Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File:                     o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier:          Q7CrFB0hkj0SYe66WRn7LgnvMGDWlaaMF86fjbyWdNs=
Subject key identifier:   56:89:A8:AB:F3:13:81:88:09:6B:56:30:01:99:21:7B:B5:E7:3C:3A
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer:       /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial:       019892C8B1490AFC3C653DC140C78FC7E99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number:          02EB
Signing time:             Sun 10 Aug 2025 07:01:22 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:22 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:22 +0000
Files and hashes:         1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
                          2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: 9biCT9OmlMAn6B2S9lO7+LO0ilPKfWYyjpybCPi4jj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:b1:49:0a:fc:3c:65:3d:c1:40:c7:8f:c7:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
        Validity
            Not Before: Aug 10 07:01:22 2025 GMT
            Not After : Aug 11 07:01:22 2025 GMT
        Subject: CN=5689a8abf3138188096b56300199217bb5e73c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:b6:89:9d:c2:dd:dd:85:d0:03:7a:e3:8f:
                    b6:1c:8c:bb:4c:8e:f2:cc:ac:da:ea:e2:01:e9:2f:
                    81:5c:12:de:e0:d3:74:d1:c9:71:9f:83:0b:13:94:
                    d4:57:4f:bd:58:7d:fa:fa:22:21:7b:fd:55:bb:77:
                    01:d0:04:cc:a0:f7:76:95:78:3d:94:dd:a4:99:e3:
                    7e:f9:e5:11:d1:dd:9e:ad:f1:04:ad:f6:81:0b:93:
                    c7:67:94:70:af:ae:53:92:d5:14:14:ea:7e:29:99:
                    cb:0b:21:0f:9c:d3:3d:85:a1:f2:3b:f5:a2:08:88:
                    11:d9:c0:5e:72:d6:a6:2f:ba:ec:6a:ed:ca:ce:fb:
                    8a:a1:3d:bd:8d:98:3b:50:9c:fb:4e:3e:71:34:1f:
                    ed:c2:0f:3d:3b:6e:c7:da:ce:0f:6e:61:11:20:6d:
                    36:a8:db:5c:d2:99:30:af:40:d2:eb:26:e1:09:97:
                    23:29:8a:53:c4:f4:82:f8:84:e8:da:be:95:c6:53:
                    a2:cf:ca:e4:27:9e:24:a5:2c:0b:16:8a:01:a9:43:
                    9c:22:60:3b:c5:f4:96:22:58:e6:2a:fb:ae:60:39:
                    0f:98:22:76:ad:5b:1e:2d:78:7f:ce:4c:7f:32:fe:
                    c9:79:92:f3:74:86:d6:37:c5:55:3d:57:b7:6d:8e:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:A8:AB:F3:13:81:88:09:6B:56:30:01:99:21:7B:B5:E7:3C:3A
            X509v3 Authority Key Identifier:
                keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:f3:91:51:92:ff:a5:b5:96:84:03:aa:0c:a9:4f:24:29:
         22:10:31:23:5e:f4:64:ca:d0:0b:b8:4b:36:8a:20:90:78:ee:
         68:71:93:99:75:e9:17:55:66:b7:f6:7e:bd:22:8b:87:a8:76:
         4c:d6:13:cf:a8:6c:71:68:a4:87:33:13:ee:49:08:21:8d:c2:
         e1:c0:cb:3d:0e:76:ae:c2:fd:8c:d5:63:9f:8a:cc:dd:51:b8:
         40:28:62:d0:e0:6a:76:2a:21:c0:df:76:8c:27:3b:1e:99:98:
         81:e4:7f:2d:0a:23:dd:d7:18:f4:62:bd:73:17:1f:b2:38:ee:
         ac:ae:6a:39:fb:2d:27:27:ac:38:e4:b5:c9:f5:d4:67:57:0d:
         81:56:be:c8:96:d1:4d:48:7a:bd:4f:60:f7:dd:39:c7:e0:7b:
         de:98:e3:ed:5d:42:a7:9c:c6:f1:6e:44:41:c3:4c:f8:fb:0d:
         7b:d0:8c:80:86:9c:67:fc:de:a0:77:b1:b6:4b:fd:ed:90:50:
         6f:f6:80:84:fb:33:90:c4:75:20:4c:c2:1b:fd:7d:17:0b:e2:
         5d:f2:09:0a:9e:27:46:45:72:cc:2d:f8:56:a4:98:55:28:b2:
         a0:6d:13:ae:1f:89:65:b6:f8:9e:be:8f:1c:1b:93:bf:b8:37:
         9f:87:ce:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyLFJCvw8ZT3BQMePx+mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl
NmM4OWEwHhcNMjUwODEwMDcwMTIyWhcNMjUwODExMDcwMTIyWjAzMTEwLwYDVQQD
Eyg1Njg5YThhYmYzMTM4MTg4MDk2YjU2MzAwMTk5MjE3YmI1ZTczYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvG2iZ3C3d2F0AN644+2HIy7TI7y
zKza6uIB6S+BXBLe4NN00clxn4MLE5TUV0+9WH36+iIhe/1Vu3cB0ATMoPd2lXg9
lN2kmeN++eUR0d2erfEErfaBC5PHZ5Rwr65TktUUFOp+KZnLCyEPnNM9haHyO/Wi
CIgR2cBectamL7rsau3KzvuKoT29jZg7UJz7Tj5xNB/twg89O27H2s4PbmERIG02
qNtc0pkwr0DS6ybhCZcjKYpTxPSC+ITo2r6VxlOiz8rkJ54kpSwLFooBqUOcImA7
xfSWIljmKvuuYDkPmCJ2rVseLXh/zkx/Mv7JeZLzdIbWN8VVPVe3bY6UOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaJqKvzE4GICWtWMAGZIXu15zw6MB8GA1UdIwQY
MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt
ZDExMjI5OWZmNjk1LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1
LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdLzkVGS
/6W1loQDqgypTyQpIhAxI170ZMrQC7hLNoogkHjuaHGTmXXpF1Vmt/Z+vSKLh6h2
TNYTz6hscWikhzMT7kkIIY3C4cDLPQ52rsL9jNVjn4rM3VG4QChi0OBqdiohwN92
jCc7HpmYgeR/LQoj3dcY9GK9cxcfsjjurK5qOfstJyesOOS1yfXUZ1cNgVa+yJbR
TUh6vU9g9905x+B73pjj7V1Cp5zG8W5EQcNM+PsNe9CMgIacZ/zeoHextkv97ZBQ
b/aAhPszkMR1IEzCG/19FwviXfIJCp4nRkVyzC34VqSYVSiyoG0Trh+JZbb4nr6P
HBuTv7g3n4fOYA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:35 2025 by rpki-client