Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          YBIRewwy7gcnm2+9N2Eoc+TDUf3crzYn8Z/HIBw5FPI=
Subject key identifier:   D9:88:39:F5:93:39:8B:DA:9E:12:D2:31:64:EA:A0:EB:56:37:AA:8A
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019885B1830504FCB9725C2E7FFEEB75F53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0BAD
Signing time:             Thu 07 Aug 2025 18:00:59 +0000
Manifest this update:     Thu 07 Aug 2025 18:00:59 +0000
Manifest next update:     Fri 08 Aug 2025 18:00:59 +0000
Files and hashes:         1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
                          2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
                          3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: 0xw5mV/Y2AHCWGV8ssL4mqxOej7Axda/y+kQRWmFzkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:b1:83:05:04:fc:b9:72:5c:2e:7f:fe:eb:75:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Aug  7 18:00:59 2025 GMT
            Not After : Aug  8 18:00:59 2025 GMT
        Subject: CN=d98839f593398bda9e12d23164eaa0eb5637aa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:5a:7c:7a:b9:54:9a:1c:02:6e:3e:c7:b0:
                    89:0f:82:cc:60:47:77:bd:06:cf:66:5f:05:48:79:
                    b1:80:27:46:14:02:4d:dc:8e:7e:1a:9d:4d:78:08:
                    23:44:1f:00:9a:98:74:12:57:23:37:ac:08:dc:22:
                    70:bb:54:14:3b:01:fd:54:e5:f1:d8:a6:f7:20:02:
                    07:ca:31:fe:56:c7:7a:38:5c:b5:05:0f:58:f4:55:
                    56:35:dc:03:56:03:60:9d:8b:cc:a3:23:f3:35:7e:
                    11:9e:67:05:59:09:f1:22:87:f9:e9:1b:cd:94:ec:
                    38:6e:40:77:c7:23:0e:5b:25:87:1b:aa:2d:38:7f:
                    be:db:43:17:15:1e:8e:e4:46:55:1d:71:9b:0f:8b:
                    7d:d3:6c:6d:a1:fd:af:30:4a:94:50:00:5b:72:b3:
                    1e:7c:10:1f:11:48:66:b4:a8:35:34:fd:77:58:ea:
                    74:35:6b:6f:88:b3:6d:d3:4f:17:c6:39:81:17:b7:
                    02:b2:80:5b:81:03:ce:93:37:91:9c:e2:0d:b4:b2:
                    9f:b8:ec:d0:75:5e:6c:90:2d:06:7a:58:77:20:5a:
                    99:f2:e0:6e:34:55:54:a3:bb:28:9f:81:f5:7e:73:
                    c5:e0:35:43:1b:71:91:e6:e9:21:8b:d1:f0:89:d6:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:88:39:F5:93:39:8B:DA:9E:12:D2:31:64:EA:A0:EB:56:37:AA:8A
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:6c:09:bf:c0:04:bc:8a:06:f0:84:35:e3:1d:d9:70:17:
         58:de:7c:08:f4:f2:bd:e5:22:29:d6:f3:a3:d1:ae:ce:ac:3a:
         97:77:0f:59:80:c3:41:d0:35:36:3a:bc:96:1f:83:7d:c2:6a:
         b1:72:a4:38:89:43:54:01:9e:5f:26:05:74:61:75:16:2a:ed:
         47:98:a4:88:00:01:5f:31:04:1b:c6:ec:80:ec:33:33:4b:31:
         05:e7:a7:29:50:a7:12:5b:d0:81:e2:0e:e6:77:28:0c:d1:7f:
         89:ce:e4:ae:a3:af:86:fe:a9:e5:9b:85:93:3e:b7:fa:08:78:
         be:05:d2:7c:bf:01:be:1c:0e:dc:62:ed:83:db:45:92:4b:a8:
         df:a0:28:ef:82:ce:02:35:85:86:c5:31:24:4f:d2:e1:28:21:
         d4:36:44:5c:b9:1b:97:38:98:7d:4b:4c:67:b1:7a:02:74:85:
         1a:32:ff:95:50:53:dc:e4:3d:68:86:99:95:4e:20:ab:1f:e0:
         ca:03:3d:0a:93:e5:24:0b:dd:de:17:41:48:46:b8:0e:86:85:
         05:36:80:ab:94:38:81:92:07:1d:46:65:e9:9f:33:b4:ce:06:
         5f:9b:58:c7:fe:53:75:43:8b:f1:13:f7:09:78:2b:b3:84:75:
         14:dd:3f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsYMFBPy5clwuf/7rdfU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5
ODA5MGIwHhcNMjUwODA3MTgwMDU5WhcNMjUwODA4MTgwMDU5WjAzMTEwLwYDVQQD
EyhkOTg4MzlmNTkzMzk4YmRhOWUxMmQyMzE2NGVhYTBlYjU2MzdhYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28BafHq5VJocAm4+x7CJD4LMYEd3
vQbPZl8FSHmxgCdGFAJN3I5+Gp1NeAgjRB8Amph0ElcjN6wI3CJwu1QUOwH9VOXx
2Kb3IAIHyjH+Vsd6OFy1BQ9Y9FVWNdwDVgNgnYvMoyPzNX4RnmcFWQnxIof56RvN
lOw4bkB3xyMOWyWHG6otOH++20MXFR6O5EZVHXGbD4t902xtof2vMEqUUABbcrMe
fBAfEUhmtKg1NP13WOp0NWtviLNt008XxjmBF7cCsoBbgQPOkzeRnOINtLKfuOzQ
dV5skC0Gelh3IFqZ8uBuNFVUo7son4H1fnPF4DVDG3GR5ukhi9HwidZ/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmIOfWTOYvanhLSMWTqoOtWN6qKMB8GA1UdIwQY
MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt
MzA2YzU2NTEzNDNlLzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl
LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNRsCb/A
BLyKBvCENeMd2XAXWN58CPTyveUiKdbzo9Guzqw6l3cPWYDDQdA1Njq8lh+DfcJq
sXKkOIlDVAGeXyYFdGF1FirtR5ikiAABXzEEG8bsgOwzM0sxBeenKVCnElvQgeIO
5ncoDNF/ic7krqOvhv6p5ZuFkz63+gh4vgXSfL8BvhwO3GLtg9tFkkuo36Ao74LO
AjWFhsUxJE/S4Sgh1DZEXLkblziYfUtMZ7F6AnSFGjL/lVBT3OQ9aIaZlU4gqx/g
ygM9CpPlJAvd3hdBSEa4DoaFBTaAq5Q4gZIHHUZl6Z8ztM4GX5tYx/5TdUOL8RP3
CXgrs4R1FN0/Ng==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:14:24 2025 by rpki-client