a:f8:fe:
                    b9:29:9e:88:21:2b:61:05:d5:76:da:9e:71:c7:7b:
                    d4:87:48:48:cb:48:59:91:5c:1a:0d:7c:8b:3b:7c:
                    90:f2:88:e9:7d:55:24:56:b7:4c:70:a6:02:f7:fe:
                    63:29:77:4e:ef:f9:05:44:8f:07:45:4c:6f:14:49:
                    9d:d4:61:f2:fb:46:28:51:ca:0b:d5:66:39:8d:0a:
                    2e:57:e9:bb:57:8c:0d:41:b4:46:e9:53:71:eb:db:
                    bd:75:9e:c9:49:f3:f4:0f:1f:4d:23:a3:f7:2e:d7:
                    24:d4:2d:d1:0e:16:3c:4c:8d:5f:ce:6f:6c:90:8c:
                    55:f5:b7:0b:52:72:7a:7e:8f:af:c3:49:5e:da:79:
                    53:29:d7:b5:e5:c2:ed:8b:fb:d1:45:64:d4:ff:7c:
                    55:c4:7f:ae:1e:6d:bd:ef:b8:0f:9b:d4:9a:11:86:
                    c7:c7:46:3f:d2:23:22:2a:ad:14:69:d1:e5:02:55:
                    fa:5e:b1:bd:dc:ea:a1:43:f8:3d:81:ca:7f:c7:06:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:BF:A1:7E:77:35:43:AB:A8:13:77:D6:12:B2:02:BA:26:FC:D1
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:0b:54:c2:59:1c:3e:d4:6c:e5:84:f9:74:f4:1c:d9:69:
         36:89:8d:d2:44:3c:aa:86:c1:dc:18:3d:ba:c9:04:4d:72:31:
         70:93:d0:1e:8d:8a:b2:c8:9c:51:75:d7:6a:7c:14:c3:b8:57:
         f5:ea:41:f0:63:ae:77:98:1d:f3:f3:19:85:d4:95:d8:c5:71:
         d9:39:00:82:cf:80:f5:3e:13:92:5f:76:47:af:b2:3b:8c:29:
         13:5c:0e:13:b6:1b:2a:26:0b:2b:68:bf:37:7d:b2:ad:cf:05:
         97:da:53:cb:31:f1:50:08:2c:a5:ed:0c:74:95:22:27:df:2e:
         4b:84:e9:c5:af:26:cb:ae:f2:70:8c:be:83:36:04:9a:5f:5d:
         8e:99:51:c4:8e:ff:89:6a:57:17:3a:14:30:d7:32:1f:82:ab:
         97:92:f2:9e:04:41:6e:90:37:a8:3c:d4:70:a2:eb:45:a6:2f:
         c6:69:97:5d:be:61:71:e9:0c:6c:e4:c7:ea:ee:ff:23:c5:b4:
         04:14:f0:72:55:77:25:ac:73:c3:61:e0:ba:6a:82:c8:8e:8b:
         37:1c:a5:bb:8f:04:de:90:5a:c8:b2:e1:9b:89:49:61:be:d3:
         e8:38:f5:5f:55:c3:b1:33:dc:41:fa:9d:1a:3c:12:33:c5:5a:
         a4:bf:c9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymEITbVZ/LcPH/4M6MqceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUwODA0MDEwMDM3WhcNMjUwODA1MDEwMDM3WjAzMTEwLwYDVQQD
Eyg5M2JhYmZhMTdlNzczNTQzYWJhODEzNzdkNjEyYjIwMmJhMjZmY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22OmQxmuxZOVpPdZHdfRZ5HpAUEj
gwcTh3N5fdlPTqupANZ5Np8Eie5tDCv6hnFqk98tsqeYzTma+P65KZ6IISthBdV2
2p5xx3vUh0hIy0hZkVwaDXyLO3yQ8ojpfVUkVrdMcKYC9/5jKXdO7/kFRI8HRUxv
FEmd1GHy+0YoUcoL1WY5jQouV+m7V4wNQbRG6VNx69u9dZ7JSfP0Dx9NI6P3Ltck
1C3RDhY8TI1fzm9skIxV9bcLUnJ6fo+vw0le2nlTKde15cLti/vRRWTU/3xVxH+u
Hm2977gPm9SaEYbHx0Y/0iMiKq0UadHlAlX6XrG93OqhQ/g9gcp/xwZTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO6v6F+dzVDq6gTd9YSsgK6JvzRMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX0LVMJZ
HD7UbOWE+XT0HNlpNomN0kQ8qobB3Bg9uskETXIxcJPQHo2KssicUXXXanwUw7hX
9epB8GOud5gd8/MZhdSV2MVx2TkAgs+A9T4Tkl92R6+yO4wpE1wOE7YbKiYLK2i/
N32yrc8Fl9pTyzHxUAgspe0MdJUiJ98uS4Tpxa8my67ycIy+gzYEml9djplRxI7/
iWpXFzoUMNcyH4Krl5LyngRBbpA3qDzUcKLrRaYvxmmXXb5hcekMbOTH6u7/I8W0
BBTwclV3Jaxzw2HgumqCyI6LNxylu48E3pBayLLhm4lJYb7T6Dj1X1XDsTPcQfqd
GjwSM8VapL/JwQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:12 2025 by rpki-client