Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          WPrbtUlBOz3BWwDjYslj4Llsmvc/gKYmiRzS3MZKObE=
Subject key identifier:   26:9B:66:7A:65:E5:43:2A:C8:29:93:17:44:2D:40:C9:CE:8F:05:57
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       019881D4FE158F1C02AAA1EAA3989802FF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0B4C
Signing time:             Thu 07 Aug 2025 00:01:16 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:16 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:16 +0000
Files and hashes:         1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
                          2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: IM7QncBOP43adwaL8pOB/jblJ5mDhGmmjnr+VLEF5R0=)
                          3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
                          4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
                          5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:fe:15:8f:1c:02:aa:a1:ea:a3:98:98:02:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Aug  7 00:01:16 2025 GMT
            Not After : Aug  8 00:01:16 2025 GMT
        Subject: CN=269b667a65e5432ac8299317442d40c9ce8f0557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:21:d9:51:39:ef:92:9f:4d:44:21:02:3f:
                    37:49:27:28:ad:c4:5c:0a:7b:f3:52:dd:b7:16:a8:
                    ab:69:9e:8d:b7:12:af:d0:fc:b2:ab:41:6d:da:2b:
                    aa:b7:77:cd:33:1c:1b:02:96:66:19:73:17:6a:df:
                    be:45:ee:68:e2:4a:b7:ee:98:0f:4f:e5:c0:25:3c:
                    48:15:e9:83:be:57:68:0b:69:22:55:b0:38:e9:11:
                    e8:25:de:a9:1c:d3:8a:46:ba:e0:5a:a3:71:43:cc:
                    17:ba:6e:eb:84:46:bc:79:15:5c:db:82:eb:5a:a6:
                    b6:ce:08:87:77:5c:f0:61:f6:0a:8a:79:da:ff:57:
                    07:d9:77:c5:5f:62:84:b6:7a:13:3a:60:88:55:52:
                    d5:a2:78:5b:a8:2a:ca:11:1b:72:66:da:7a:1b:de:
                    18:16:30:28:8d:e9:89:b1:96:6c:3b:5c:30:2f:ea:
                    a6:57:b9:2b:91:92:26:93:c7:5c:80:21:7f:84:29:
                    17:60:21:51:3d:63:5c:fa:4c:cc:8a:f4:bb:2a:c8:
                    66:59:2d:38:ae:3d:fa:ea:e4:df:1c:13:bc:df:c8:
                    99:fc:5e:88:06:d8:bf:e6:6a:8d:f8:6d:f8:1c:93:
                    3a:a4:a7:71:8f:c5:ac:4c:e6:31:86:f6:16:79:e4:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:66:7A:65:E5:43:2A:C8:29:93:17:44:2D:40:C9:CE:8F:05:57
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:4e:4b:c9:89:22:92:fc:5b:14:24:0d:8e:ce:b7:7d:fa:
         52:bb:16:5d:2a:77:d3:d2:a2:e3:b9:6e:df:60:48:ec:cd:7d:
         48:c7:d1:3e:c0:c1:ac:aa:31:49:cd:db:4c:ae:3a:11:ae:f6:
         b3:02:06:08:34:bf:29:9f:ff:f6:a6:53:91:3d:d1:7a:b8:10:
         7a:01:92:5a:ed:c4:30:4a:d0:c0:74:ed:83:20:9f:ee:34:89:
         7c:8d:44:81:8e:f5:a4:2e:1f:95:30:a5:bc:7e:10:ee:a1:82:
         45:09:a6:a6:ed:1e:95:83:74:d7:bd:0c:a9:4a:ab:ad:c1:24:
         a2:0d:3b:3e:ea:d2:50:19:02:42:c0:78:8e:06:c6:ce:99:59:
         63:7b:eb:52:7a:b8:f1:33:53:6f:c1:7b:a0:ec:c1:ed:14:8a:
         d6:12:3f:93:11:39:76:bb:03:fa:57:68:97:fb:7f:94:55:de:
         1e:51:52:89:a4:10:ed:9a:fe:c2:a3:bc:f8:28:74:a0:54:18:
         bf:be:c4:9f:88:35:a4:fa:22:6e:f7:d5:9b:9f:c5:3a:97:d9:
         64:c2:bd:ad:b9:5c:d1:ea:17:d4:b8:a8:27:ac:59:e3:b8:dc:
         80:80:36:63:6b:26:c0:fd:1b:6d:f3:a7:6e:4f:d7:d3:fb:9f:
         10:cd:22:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1P4VjxwCqqHqo5iYAv92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjUwODA3MDAwMTE2WhcNMjUwODA4MDAwMTE2WjAzMTEwLwYDVQQD
EygyNjliNjY3YTY1ZTU0MzJhYzgyOTkzMTc0NDJkNDBjOWNlOGYwNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq0h2VE575KfTUQhAj83SScorcRc
CnvzUt23FqiraZ6NtxKv0Pyyq0Ft2iuqt3fNMxwbApZmGXMXat++Re5o4kq37pgP
T+XAJTxIFemDvldoC2kiVbA46RHoJd6pHNOKRrrgWqNxQ8wXum7rhEa8eRVc24Lr
Wqa2zgiHd1zwYfYKinna/1cH2XfFX2KEtnoTOmCIVVLVonhbqCrKERtyZtp6G94Y
FjAojemJsZZsO1wwL+qmV7krkZImk8dcgCF/hCkXYCFRPWNc+kzMivS7KshmWS04
rj366uTfHBO838iZ/F6IBti/5mqN+G34HJM6pKdxj8WsTOYxhvYWeeQ1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCabZnpl5UMqyCmTF0QtQMnOjwVXMB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs71OS8mJ
IpL8WxQkDY7Ot336UrsWXSp309Ki47lu32BI7M19SMfRPsDBrKoxSc3bTK46Ea72
swIGCDS/KZ//9qZTkT3RergQegGSWu3EMErQwHTtgyCf7jSJfI1EgY71pC4flTCl
vH4Q7qGCRQmmpu0elYN0170MqUqrrcEkog07PurSUBkCQsB4jgbGzplZY3vrUnq4
8TNTb8F7oOzB7RSK1hI/kxE5drsD+ldol/t/lFXeHlFSiaQQ7Zr+wqO8+Ch0oFQY
v77En4g1pPoibvfVm5/FOpfZZMK9rblc0eoX1LioJ6xZ47jcgIA2Y2smwP0bbfOn
bk/X0/ufEM0ifQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:24 2025 by rpki-client