Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File:                     mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier:          w8ZEwq37l+VYsSLQkhsKT5JeAc0i6t54TwdVFFwLY1k=
Subject key identifier:   6D:14:6B:D9:1C:FD:C5:BB:FB:15:33:BD:B8:05:4E:0F:4C:82:47:46
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer:       /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial:       019873E3703C00DE2ABE2A6D21F1805F7542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 07:02:21 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:21 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:21 +0000
Files and hashes:         1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
                          2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: fAJ78FKV5JRcRhskaTcxCkQsbIRmcc+8fKrKGyZiPF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:70:3c:00:de:2a:be:2a:6d:21:f1:80:5f:75:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
        Validity
            Not Before: Aug  4 07:02:21 2025 GMT
            Not After : Aug  5 07:02:21 2025 GMT
        Subject: CN=6d146bd91cfdc5bbfb1533bdb8054e0f4c824746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:ed:4a:55:1e:d8:84:a1:29:ef:a7:e3:40:
                    20:2e:ee:93:65:da:5e:44:c0:64:57:90:02:2a:30:
                    4a:b1:d4:a9:ed:63:35:95:b1:c3:8c:36:6b:ff:10:
                    df:96:22:ee:a3:13:cb:93:4c:58:1d:ab:49:31:07:
                    ed:f3:31:51:81:71:2f:68:41:d3:db:df:18:03:23:
                    18:30:be:69:6a:c3:be:2b:05:ad:19:89:8d:66:95:
                    5f:72:e0:8c:a4:ea:f8:f8:c3:1f:a7:7c:0c:90:7d:
                    14:69:89:a9:3b:29:d7:89:d1:4b:3f:d0:2e:0c:35:
                    08:60:31:cb:58:d4:ee:b1:03:3c:33:f4:22:37:45:
                    46:a1:1d:b6:14:d4:7e:0e:f9:32:45:d8:d1:c1:ce:
                    ee:aa:e1:ed:57:7a:8b:19:8c:6f:8d:be:e4:3d:85:
                    fb:cd:e5:af:1c:d5:da:28:c7:aa:d2:19:f2:44:fb:
                    5d:11:8a:3e:c7:c7:3d:17:49:13:94:f6:66:ab:36:
                    9c:9c:0f:11:cd:d2:e1:09:c4:50:89:fb:c1:b5:c0:
                    66:cb:b3:eb:7d:48:d6:d1:42:e2:dc:06:34:0b:f3:
                    fb:49:98:38:18:53:4a:b5:4b:11:78:9b:46:d5:af:
                    6e:31:a0:de:9f:b1:9d:75:03:0a:78:22:8e:b4:97:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:6B:D9:1C:FD:C5:BB:FB:15:33:BD:B8:05:4E:0F:4C:82:47:46
            X509v3 Authority Key Identifier:
                keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:8f:b1:15:2d:0c:1a:9d:b1:9d:0a:7d:c7:d3:cd:3e:67:
         eb:73:4f:5b:49:05:07:c9:15:50:52:53:31:02:e7:94:8f:fb:
         49:82:00:4d:92:18:85:6b:fc:d2:7e:a3:06:87:1d:05:ab:f6:
         45:26:99:f3:ba:b2:7c:3e:6c:2d:58:84:09:72:47:11:c2:37:
         4d:31:bf:20:ca:ac:e4:9e:54:18:c4:31:02:45:17:5f:b2:ae:
         e3:60:97:fc:62:6a:3e:71:04:06:87:aa:6f:fb:6e:0d:9a:0e:
         31:6e:18:48:92:fe:ad:09:6b:5a:2f:f5:1d:8c:93:8b:1c:16:
         06:de:9f:0d:06:22:2f:70:11:ee:bd:74:8d:34:5d:2e:21:ba:
         23:c1:42:72:ae:73:25:ce:a9:40:9b:27:71:36:f8:ab:bd:b7:
         74:66:59:91:39:99:23:e0:55:46:ab:3e:54:47:14:90:45:b7:
         78:0d:50:7d:f3:52:f5:d0:06:a3:02:2d:7f:d6:5a:63:3c:e3:
         a7:53:ef:d2:2d:8e:3a:ce:fd:e0:21:a2:dd:a4:f9:50:31:51:
         de:c8:62:4a:99:79:fe:23:f9:75:13:1f:72:f1:2b:22:9d:3b:
         fa:31:db:10:44:aa:2e:02:cc:ca:97:ef:10:65:41:0d:99:be:
         a6:e2:1a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43A8AN4qviptIfGAX3VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjUwODA0MDcwMjIxWhcNMjUwODA1MDcwMjIxWjAzMTEwLwYDVQQD
Eyg2ZDE0NmJkOTFjZmRjNWJiZmIxNTMzYmRiODA1NGUwZjRjODI0NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUztSlUe2IShKe+n40AgLu6TZdpe
RMBkV5ACKjBKsdSp7WM1lbHDjDZr/xDfliLuoxPLk0xYHatJMQft8zFRgXEvaEHT
298YAyMYML5pasO+KwWtGYmNZpVfcuCMpOr4+MMfp3wMkH0UaYmpOynXidFLP9Au
DDUIYDHLWNTusQM8M/QiN0VGoR22FNR+DvkyRdjRwc7uquHtV3qLGYxvjb7kPYX7
zeWvHNXaKMeq0hnyRPtdEYo+x8c9F0kTlPZmqzacnA8RzdLhCcRQifvBtcBmy7Pr
fUjW0ULi3AY0C/P7SZg4GFNKtUsReJtG1a9uMaDen7GddQMKeCKOtJcDYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0Ua9kc/cW7+xUzvbgFTg9MgkdGMB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjmPsRUt
DBqdsZ0KfcfTzT5n63NPW0kFB8kVUFJTMQLnlI/7SYIATZIYhWv80n6jBocdBav2
RSaZ87qyfD5sLViECXJHEcI3TTG/IMqs5J5UGMQxAkUXX7Ku42CX/GJqPnEEBoeq
b/tuDZoOMW4YSJL+rQlrWi/1HYyTixwWBt6fDQYiL3AR7r10jTRdLiG6I8FCcq5z
Jc6pQJsncTb4q723dGZZkTmZI+BVRqs+VEcUkEW3eA1QffNS9dAGowItf9ZaYzzj
p1Pv0i2OOs794CGi3aT5UDFR3shiSpl5/iP5dRMfcvErIp07+jHbEESqLgLMypfv
EGVBDZm+puIaOg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:22 2025 by rpki-client